summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2009-12-14fix sticky-address - by pretty much re-implementing it. still followingHenning Brauer
2009-12-13Ensure that if_start() is called at IPL_NET.Joel Sing
2009-12-08move "pf: key search" and "pf: key setup" messages to PF_DEBUG_NOISYStuart Henderson
2009-12-03fix order dependency of pfsync interface setup, with claudio;Otto Moerbeek
2009-11-26magical fix for a fault which reliably brings my firewalls down. i thinkDavid Gwynne
2009-11-24kill obsolete natpassHenning Brauer
2009-11-23with the old code we initialized the state keys early in some casesHenning Brauer
2009-11-23one kinda-missing log |= PFLOG_FORCE in the v6 case, spotted by claudioHenning Brauer
2009-11-23sync the handling of the log flag from pf_test (where it is correct)Henning Brauer
2009-11-23pf_test_fragment: we need to bail out if action == PF_DROP, notHenning Brauer
2009-11-23sync some comments with realityHenning Brauer
2009-11-23remove the nat_rule pointer on pf_state and pf_pdesc, obsolete afterHenning Brauer
2009-11-22cleanup after the NAT changes. we used to have multiple rulesets (scrub,Henning Brauer
2009-11-22Add a lot of bpf and counter manipulation to the bridge. The bridgeTheo de Raadt
2009-11-21knfHenning Brauer
2009-11-21Add a way to bind the tunnel endpoint of a gif/gre interface into aClaudio Jeker
2009-11-18improve the bpf path. packets we send out via the bridge are seen, butTheo de Raadt
2009-11-18set IFCAP_VLAN_MTU; from bradTheo de Raadt
2009-11-18do not do setup that ether_ifattach() takes care of; ok jsgTheo de Raadt
2009-11-13Extend the protosw pr_ctlinput function to include the rdomain. This isClaudio Jeker
2009-11-12be paranoid in case the action array changes size (again, grr)Theo de Raadt
2009-11-12count packets; from claudioTheo de Raadt
2009-11-11Fix some memory leaks in error cases.Jonathan Gray
2009-11-09bump pfsync protocol versionDavid Gwynne
2009-11-09s/MPLS_DEBUG/VETHER_DEBUGMarco Pfatschbacher
2009-11-09Every selwakeup() should have a matching KNOTE() (even if kqueue isn'tNicholas Marriott
2009-11-09vether(4) is a virtual ethernet device driver which can be usedTheo de Raadt
2009-11-05IPv6 support for divert sockets.Michele Marchetto
2009-11-03Use u_int16_t for rdomains for everything. Using various types makesClaudio Jeker
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-11-02s/hz/Hz/ on multiples of the SI unit hertz other than MHz.Igor Sobrado
2009-10-29I missed updating a line for the AF_INET6 route case whenJonathan Gray
2009-10-28Add a dedicated pf pool for route options as suggested by henning,Jonathan Gray
2009-10-26Set the rdomain in bpfwrite() to the interface rdomain so that bpf senderClaudio Jeker
2009-10-26Replace pool_get() + bzero() with pool_get(..., PR_ZERO).Michael Knudsen
2009-10-10fix mbuf leak in rtinit()Dariusz Swiderski
2009-10-06Redo the route lookup in the output (and IPv6 forwarding) path if theClaudio Jeker
2009-10-06Replace if (af) tests operating as an af blacklist with stricter switchRyan Thomas McBride
2009-10-04Add (again) support for divert sockets. They allow you to:Michele Marchetto
2009-09-28when inserting a state, turn the error that pf_state_insert returnsDavid Gwynne
2009-09-21Properly reference count bpf descriptors when using kqueue.Can Erkin Acar
2009-09-17Remove the comaptibility structures for routing socket version 3.Claudio Jeker
2009-09-17Wrap trunk_enqueue() calls in splnet() since sending out lacp packetsClaudio Jeker
2009-09-17Add an splassert check trunk_enqueue() calling this function at anythingClaudio Jeker
2009-09-16style: in pf_test_state_other, fix indentation, kill excessive newlines,Henning Brauer
2009-09-16fix copy & paste error from almost a year ago (bad ryan)Henning Brauer
2009-09-14Add a way to convert the ifi_link_state to a string without the use ofClaudio Jeker
2009-09-09remove inline functions and move some code from the trunk_lacp_input()Reyk Floeter
2009-09-08I had not enough oks to commit this diff.Michele Marchetto
2009-09-08Add support for divert sockets. They allow you to:Michele Marchetto