summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2007-08-06Fix some "that that"s.Tom Cosgrove
2007-07-30With adding ipsec tags and exporting flow filters via sysctl SADB_GETHans-Joerg Hoexer
2007-07-25Back out the tracking of procs in struct selinfo. There's one seriousArtur Grabowski
2007-07-21add ETHERTYPE_PAE (802.1X Port Access Entity).Damien Bergamini
2007-07-18Don't drop outgoing packets in case of a congested input queue.Marco Pfatschbacher
2007-07-13remove obsolete pfi_statehead and pfik_w_states; ok henning@Markus Friedl
2007-07-10adjust pf_find_state_all() so that it works correctly for the new globalKurt Miller
2007-07-06btintrq has been removed from bt_input.c, don't reference it here.Christian Weisgerber
2007-07-04Fix a use after free crash in in_delmulti(). If a interface is detachedClaudio Jeker
2007-07-04No m_copyback for ICMP and "other" protocols on rdr/binat.Marco Pfatschbacher
2007-06-26Fix a race condition during ruleset reload; make sure we don't walk offRyan Thomas McBride
2007-06-25crank ifq_maxlen from 50 to 256, so it is not smaller than most interfacesHenning Brauer
2007-06-25pretty mechanical change: now that the state tables use seperate stateHenning Brauer
2007-06-24Save some bytes and make code more readable by removing junk union andRyan Thomas McBride
2007-06-22export the flow/filter information attached to the SA, too; ok hshoexer@Markus Friedl
2007-06-21force logif to zero if no logging is asked forHenning Brauer
2007-06-21reimplement interface bound states in a non-retarded way.Henning Brauer
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
2007-06-17add back missing bcopy & break, got lost when removing arcnet.Henning Brauer
2007-06-15in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check thatHenning Brauer
2007-06-14Add a new "rtlabel" option to ifconfig. It allows to specify a route labelReyk Floeter
2007-06-14sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsecHenning Brauer
2007-06-11move definitions for the flags in the mbuf header used by pf to mbuf.hHenning Brauer
2007-06-09fix wrong argument passing to m_copyback for the log caseHenning Brauer
2007-06-09sizeof(ptr) is no good if you want sizeof(*ptr). icmp/icmpv6.Henning Brauer
2007-06-08kill arcnet leftovers, some pt out by Mike Belopuhov <mkb@crypt.org.ru>,Henning Brauer
2007-06-07PR 5502 From: Marc Huber <Marc.Huber@web.de>Henning Brauer
2007-06-06vlan interfaces do not allow the parent interface and the vlan number to beHenning Brauer
2007-06-06remove remaining IPX hooks. all inside #ifdef IPX, so no actual changeHenning Brauer
2007-06-02pf_set_rt_ifp accesses state key data, so must be called laterHenning Brauer
2007-06-01factor out duplicated code to allocate state key and cross-reference itHenning Brauer
2007-06-01fold pf_test_tcp(), pf_test_udp(), pf_test_icmp(), pf_test_other() intoHenning Brauer
2007-06-01apply the "skip ipsec if there are no flows" speedup diff to IPv6 too.Henning Brauer
2007-05-31Make sure that pf_state_key and pf_state_key_cmp are in sync.Ryan Thomas McBride
2007-05-31unlink the right state, ryan okHenning Brauer
2007-05-31Move the state id and creatorid (used mainly by pfsync) into struct pf_state.Ryan Thomas McBride
2007-05-31Unbreak pf.c compilation on gcc 2.95 architectures. Found by todd@Ryan Thomas McBride
2007-05-31First step of rearranging pf's state table internals...Ryan Thomas McBride
2007-05-29remove token ring leftovers, ok mcbride pvalHenning Brauer
2007-05-29It helps to commit removals from the tree that has the files cvs removedClaudio Jeker
2007-05-29now i get my hands dirty in here... from if_ethersubr.c:Henning Brauer
2007-05-29there was code insideHenning Brauer
2007-05-29Move tokenring support to the attic where it can join the cards that whereClaudio Jeker
2007-05-29Define IF_ENQUEUE() and friends as proper C statements using do ... whileUwe Stuehler
2007-05-29Use atomic operations to operate on netisr, instead of clearing it at splhigh.Miod Vallat
2007-05-29IMP is dead and nothing uses NETISR_IMP so remove it from the netisr list.Claudio Jeker
2007-05-29Spaces, no binary changes.Claudio Jeker
2007-05-29gain us another 10+% of performance.Henning Brauer
2007-05-29Add a name argument to the RWLOCK_INITIALIZER macro.Thordur I. Bjornsson
2007-05-28double pf performance.Henning Brauer