summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2007-09-07Do not recalculate TCP payload length in pf_test_rule() as it hasAlexander Bluhm
2007-09-07Check if rtm_hdrlen is smaller then the passed message or it would be possibleClaudio Jeker
2007-09-07use M_ZEROReyk Floeter
2007-09-06bump the copyright while touching these filesReyk Floeter
2007-09-06With a trunk(4) interface in fail over mode the trunk(4) interfaceReyk Floeter
2007-09-05IPv6 support for sppp layer, based on NetBSD version.Can Erkin Acar
2007-09-03Bump RTM_VERSION to 4 and start a new aera of routing in OpenBSD :)Claudio Jeker
2007-09-03Make use of the pfsync 'badval' and 'stale' counters instead of usingJoel Knight
2007-09-01since theHenning Brauer
2007-09-01replace the machine dependant bytes-to-clicks macro by the MI ptoa()Martin Reindl
2007-08-31zap unused "pf_tag" structure.Thordur I. Bjornsson
2007-08-30mechanic change:Henning Brauer
2007-08-30handle address ranges in skip step calculationDaniel Hartmeier
2007-08-30add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/toDaniel Hartmeier
2007-08-28showing this diff is shameful...Henning Brauer
2007-08-28The m_pulldown used for aligning was not copying the header,Can Erkin Acar
2007-08-23allow RSTs with th_seq == seqlo +- 1, reduces the amount of 'loose state'Daniel Hartmeier
2007-08-21don't access th_flags when it isn't available (only 8 bytes of theDaniel Hartmeier
2007-08-20Align the packet after the ppp header.Can Erkin Acar
2007-08-14Make sure all the packet is in one continuous mbuf.Can Erkin Acar
2007-08-07Use the length of the mbuf instead of the packet.Can Erkin Acar
2007-08-06Fix some "that that"s.Tom Cosgrove
2007-07-30With adding ipsec tags and exporting flow filters via sysctl SADB_GETHans-Joerg Hoexer
2007-07-25Back out the tracking of procs in struct selinfo. There's one seriousArtur Grabowski
2007-07-21add ETHERTYPE_PAE (802.1X Port Access Entity).Damien Bergamini
2007-07-18Don't drop outgoing packets in case of a congested input queue.Marco Pfatschbacher
2007-07-13remove obsolete pfi_statehead and pfik_w_states; ok henning@Markus Friedl
2007-07-10adjust pf_find_state_all() so that it works correctly for the new globalKurt Miller
2007-07-06btintrq has been removed from bt_input.c, don't reference it here.Christian Weisgerber
2007-07-04Fix a use after free crash in in_delmulti(). If a interface is detachedClaudio Jeker
2007-07-04No m_copyback for ICMP and "other" protocols on rdr/binat.Marco Pfatschbacher
2007-06-26Fix a race condition during ruleset reload; make sure we don't walk offRyan Thomas McBride
2007-06-25crank ifq_maxlen from 50 to 256, so it is not smaller than most interfacesHenning Brauer
2007-06-25pretty mechanical change: now that the state tables use seperate stateHenning Brauer
2007-06-24Save some bytes and make code more readable by removing junk union andRyan Thomas McBride
2007-06-22export the flow/filter information attached to the SA, too; ok hshoexer@Markus Friedl
2007-06-21force logif to zero if no logging is asked forHenning Brauer
2007-06-21reimplement interface bound states in a non-retarded way.Henning Brauer
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
2007-06-17add back missing bcopy & break, got lost when removing arcnet.Henning Brauer
2007-06-15in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check thatHenning Brauer
2007-06-14Add a new "rtlabel" option to ifconfig. It allows to specify a route labelReyk Floeter
2007-06-14sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsecHenning Brauer
2007-06-11move definitions for the flags in the mbuf header used by pf to mbuf.hHenning Brauer
2007-06-09fix wrong argument passing to m_copyback for the log caseHenning Brauer
2007-06-09sizeof(ptr) is no good if you want sizeof(*ptr). icmp/icmpv6.Henning Brauer
2007-06-08kill arcnet leftovers, some pt out by Mike Belopuhov <mkb@crypt.org.ru>,Henning Brauer
2007-06-07PR 5502 From: Marc Huber <Marc.Huber@web.de>Henning Brauer
2007-06-06vlan interfaces do not allow the parent interface and the vlan number to beHenning Brauer
2007-06-06remove remaining IPX hooks. all inside #ifdef IPX, so no actual changeHenning Brauer