summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2001-08-02KNFTheo de Raadt
2001-08-01stateless tcp normalization along the lines of the normalization paper byNiels Provos
2001-07-30never before has a file so often deviated from KNFTheo de Raadt
2001-07-30use queue.h macrosJason Wright
2001-07-29Implement rule skipping. This is a transparent evaluation optimization,Daniel Hartmeier
2001-07-27PF_IN/PF_OUT aren't defined if NPF <= 0, deal with it.Jason Wright
2001-07-27variable name "gif" is way too generic - use "gif_softc". sync with kameJun-ichiro itojun Hagino
2001-07-25nat proxy port randomization by ben fleis.Daniel Hartmeier
2001-07-25Make sure pkthdr.rcvif is correct before calling pf_test()Jason Wright
2001-07-25- unconditionalize call to bridge_input() (fewer #ifdef's and NPF>0 is defaul...Jason Wright
2001-07-25Initialization of arpcom * based on ifp was too soon: ifp can change asJason Wright
2001-07-21print additional debugging information for 'insert invalid' messages. occurs ...Daniel Hartmeier
2001-07-21missing \n in a log() callJun-ichiro itojun Hagino
2001-07-21repair validation on RTAX_GENMASK insertion. has been broken since 44bsd.Jun-ichiro itojun Hagino
2001-07-20use a variable, not it's default value from constantMichael Shalayeff
2001-07-20make equal() macro to check sa_len match, otherwise we will touchJun-ichiro itojun Hagino
2001-07-19Fix/complete the handling of the binary ops >< and <> to behaveKenneth R Westerback
2001-07-18fix pf_get_rdr() for single port (dport2 == 0) rules. found by lebel@.Daniel Hartmeier
2001-07-17support min-ttl, okay dhartmei@Niels Provos
2001-07-17normalize ip_off, make IP_DF stripping optional, return rst is a flag now.Niels Provos
2001-07-17ip normalization codeNiels Provos
2001-07-17split ip normalization out into a separate file, okay dhartmei@Niels Provos
2001-07-15increase src->state to 1 when creating state from intermediate (non-SYN) pack...Daniel Hartmeier
2001-07-14use int instead of signed char. doesn't use more memory (padding occurs) and ...Daniel Hartmeier
2001-07-13indent.Federico G. Schwindt
2001-07-13everytime i clean in here, i get a 250 line diff...Theo de Raadt
2001-07-11Simplify pf_pull_hdr(), don't use inner IP header's ip_len or ip_offDaniel Hartmeier
2001-07-10Missing breaks.Marc Espie
2001-07-10another lame OpenBSD tag.Federico G. Schwindt
2001-07-09do compare in host order. found by millert@.Daniel Hartmeier
2001-07-09More lame OpenBSD tags.Federico G. Schwindt
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier
2001-07-07get rid of compiler warningMarco S Hyman
2001-07-06style change #2, avoid (a == b) == cDaniel Hartmeier
2001-07-06style change #1, avoid ternary operatorDaniel Hartmeier
2001-07-06theo requests less archaic styleChris Cappuccio
2001-07-06don't evaluate rules for packets that have state but mismatch seq range (coul...Daniel Hartmeier
2001-07-06Allow negative match on interface name for nat and rdrChris Cappuccio
2001-07-06some cleanup, okay dhartmei@Niels Provos
2001-07-06Indentation.Hakan Olsson
2001-07-06fix userland side prototypesTheo de Raadt
2001-07-06do not use quad for countersTheo de Raadt
2001-07-05initalize fragment correctlyNiels Provos
2001-07-05IPComp. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05$OpenBSD$ tagAngelos D. Keromytis
2001-07-05KNFAngelos D. Keromytis
2001-07-05Include files for IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-04Make preprocessor happier, don't give it untasty tokens at end of input.Marc Espie
2001-07-04call ip_output() correctly, use ICMP_MINLEN, only m_copyback() where needed. ...Daniel Hartmeier
2001-07-03Use PADUP() instead of hand-crafted weirdness; also, it's supposed toAngelos D. Keromytis