summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2002-10-25Compare pf_rule->label in pf_compare_rules(), too.Daniel Hartmeier
2002-10-22Convert "int af" and "u_int8_t af" declarations and function argumentsRyan Thomas McBride
2002-10-22check the correct return value from ifunit()Ryan Thomas McBride
2002-10-20Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies andRyan Thomas McBride
2002-10-14Allow one to specify a netblock in a binat rule:Henning Brauer
2002-10-10Missing m_pullup() and mbuf corruption. This potentially causedDaniel Hartmeier
2002-10-10padd pf_state; dhartmei@ okMichael Shalayeff
2002-10-08the first step of pf/altq merge.Kenjiro Cho
2002-10-07-Wsign-compare cleanDaniel Hartmeier
2002-10-07set block-policy [drop|return]Henning Brauer
2002-10-07support a generic returnHenning Brauer
2002-10-07make return-icmp work for rules covering both v4 and v6Henning Brauer
2002-10-07use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or notHenning Brauer
2002-10-07Add 'reply-to' to filter rules, similar to route-to, but applying toDaniel Hartmeier
2002-10-05Allow filtering based on IP header's tos field.Daniel Hartmeier
2002-10-04[to the right branch this time]Jason Ish
2002-09-27daddr was used where saddr was meant while checking incoming packets forHenning Brauer
2002-09-26BSD-style license from Serge Vakulenko <vak@cronyx.ru>Chris Cappuccio
2002-09-24sizeof(structure) not sizeof(structure *); pointed out by dvamsi@yahoo.com.Jason Wright
2002-09-15Make compile with -Werror (unused vars warnings)Niklas Hallqvist
2002-09-13Paul Mackerras and the Australian National University have worked thingsTheo de Raadt
2002-09-11KNF - return is not a function.Jun-ichiro itojun Hagino
2002-08-28Fix a problem where passing NULL as a pointer with varargs does not promotePer Fogelstrom
2002-08-12Use state tree instead of separate (flat) list to find NAT proxy ports,Daniel Hartmeier
2002-08-08th_flags doesn't have to be equal to TH_SYN to generate modulator, it'sDaniel Hartmeier
2002-08-07consistently check byte order of ether_type; pointed out by dhartmeiJason Wright
2002-07-31fix potential NULL pointer deref. From: tedu <grendel@zeitbombe.org>Jun-ichiro itojun Hagino
2002-07-30no need for check if m0 is NULL, as we have touched it already.Jun-ichiro itojun Hagino
2002-07-24Use host order when adding packet size to interface statistics counter.Daniel Hartmeier
2002-07-18make it compile by removing unused local varsMichael Shalayeff
2002-07-17Don't dereference freed memory.Artur Grabowski
2002-07-15add u_int8_t ifnot to struct pf_rule to support matching packets on anyHenning Brauer
2002-07-15remove duplicated interface check in test_icmpHenning Brauer
2002-07-12Remove duplicate function declarations (they are in pfvar.h).Artur Grabowski
2002-07-11KNF.Artur Grabowski
2002-07-10let IPv6 fragment go through based on normal rulesets.Jun-ichiro itojun Hagino
2002-07-05fix a small bug I found while installing a -current pf firewall at aHenning Brauer
2002-07-03Change all variables definitions (int foo) in sys/sys/*.h to variableMiod Vallat
2002-07-03fix a null deref in sysctl_iflist()Michael Shalayeff
2002-07-02make it compile w/ ipsec and no pf ; smth that was left for homeworkMichael Shalayeff
2002-07-02inital -> initialNathan Binkert
2002-07-01Fix really long standing bug with fetching address cache entries:Jason Wright
2002-07-01license update of CMU parts. due to communication with wcw+@andrew.cmu.edu,Theo de Raadt
2002-06-30Fix fallout from recent changes.Artur Grabowski
2002-06-30allocate sockaddr_dl for ifnet in if_alloc_sadl(), as we don't always knowJun-ichiro itojun Hagino
2002-06-28KNFTheo de Raadt
2002-06-25add ARP hardware type for IEEE1394Jun-ichiro itojun Hagino
2002-06-24KNFJun-ichiro itojun Hagino
2002-06-23g/c last remains of old ipv6 prefix managementJun-ichiro itojun Hagino
2002-06-19this was derived from UCB if_sl. therefore, we can update the UCB if_slTheo de Raadt