Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-07-20 | KASSERT instead of assert. Gives smaller RAMDISKS. | Artur Grabowski | |
2004-07-17 | Repair breakage from the hackathon's time conversion. Using the timestamp | Mike Frantzen | |
as an extension to the sequence number got disabled because of the failing idle limit on PAWS checks. One more thing off my todo list. I need an intern | |||
2004-07-16 | remove netiso shitz, millert ok | Henning Brauer | |
2004-07-13 | spelling; dlg | Theo de Raadt | |
2004-07-12 | remove PF_FORWARD (which was introduced by ipv6 reass-on-scrub). | Jun-ichiro itojun Hagino | |
daniel found it. | |||
2004-07-11 | backout IPv6 reass-on-scrub patch (more work needs to be done). | Jun-ichiro itojun Hagino | |
requested by deraadt | |||
2004-07-11 | Create the group when adding a dynamic interface that's not yet plugged in. | Ryan Thomas McBride | |
ok henning@ | |||
2004-07-08 | Make 0/0 table entries work; also fix a problem setting the network mask | Ryan Thomas McBride | |
on v6 addresses. Reported by Ilya A. Kovalenko, fix from Cedric Berger. | |||
2004-07-08 | Move carp_output() call to after mcopy of MAC address so the virtual address | Ryan Thomas McBride | |
does not get overwritten. Report and fix from Chris Pascoe. | |||
2004-07-05 | KNF | Henning Brauer | |
2004-07-04 | remove the half-baked and bogus pfi_dynamic_drivers() which tries to guess | Henning Brauer | |
which drivers are hotpluggable. since we removed the stupid check from pfctl a few days ago nothing relies on this any more. ok pb@ mcbride@ | |||
2004-07-03 | quick workaround until proper PF_FORWARD reass gets implemented. | Jun-ichiro itojun Hagino | |
2004-06-27 | Media support for the 802.11 framework, missing in that commit the other day. | Todd C. Miller | |
2004-06-26 | cleanup ioctl for ifgroups; ok pb@ | Markus Friedl | |
2004-06-26 | Add a table-driven implementation of ether_crc32_be(). | Christian Weisgerber | |
From Seishi Hiragushi via FreeBSD PR kern/49957. Also, while we're here, make the loop counter size_t. ok mcbride@ | |||
2004-06-25 | introduce "interface groups" | Philipp Buehler | |
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok. | |||
2004-06-25 | correct "scrub in" behavior for IPv6. | Jun-ichiro itojun Hagino | |
remaining TODO: - "forward" case kernel behavior (IPv4 too), then pfctl syntax change - red-black tree | |||
2004-06-25 | re-introduce PF_INOUT and move PF_FORWARD def to the end. | Jun-ichiro itojun Hagino | |
pfctl is assuming that the keyword == 0 in its parser! (see decl for "dir"). | |||
2004-06-25 | Add tap aka layer 2 tunneling support to tun(4). It can be enabled by setting | Claudio Jeker | |
the link0 flag via ifconfig(8). OK markus@, canacar@ also tested by ish@ | |||
2004-06-25 | Minor fixes suggested by nordin@ and henning@ | Thorsten Lockert | |
ok millert@ | |||
2004-06-25 | IPv6 reassembly on "scrub" directive. | Jun-ichiro itojun Hagino | |
caveats: (to be addressed soon) - "scrub in" should queue fragments back into ip6intrq again, but somehow it does not happen - the packet is kept inside reass queue. need investigation - ip6_forwarding path is not tested - does not use red-black tree. somehow red-black tree behaved badly and was not robust. performance issue, the above one is more important. good things: - "scrub out" is perfectly ok - i think now we can inspect upper-layer protocol fields (tcp port) even if ip6 packet is fragmented. - reass queue will be cleaned up properly by timeout (60sec). we might want to impose pool limit as well | |||
2004-06-24 | KNF, cleanup, readability fixes... this hurt | Henning Brauer | |
ok itojun claudio | |||
2004-06-24 | This moves access to wall and uptime variables in MI code, | Thorsten Lockert | |
encapsulating all such access into wall-defined functions that makes sure locking is done as needed. It also cleans up some uses of wall time vs. uptime some places, but there is sure to be more of these needed as well, particularily in MD code. Also, many current calls to microtime() should probably be changed to getmicrotime(), or to the {,get}microuptime() versions. ok art@ deraadt@ aaron@ matthieu@ beck@ sturm@ millert@ others "Oh, that is not your problem!" from miod@ | |||
2004-06-23 | pfr_commit_ktable calls functions that can result in the current | Ryan Thomas McBride | |
ktable being destroyed, which makes it unsafe in a SLIST_FOREACH. Fix from Chris Pascoe | |||
2004-06-22 | Import current NetBSD/FreeBSD 802.11 framework. | Todd C. Miller | |
Based in part on a diff from Matthew Gream. | |||
2004-06-22 | Pull the plug on source-based routing until remaining bugs are eradicated. | Cedric Berger | |
No need to reconfig kernel or rebuild userland stuff. requested deraadt@, help beck@ | |||
2004-06-22 | Unbreak previous commit ok markus@ | Can Erkin Acar | |
2004-06-22 | Add a new "filter drop" flag to bpf and related ioclts. | Can Erkin Acar | |
When enabled, it notifies the calling interface that the packet matches a bpf filter and should be dropped. ok henning@ markus@ frantzen@ | |||
2004-06-22 | Don't use time-based random number generation | Thorsten Lockert | |
ok millert@ deraadt@ | |||
2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert | |
things such that code that only need a second-resolution uptime or wall time, and used to get that from time.tv_secs or mono_time.tv_secs now get this from separate time_t globals time_second and time_uptime. ok art@ niklas@ nordin@ | |||
2004-06-21 | don't accept SADB_X_EXT_UDPENCAP if encapsulation is disabled; ok ho@ | Markus Friedl | |
2004-06-21 | move the IFF_UP check to bpfwrite; ok canacar@ | Markus Friedl | |
2004-06-21 | make it possble to use IPsec over link-local address (policy table uses | Jun-ichiro itojun Hagino | |
sin6_scope_id, IPsec porion uses embedded form). beck ok | |||
2004-06-21 | Get rid of pf_test_eh() wrapper. | Ryan Thomas McBride | |
ok cedric@ henning@ | |||
2004-06-21 | Don't use time for random starting value... "love it" deraadt@ | Thorsten Lockert | |
2004-06-20 | undo mbuf cluster breakage that causes free'ed packets to show up on the | Bob Beck | |
input queues when using dhcp and hostap wi, or xl, or fxp.... ok art@ | |||
2004-06-19 | require RTF_MPATH to enter a multipath route with RTM_ADD. | Cedric Berger | |
route(8) takes a new -mpath modifier to enter a multipath route. requested deraadt@, ok itojun@ mcbride@ millert@ | |||
2004-06-19 | starting TDM T1->E3->whatever media interface model we will attempt | Theo de Raadt | |
to program to over the next week; thanks for feedback in developing this from cedric, claudio, chris, alex | |||
2004-06-14 | Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS, | Cedric Berger | |
DIOCRINABEGIN, DIOCRINACOMMIT ioctls. Use DIOCXBEGIN/DIOCXCOMMIT/DIOCXROLLBACK instead. ok beck@ dhartmei@ henning@ | |||
2004-06-14 | de-__P | Theo de Raadt | |
2004-06-13 | debranch SMP, have fun | Niklas Hallqvist | |
2004-06-11 | Eliminate a dereference after pool_put when an inactive/no-longer referenced | Ryan Thomas McBride | |
table is destroyed in pfr_setflags_ktable. Fix from Chris Pascoe | |||
2004-06-10 | rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reserved | Daniel Hartmeier | |
keyword in C++. ok henning@, cedric@ | |||
2004-06-07 | Make deletion of a few addresses much faster on big tables. ok claudio@ | Cedric Berger | |
2004-06-06 | extend routing table to be able to match and route packets based on | Cedric Berger | |
their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@ | |||
2004-06-04 | Remove the multicast address when we unconfigure the syncif. | Ryan Thomas McBride | |
2004-06-02 | tables like to allocate lots of memory at once. use the previous | Ted Unangst | |
pool allocator, _nointr. testing/ok beck@ cedric@ | |||
2004-05-31 | thinko, reported by Fernando Braga | Daniel Hartmeier | |
2004-05-31 | remove the broken auto-append-'0' code; ok canacar, deraadt, thierry | Markus Friedl | |
2004-05-29 | introduce SIOCSIFDESCR and SIOCGIFDESCR to maintain interface | joshua stein | |
descriptions, configurable with ifconfig help from various, ok deraadt@ |