summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2001-06-26Replicated TCP sequence tracking code in PF from Guido's IPF paper.Mike Frantzen
2001-06-26sighNiels Provos
2001-06-26pflog_packet fails on NULL mbufNiels Provos
2001-06-26mea culpaDaniel Hartmeier
2001-06-25extend the logging via a new link header type. export interface, direction,Niels Provos
action and rule nr.
2001-06-25remaining lists converted to TAILQsDaniel Hartmeier
2001-06-25use TAILQ instead of homegrown list, other lists will followDaniel Hartmeier
2001-06-25ANSIfyArtur Grabowski
2001-06-25first stab at packet logging for pf. inspired by late night dreams of art.Niels Provos
we just pass drop and passed packets to different pseudo interface that can be listened to with bpf.
2001-06-25Unnecessary gotos.Artur Grabowski
2001-06-25Rework COMMITRULES.Artur Grabowski
First we swap in the new rules, then we free the old (freeing can be done outside splnet).
2001-06-25revised ioctl interface, first getopt version of pfctlDaniel Hartmeier
2001-06-25display correct direction in logjasoni
2001-06-25Rename the rest of the structs to be consistent.Artur Grabowski
2001-06-25fix -> cksum_fixupArtur Grabowski
2001-06-25No c++ comments.Artur Grabowski
2001-06-25Even more global variables with too common names.Artur Grabowski
2001-06-25More renaming.Artur Grabowski
2001-06-25Avoid common names. Needs more work.Artur Grabowski
2001-06-25rename tree_node -> pf_tree_nodeArtur Grabowski
2001-06-25moreArtur Grabowski
2001-06-25no point using a char here.Artur Grabowski
2001-06-25Detect loops, itojun@ okAngelos D. Keromytis
2001-06-25IF_DROP()Angelos D. Keromytis
2001-06-25Use tags to detect loops. In the future, perhaps we'll use them toAngelos D. Keromytis
actually also send the packet out the right interface.
2001-06-25packetfilter -> pf in messagesKjell Wooding
2001-06-25Copyright update.Angelos D. Keromytis
2001-06-25PACKETFILTER -> NPFKjell Wooding
remove IPF cruft. ok jason
2001-06-25No need to double-clear the mbuf flags and tags.Angelos D. Keromytis
2001-06-25remove inlines they are plain wrongMichael Shalayeff
2001-06-25Move common post M_COPY_HDR manipulation to the macro itself; angelos@ ok.Federico G. Schwindt
2001-06-25do not drop unsupported protocol. default to pass. needs to be configurableNiels Provos
later.
2001-06-25Some KNF, do not have a char fiel between pointers, it createsNiklas Hallqvist
padding. Do not inline expensive functions, esp. not such declared after first use.
2001-06-25use only ioctl return values found in errno.hDaniel Hartmeier
2001-06-24do not refer uninitialized varJun-ichiro itojun Hagino
2001-06-24printf string fixJun-ichiro itojun Hagino
2001-06-24remove assumption that protocol header follows the ip header.Jun-ichiro itojun Hagino
always pass "off" around. pull_hdr: remove asumption that ip header is on the top of mbuf. we use pull_hdr on icmp payload (= original ip packet) parsing. avoid mbuf overrun on icmp parsing. never use pointer operations to get the pointer to next header.
2001-06-24rename ioctlbuffer to pfioc.Artur Grabowski
2001-06-24u_long/u_short and memcpy/memset changesDaniel Hartmeier
2001-06-24fix error returns from open and closeArtur Grabowski
2001-06-24more attempts at cleanupTheo de Raadt
2001-06-24- redefine vlan_input_tag to take mbuf * and tag onlyJason Wright
- call ether_input_mbuf() instead of ether_input() - most work done by fgsch
2001-06-24Use pool for state, tree, nat, rdr, etc.Artur Grabowski
Remove some unnecessary printfs.
2001-06-24Use ETHER_IS_MULTICAST macro; jason@ ok.Federico G. Schwindt
2001-06-24more cleaningTheo de Raadt
2001-06-24pack structures better; dhartmei okTheo de Raadt
2001-06-24REGENTS? ;)Daniel Hartmeier
2001-06-24REGENTS? ;)Daniel Hartmeier
2001-06-24PACKETFILTER_H now PFVAR_H. thanks smartKjell Wooding
2001-06-24on pull_hdr(), check short m->m_pkthdr.len. fix mesasge (it's not the firstJun-ichiro itojun Hagino
fragment, it's too short packet)