summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2007-01-08discard packet and return if ifp is not a member of the bridgeMichele Marchetto
2006-12-29Add IFM_ETH_FMASK. From NetBSD.Mark Kettenis
2006-12-28knf, from bred@Todd T. Fries
2006-12-28check if ifqueue has anything queued before doing the dance ofTheo de Raadt
2006-12-27Add IFM_ETH_RXPAUSE and IFM_ETH_TXPAUSE. From NetBSD.Mark Kettenis
2006-12-22add special handling for "urpf-failed" with carp interfaces. theReyk Floeter
2006-12-21in pf_route(), initialize ro to NULL at the beginning. if left un-Daniel Hartmeier
2006-12-15make pflog(4) count; ok hennig@ deraadt@Otto Moerbeek
2006-12-14in "BAD/loose state" messages, also print the packet's original sequenceDaniel Hartmeier
2006-12-13wrap ipv6 portion with #ifdef INET6. from cmetzJun-ichiro itojun Hagino
2006-12-13use IN6_IS_SCOPE_EMBED to check kernel-internal form addressesJun-ichiro itojun Hagino
2006-12-13IPv6 passive OS fingerprinting.Jun-ichiro itojun Hagino
2006-12-12ansify the enc codeReyk Floeter
2006-12-11refer to the RSTP point to point option as "PTP" instead of "P2P".Reyk Floeter
2006-12-07use LINK_STATE_IS_UP(ifp0->if_link_state) instead ofReyk Floeter
2006-12-06Missing newline in printf.Bernd Ahlers
2006-12-03Add Rapid Spanning Tree Protocol support (802.1d-2004) based on workReyk Floeter
2006-11-30no need for #if NPF > 0 inside #if NPF > 0Henning Brauer
2006-11-28add additional link states to report the half duplex / full duplexReyk Floeter
2006-11-24Check the reference count for interface addresses when detachingCan Erkin Acar
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-11-24never call an ioctl without process context! this diffs checks theReyk Floeter
2006-11-20ioctl to explicitly remove source tracking nodes,Ryan Thomas McBride
2006-11-16conditional for appending the pf mbuf tag in pf_test/pf_test6 was wrong,Henning Brauer
2006-11-16no need to always attach pfsync0 any more. ok mpf mcbrideHenning Brauer
2006-11-16introduce if_creategroup() to create an empty interface group.Henning Brauer
2006-11-16knfJun-ichiro itojun Hagino
2006-11-10Fix an mbuf leak in an error path. OK brad@Claudio Jeker
2006-11-01Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends onRyan Thomas McBride
2006-11-01poll errors should be POLLERR, not some random E valueTed Unangst
2006-11-01remove redundant null check, ok ryanHenning Brauer
2006-10-31slightly improve consustency and readability, no functional changeHenning Brauer
2006-10-31in pfsync_update_tdb, when there is no pfsync interface, we must returnHenning Brauer
2006-10-31hard to believe people still manage to commit non-compiling code once in a whileTheo de Raadt
2006-10-31make pfsync a clonable too, but prevent more than one instance fromHenning Brauer
2006-10-31ether_input_mbuf() isn't necessary, turn it into a macro and deal withJason Wright
2006-10-28Fix handling of errors wrt to MINDEX. From NetBSD bpf_filter 1.32;Otto Moerbeek
2006-10-27Split ruleset manipulation functions out into pf_ruleset.c to allow them toRyan Thomas McBride
2006-10-25allow up to 16 pflog interfaces, ok mcbrideHenning Brauer
2006-10-25add a "u_int8_t logif" to struct pfrule to select to which pflog interfaceHenning Brauer
2006-10-23make the pflog interface clonable.Henning Brauer
2006-10-21the create and destroy functions for clonable interfaces return 0 onHenning Brauer
2006-10-17increase max pf tag name size from 16 to 64 characters.Reyk Floeter
2006-10-11Allow the 'quick' keyword on an anchor. IFF there is a matching rule insideRyan Thomas McBride
2006-09-26Fix compilation, okay henning@ mpf@Pedro Martelletto
2006-09-18allow RST from TCP client, even if client does not send data after SYN;Markus Friedl
2006-09-18fix tos (type-of-service) comparisons. for rules which use 'tos x', compareDaniel Hartmeier
2006-08-30allow DIOCNATLOOK to look up NAT states for protocols without portDamien Miller
2006-08-29allow the carp demotion counter to be changed by arbitary values as longHenning Brauer
2006-08-28Check for illegal option lengths when parsing LCP packetsCan Erkin Acar