summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2012-06-28Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
2012-06-26initialize 'reason' variable before passing it to the pflog_packet;Mike Belopuhov
2012-05-12Ignore/preserve ECN bits on ToS matching and scrubbing.Marco Pfatschbacher
2012-05-12Fix tcpdump for etherip packets.Marco Pfatschbacher
2012-05-09backout 1.134 since it introduced a use-after-free for routing entries;Markus Friedl
2012-05-05pipex_ip6_input() called IF_DROP() with incorrect queue.YASUOKA Masahiko
2012-04-22Remove redundant returns from functions returning void. Wrap returnYASUOKA Masahiko
2012-04-14Use DLT_LOOP for all tunneling interfaces.YASUOKA Masahiko
2012-04-11fix all the suser calls which pass an incorrect p_acflag argument;Mike Belopuhov
2012-04-11SLIST_REMOVE_NEXT -> SLIST_REMOVE_AFTER for better consistency andChristian Weisgerber
2012-04-07remove superfluous return, ok mikebCamiel Dobbelaar
2012-04-04pipex hook in udp_usrreq() mistakenly assumed that `inp' is connected.YASUOKA Masahiko
2012-04-03Fix kernel compilation with pf but without pfsync pseudo-device byMike Belopuhov
2012-03-28pfkey needs some p_p->ps_pid too. OK deraadt@ guenther@Claudio Jeker
2012-03-28Another pid that needs to be the process pid and not the thread one.Claudio Jeker
2012-03-28More p_pid to p_p->ps_pid updates. OK deraadt@, guenther@Claudio Jeker
2012-03-28Use p_p->ps_pid as pid in the route header instead of the thread pid. GiveClaudio Jeker
2012-03-26Add DLT_PPP_SERIAL and DLT_C_HDLC to bpf.h even though the system will notClaudio Jeker
2012-03-17remove IP_JUMBO, SO_JUMBO, and RTF_JUMBO.David Gwynne
2012-02-05Improve the ICMPv6 direction checkMike Belopuhov
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-02-02add netflow v9/ipfix support to pflow(4).Sebastian Benoit
2012-01-31add missing calls to pf_pkt_addr_changed(); ok henning@Markus Friedl
2012-01-29Remove fastq from struct sppp. Missed when I committed if_spppsubr.c r1.96,Stuart Henderson
2012-01-28improve icmp virtual id generation for ND and MLD packets so thatMike Belopuhov
2012-01-28try to lookup the icmp state based on a correct packet descriptor;Mike Belopuhov
2012-01-28Remove a horrible sppp(4)-specific "fast queue" used for tcp ports 21 23 513.Stuart Henderson
2012-01-27If some length checks in pflog_bpfcopy() failed, the functionAlexander Bluhm
2012-01-26Clean up the pf normalization code:Alexander Bluhm
2012-01-26Minor fixes for pf_walk_header6():Alexander Bluhm
2012-01-26when table content changes we need to reset indexMike Belopuhov
2012-01-23Do not keep state when dropping overlapping IPv6 fragments in pfAlexander Bluhm
2012-01-23The ingress filter of pipex and npppd become configurable and disabledYASUOKA Masahiko
2012-01-20Ansify ppp... function definitions.Alexander Bluhm
2012-01-19Teach pppoe(4) about RFC 4638. This allows negotiating increased MTU withStuart Henderson
2012-01-18Remove dead assignments and newly created unused variables.Charles Longeau
2012-01-18Fix a problem that causes LCP keepalive timeout. In case the ack number ofYASUOKA Masahiko
2012-01-17Fix trailing whitespace.Alexander Bluhm
2012-01-16Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() toAlexander Bluhm
2012-01-16do carp demotion adjustments on syncdev link state change.Mike Belopuhov
2012-01-16bpf devices behave similar to raw sockets and never block on write,Philip Guenthe
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2012-01-13Drop IPv6 packets built from overlapping fragments in pf reassembly.Alexander Bluhm
2012-01-11Ansify raw_... function definitions. No binary change.Alexander Bluhm
2012-01-11ansify and de'register some prototypesDavid Hill
2012-01-03To access the ifaddr of an in_ifaddr or in6_ifaddr struct, it isAlexander Bluhm
2012-01-03Instead of having two functions pf_free_fragment() and pf_remove_fragment()Alexander Bluhm
2011-12-21Just use pd->sidx and pd->didx to reverse the state key argumentsMarco Pfatschbacher
2011-12-21don't attempt to run pf_translate on fragments: it will fail miserably.Mike Belopuhov
2011-12-19improve the icmp direction check to deal correctly with af-to statesMike Belopuhov