summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2004-04-09move some of the non-interrupt pools from the small kmem_map to the muchMike Frantzen
2004-04-05make pftag ** (pass pointer by reference), otherwise it's never updated.Daniel Hartmeier
2004-04-05Prevent stale states (states older than the local version) from overwritingRyan Thomas McBride
2004-03-31in the tcp md5sig case allow empty (wildcard) src or dstHenning Brauer
2004-03-28Check variables in incoming packets which can cause problems if they're setRyan Thomas McBride
2004-03-27wrap if_down() in splimp; tholo ran into splassert, miod tholo okTheo de Raadt
2004-03-26Properly m_copyback() modified TCP sequence number after demodulationDaniel Hartmeier
2004-03-25Fix icmp checksum when sequence number modlation is being used.Ryan Thomas McBride
2004-03-23Hold off for 1 second before beginning bulk transfer. Avoids loopingRyan Thomas McBride
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride
2004-03-19remove trailing ';' in PFLOG_REAL_HDRLEN definition. ok dhartmei@ mcbride@Mike Frantzen
2004-03-18state->rule.ptr shall not be NULL. from Jon Coller. ok dhartmei@ mcbride@Cedric Berger
2004-03-15Kill redundant(IPv4) and bogus(IPv6) tests. found+ok dhartmei@Cedric Berger
2004-03-15plug memory leak in error pathHenning Brauer
2004-03-11Don't call pf_src_tree_remove_state() on error in pf_insert_state(),Ryan Thomas McBride
2004-03-09KNF, ok cedric@ deraadt@Ryan Thomas McBride
2004-03-02don't leak mbuf if uiomove fails; from netbsd;Markus Friedl
2004-02-28- Don't permit 0-padded unit numbers on cloned interfaces. Bug repoprtRyan Thomas McBride
2004-02-24sysctl knob for bpf tunables. some tips from canacar@Ted Unangst
2004-02-24Remove redundant logging from pf_test_other().Ryan Thomas McBride
2004-02-24KNFRyan Thomas McBride
2004-02-23prevent backward jumps; pls@egsys.hu; ok canacar, deraadtMarkus Friedl
2004-02-20Make pfsync deal with clearing states bound to a group or interface (egRyan Thomas McBride
2004-02-19Makes pfctl -Fs and pfctl -w works with the optional -i specifier.Cedric Berger
2004-02-19the 2nd round of the qid assignment change.Kenjiro Cho
2004-02-17Tighten pfi_skip_if() up, and a bit of KNF. ok mcbride@Cedric Berger
2004-02-1518 -> ETHER_ADDR_LEN*3 in ether_sprintf() for clarityAnil Madhavapeddy
2004-02-13Do an explicit pf_update_anchor_rules() after an anchor gets removed.Marco Pfatschbacher
2004-02-12from camield:Henning Brauer
2004-02-10KNFDaniel Hartmeier
2004-02-10plug mbuf leak (ip_fragment() always free mbuf on error). tested by cedric,Jun-ichiro itojun Hagino
2004-02-10KNFHenning Brauer
2004-02-10Make pfsync work correctly with IP options on 64-bit alignmentRyan Thomas McBride
2004-02-09Repair "set loginterface". Don't flush stats on pfctl -e. pf_status.sinceCedric Berger
2004-02-08if_detach_rtdelete(): abort and restart rn_walktree() if a cloning routeMarkus Friedl
2004-02-08Fix kernel panic which occurs under very high load:Ryan Thomas McBride
2004-02-07Use the offset provided to us by m_pulldown(), rather than using size ofRyan Thomas McBride
2004-02-06as seen in netbsd. crank bpf sizes to adapt to faster networks.Ted Unangst
2004-02-04Fix a number of bugs with setting pool limits which I introduced withRyan Thomas McBride
2004-02-02missing #if NPF > 0. ok henning@Cedric Berger
2004-02-02Do not evaluate pfi_index2kif[ifp->if_index] if PF is disabled.Cedric Berger
2004-01-27drop packet if kif == NULL; ok henning deraadtMarkus Friedl
2004-01-27don't convert tcpmd5 to ip-over-ip in SADB_X_GETSPROTO; from hshoexerMarkus Friedl
2004-01-26- use SIOC[GS]WAVELAN.Federico G. Schwindt
2004-01-22- Include the value of pf_state.timeout in pfsync messagesRyan Thomas McBride
2004-01-20the pfsync interface does not have a baudrate, so don't claim 100 MBit/sHenning Brauer
2004-01-20Ignore pfsync packets if pf is not running.Ryan Thomas McBride
2004-01-19Update comment; handling PFSYNC_ACT_UPD in pfsync_input() is no longerRyan Thomas McBride
2004-01-19Clean up creation and expiry timestamp calculations.Ryan Thomas McBride
2004-01-18Port is already stored in network byte order, no need to convert.Ryan Thomas McBride