summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2002-06-25add ARP hardware type for IEEE1394Jun-ichiro itojun Hagino
2002-06-24KNFJun-ichiro itojun Hagino
2002-06-23g/c last remains of old ipv6 prefix managementJun-ichiro itojun Hagino
2002-06-19this was derived from UCB if_sl. therefore, we can update the UCB if_slTheo de Raadt
copyright contained in this. a license problem remains, of course...
2002-06-16Missing braces around else case, fixes a kernel crash introduced in r1.5 ifAaron Campbell
a non-existent interface is passed to "pfctl -l". Reported by grange@disorder.ru.
2002-06-15unnecessary () on castJason Wright
2002-06-15Transparent IPsec processing on the bridge; for now works only withAngelos D. Keromytis
static keys.
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-12import of netbsd's vlan multicast codeChris Cappuccio
this works better than what we have now, although i have not been able to extensively test it. several folks thought it should be added
2002-06-11split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble',Mike Frantzen
'fragment crop' or a new 'fragment drop-ovl' which will drop overlapping fragments and all corresponding ones ok kjell@ with feedback from kjell@ and deraadt@. the rest are slacking
2002-06-11sprinkle splasserts where function comments tell us to.Artur Grabowski
2002-06-11splassert(IPL_NET) where comment says that we should.Artur Grabowski
2002-06-11splassert(IPL_SOFTNET) where comment indicate that.Artur Grabowski
2002-06-11KNF (tabs, return (x))Daniel Hartmeier
2002-06-11enumerate UDP and OTHER state levels (similar to tcp_fsm.h)Mike Frantzen
ok dhartmei@, henning@
2002-06-11SCRUB(fragcache) to do gap tracking and overlap pruning of IPv4 fragmentsMike Frantzen
without the memory overhead of the conventional defrag in SCRUB ok dhartmei@, idea by deraadt@
2002-06-11Make NAT proxy port range configurable per rule, for instance privilegedDaniel Hartmeier
source ports can mapped to privileged proxy ports, or source port 500 to proxy port 500. ok frantzen@
2002-06-11Don't panic when pf_insert_state() detects an attempt to insert aDaniel Hartmeier
duplicate key. Instead, log according to log level and return gracefully. ok frantzen@
2002-06-11KNF return x -> return (x), ok frantzen@Daniel Hartmeier
2002-06-11rework pfctl statistics displayHenning Brauer
move FCNT_NAMES from pfvar.h to pfctl_parser.h, only used by pfctl some input by nick@ ok frantzen@, dhartmei@
2002-06-10- stop abusing IFF_UP.Jun-ichiro itojun Hagino
- do not use L3 address pair for L2.5 address pair. configure L2.5 address pair by using "ifconfig tunnel". - IFF_LINK2 is not needed, as it is just a reverse of IFF_LINK0. - do not modify IFF_LINK1 when you modify protocol type. chris ok
2002-06-10Split common code which converts a multicast address to an ethernetChris Cappuccio
address from ether_addmulti() and ether_delmulti() into ether_multiaddr(), a'la netbsd. Also clean up some magic numbers. itojun likes it
2002-06-10Allow ports to be specified in nat rules, useful later on for individualDaniel Hartmeier
proxy port ranges.
2002-06-10#include <sys/timeout.h>, from Chris KuetheDaniel Hartmeier
2002-06-10easy error checks first.Jun-ichiro itojun Hagino
2002-06-10Don't #include <sys/malloc.h>Daniel Hartmeier
2002-06-10prevent mbuf leak on icmp_do_error() failure.Jun-ichiro itojun Hagino
NOTE: under 4.4BSD mbuf coding discipline, once you pass mbuf to a function like f(m), you no longer have ownership of the mbuf. the mbuf will always be freed by the called function f(). by keeping the programming rule you have less chance of memory leak.
2002-06-09Export compression info only if the SA (xform) is initialized.Angelos D. Keromytis
2002-06-09don't need device.hJason Wright
2002-06-09Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so itDaniel Hartmeier
includes ports and operator.
2002-06-09if_addrlen need not be 4, set to 0. From: Martin Husemann <martin@duskware.de>Jun-ichiro itojun Hagino
2002-06-09make sure to bzero sockaddr_inJun-ichiro itojun Hagino
2002-06-09support SIO*PHYADDR, so that we can configure outer address with ifconfig(8)Jun-ichiro itojun Hagino
2002-06-09reapply patch from jasoni@ for ICMP6_PACKET_TOO_BIGPhilipp Buehler
both have been lost, due to diff thinking about reversing those lines after merge tested
2002-06-09reapply patch from jasoni@ for pf_route[6]Philipp Buehler
2002-06-09split ioctl functions out of pf.c into pf_ioctl.cPhilipp Buehler
frantzen@, dhartmei@ ok, tested kernel & userland. checked for colliding commits
2002-06-09no need to log() on outgoing packet on !IFF_UP caseJun-ichiro itojun Hagino
2002-06-09force FDDI link MTU be FDDI IPv4 MTU. PR 2714. jason okJun-ichiro itojun Hagino
2002-06-09This commit commit commit without testing has to STOP. BE CAREFUL.Theo de Raadt
2002-06-09uncommit, broken (by corrupt diff)Philipp Buehler
2002-06-09new file sys/net/pf_ioctl.cPhilipp Buehler
functions moved from pf.c to there ok dhartmei@, frantzen@ testing myself + henning@, kernel & userland utils fine
2002-06-09increment ifs6_in_toobig if ipv6 packet too large for interface injasoni
pf_route6().
2002-06-09in pf_route{6}, if too large for outgoing interface and not allowed tojasoni
fragment, send the proper icmp error. - ok frantzen@
2002-06-08use consistent style in function declarationsjasoni
2002-06-08If a IP packet is too large for the outgoing interface and DF is set,jasoni
drop the packet and send a icmp needfrag.. blessed by jason@
2002-06-08splnet -> splsoftnet where appropriateJun-ichiro itojun Hagino
2002-06-08more splnet protection to dom_ifattachJun-ichiro itojun Hagino
2002-06-08protect dom_ifattach by splnetJun-ichiro itojun Hagino
2002-06-08keep the count of fragments consistent when we have to do a fail safe dropMike Frantzen
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
pass in from any to any port www keep state (tcp.established 60) ok frantzen@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 22:50:53 +0000