summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2008-07-22after pf_state_key_atach nothing must use the state keys passed to it anyHenning Brauer
2008-07-21some whitespace cleanup I did while looking through the codeDavid Krause
2008-07-21fix typo that broke rdr rules (without pass) with non-TCP/UDP/ICMP protocolsDavid Krause
2008-07-14m_copy can return NULL, so check for itHenning Brauer
2008-07-10check pf NAT source port allocation against net.inet.(tcp|udp).baddynamicDamien Miller
2008-07-10In pf_state_insert(), if the first pf_state_key_attach() fails, theDavid Krause
2008-07-05in pf_state_key_attach(), when there is already an existing state key thatDavid Krause
2008-07-04in pf_state_key_attach(), when we find that there already is a state keyHenning Brauer
2008-07-04remove prototype for nonexistant functionHenning Brauer
2008-07-03link pf state keys to tcp pcbs and vice versa.Henning Brauer
2008-07-01Don't return immediately if we're actually passing the traffic, we want toRyan Thomas McBride
2008-07-01PF_DT_SKIP_STATETREE is no longer used.Ryan Thomas McBride
2008-06-29this stupid per-arch SIZEOF_BPF_HDR define is really really stupid, butTheo de Raadt
2008-06-29Simplify state creation code; merge state import/export code between pfsyncRyan Thomas McBride
2008-06-26First pass at removing clauses 3 and 4 from NetBSD licenses.Ray Lai
2008-06-26Fix sticky-address on rdr; With the current nat code, we always use the sameRyan Thomas McBride
2008-06-22Revert 1.203; it's not safe to blindly walk the tailq instead of the rbtreeRyan Thomas McBride
2008-06-21Only do state key linking on the outbound path.Ryan Thomas McBride
2008-06-19add 10GbaseT media type, 10 Gigabit Ethernet over CAT 6 unshielded orReyk Floeter
2008-06-19Fix handling check for NAT and creation of a second pf_state_key in pfsync.Ryan Thomas McBride
2008-06-17Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to theRyan Thomas McBride
2008-06-16when freeing a state key sk1, look wether it is linked to another state keyHenning Brauer
2008-06-15A bit of cleanup:Marco Pfatschbacher
2008-06-15Add 802.3ad LACP support for trunk(4).Marco Pfatschbacher
2008-06-14add carppeer; an option to specify a different multicast address orReyk Floeter
2008-06-14Remove NBPFILTER conditional since we do not include "bpfilter.h" and theJoel Sing
2008-06-14Include "pflog.h" so that we get NPFLOG.Joel Sing
2008-06-14Also do the PR_ZERO dance here. This was held back on Henning's requestMichael Knudsen
2008-06-14There's no more reason to use oldnointr allocator here since we paceArtur Grabowski
2008-06-14pool_get()s not in interrupt context should not be PR_NOWAIT, butHenning Brauer
2008-06-14Move bpf_mtap_hdr() above the trunk_*_input() routines.Marco Pfatschbacher
2008-06-13Move the responsibility to free received packets on trunked interfacesMarco Pfatschbacher
2008-06-13Change the logic when selecting routes on RTM_CHANGE & RTM_GET. RTM_CHANGEClaudio Jeker
2008-06-13we used to use the lowest (so it is deterministic) mac address in theHenning Brauer
2008-06-13Treat LINK_STATE_UNKNOWN as LINK_STATE_UP.Marco Pfatschbacher
2008-06-13Cleanup a bit. Instead of doing dst = 0 in every error handling block initClaudio Jeker
2008-06-12fix synproxy.Henning Brauer
2008-06-12#if 0 an annoygly chatty printf active whenever we're at loglevelHenning Brauer
2008-06-12Fix the egress group matching for IPv4. There are to ways to define a /0Claudio Jeker
2008-06-11Split address setup operations into a separate function. More to come.Ryan Thomas McBride
2008-06-11when we establish the mapping from a state key, do it both ways, akaHenning Brauer
2008-06-11factor out state creation code for readability; make it static inlineHenning Brauer
2008-06-11superfluous to check for m != NULL in pf_find_state, it is plainHenning Brauer
2008-06-11after finding a state in the outbound path clear the statekey pointerHenning Brauer
2008-06-11extra paranoia:Henning Brauer
2008-06-11yuck, fix a last minute collisionHenning Brauer
2008-06-11store a pointer to the stack side state key in the mbuf packetHenning Brauer
2008-06-10Handle the closing of half connections where we don't see the fullReyk Floeter
2008-06-10Simplify code slightly; use PR_ZERO with pool_get() rather than bzero().Ryan Thomas McBride
2008-06-10Free the counters struct when we free the table entry.Ryan Thomas McBride