summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-07-10correct another incorrect comparison in ip6 normalization.Jun-ichiro itojun Hagino
2003-07-10wrong comparison of IPv6 packetsizeJun-ichiro itojun Hagino
2003-07-09check if m->m_pkthdr.len is too shortJun-ichiro itojun Hagino
2003-07-09don't check exact ip6_plen and m->m_pkthdr.len match, as ip6_input()Jun-ichiro itojun Hagino
2003-07-09do not flip ip_len/ip_off in netinet stack. deraadt ok.Jun-ichiro itojun Hagino
2003-07-09KNFDaniel Hartmeier
2003-07-05backout 1.29; problem reported by Rukh w/ userland ppp.Jun-ichiro itojun Hagino
2003-07-04cosmetic changes to keep the different code paths in sync; ok henningMarkus Friedl
2003-07-04-add a "natpass" field to pf_ruleHenning Brauer
2003-07-04bad redundant copy; ok danielMarkus Friedl
2003-07-03unused global. dhartmei okJun-ichiro itojun Hagino
2003-07-01wrap pf_normalize_ip6() by #ifdef INET6. pointed out by Wouter ClarieJun-ichiro itojun Hagino
2003-06-30change that queue ID allocator so it always has the queues sorted by ID.Henning Brauer
2003-06-30reset interface statistics when loginterface is changed, closes pr3332,Daniel Hartmeier
2003-06-30missing pf_tag_purge()Henning Brauer
2003-06-30move prototype for pf_tag_purge() to pfvar.hHenning Brauer
2003-06-29normalize IPv6 packet (no reass, but it is a start). dhartmei & henning okJun-ichiro itojun Hagino
2003-06-29unused global. dhartmei okJun-ichiro itojun Hagino
2003-06-28redundant (pfvar.h already have it)Jun-ichiro itojun Hagino
2003-06-28remove duplicated prototype (they are in pfvar.h). dhartmei okJun-ichiro itojun Hagino
2003-06-27protos for userland buildTheo de Raadt
2003-06-27do pf_tagname2tag() in DIOCCHANGERULE as well.Henning Brauer
2003-06-27move down pf_tag_unref() calls in pf_rm_rule() to after the check wetehr thereHenning Brauer
2003-06-25add a pf_tagname field to ifbrlreq and a pf_tag field to ifbrlnode.Henning Brauer
2003-06-24in the ipv6 case, allow route-to to route to link-local addressesHenning Brauer
2003-06-24KNFHenning Brauer
2003-06-24recover code that requires exact match on rtm_change/lock (lost in netbsd 1.16).Jun-ichiro itojun Hagino
2003-06-23Don't remove anchor too early in table code, it makes PF use freed memory.Cedric Berger
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-20Add MSS support to the synproxy. The client's MSS is sent to the server,Daniel Hartmeier
2003-06-20Extend 'BAD ICMP' debug message, include icmp type/code and outer IP headerDaniel Hartmeier
2003-06-18Do not panic on no memory available when allocating bufs, pass ENOBUFSHenning Brauer
2003-06-14Use source's window scaling factor (instead of destination's) whenDaniel Hartmeier
2003-06-12in FIONREAD and FREAD, use IFQ_POLL instead of looking at if_snd.ifq_len /Henning Brauer
2003-06-10It would kind of help if the flags member was initialized, otherwise randomDaniel Hartmeier
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
2003-06-08Returns the correct array size.Cedric Berger
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
2003-06-03move some prototypes to pfvar.h. needed soon.Henning Brauer
2003-06-03provide pf_tag2tagname which is the reverse of pf_tagname2tag. needed soon.Henning Brauer
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
2003-06-02nuke clause 3 & 4Jason Wright
2003-05-30KNF & ANSI, jason agreesHenning Brauer
2003-05-30o the timeout is int, not u_int32_tHenning Brauer
2003-05-24Unused variable.Cedric Berger
2003-05-18speed hack: delay fetching the mbuf tag until we really need it (hit aHenning Brauer
2003-05-18Merge pf_send_ack() and _send_syn() into a generic _send_tcp().Daniel Hartmeier
2003-05-17Correct two comment typos.Daniel Hartmeier
2003-05-17With rdr we want the source IP from the packet, not the source IP fromRyan Thomas McBride
2003-05-17allow inverse matching on tagsHenning Brauer