summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2002-02-17Calculate IP checksum and copyback modified headers before logging aDaniel Hartmeier
2002-02-15pf only uses seconds for time measuring. There is no need to call microtimeArtur Grabowski
2002-02-14Reorder struct pf_pdesc members, saves 8 bytes.Daniel Hartmeier
2002-02-14KNFTheo de Raadt
2002-02-14Add skip steps for rule action (pass/block vs. scrub) and directionDaniel Hartmeier
2002-02-14If helps to loop over the correct variable *sigh*Jason Wright
2002-02-13Be -really- careful not to modify the payload when replacing the ethernetJason Wright
2002-02-13sync with KAME.Kenjiro Cho
2002-02-11Remove unused function prototype, from Jason IshDaniel Hartmeier
2002-02-11Remove ancient comment regarding memcmp(), from Jason IshDaniel Hartmeier
2002-02-07bridge_output() needs a forcibly aligned copy just like bridge_broadcast()Jason Wright
2002-02-07Quiet down an annoying message in altq_etherclassify.Artur Grabowski
2002-01-23compatability -> compatibility.Federico G. Schwindt
2002-01-23Back out part of last commit, it causes memory to be freed prematurelyTodd C. Miller
2002-01-23It looks like there has been one crack smoking and a few cut and pastes.Artur Grabowski
2002-01-23Pool deals fairly well with physical memory shortage, but it doesn't dealArtur Grabowski
2002-01-18Fix some zlib memory leaks, originally from Mark AdlerTodd C. Miller
2002-01-12- Only apply fastroute and route-to if we are going in the samejasoni
2002-01-11pad the pf_state_{host,peer} to a 32bit quantity; dhartmei@ frantzen@ okMichael Shalayeff
2002-01-09Add labels to rules. These are arbitrary names (not to be confused withDaniel Hartmeier
2002-01-08Add "no nat/rdr/binat" to nat.conf. The first matching rule applies.Daniel Hartmeier
2002-01-02allow for setting of the loopback MTU, set IFF_RUNNING on address configurationDug Song
2002-01-02Don't forget to deallocate on failure.Jason Wright
2002-01-01This is ugly: make a specialized deep copy in bridge_broadcast() thatJason Wright
2001-12-31only require write mode for modifying ioctls; dhartmei@, frantzen@, deraadt@ okMichael Shalayeff
2001-12-27revision 1.12 lacks paren around && within || (gcc warns and compilation stops).Jun-ichiro itojun Hagino
2001-12-26misplaced (), causing tcp header be examined in non-tcp packetsMichael Shalayeff
2001-12-26cosmeticJun-ichiro itojun Hagino
2001-12-18NRL license cleaningTheo de Raadt
2001-12-18Update rt_ifp in DIOCCHANGERULE.jasoni
2001-12-15add support for creating span ports so that one can snoop a bridgeJason Wright
2001-12-13remove redundant #if NPF. ok jason@jasoni
2001-12-12Remember to add the current time...problem noticed by ho@Angelos D. Keromytis
2001-12-11Use queue.h macros.Jason Wright
2001-12-11- Log packet while mbuf is still valid.jasoni
2001-12-10Add an ioctl to add state entries (DIOCADDSTATE) for proxies.Daniel Hartmeier
2001-12-10Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based onDaniel Hartmeier
2001-12-10use queue.h macros for TAILQ operationsJason Wright
2001-12-10update ip stats when dropping an ip packetjasoni
2001-12-09Use queue.h TAILQ macros instead of accessing members directly.Jason Wright
2001-12-09Don't access the tq members directly, use the queue.h macros. Also,Jason Wright
2001-12-08mflags and len were uninitialized in bridge_broadcast (source of someJason Wright
2001-12-06Use hzto() to handle overflow of (hz * timeout) cases --- when usingAngelos D. Keromytis
2001-12-03reason int -> u_short. From Mike Pechkin.Daniel Hartmeier
2001-12-03Don't reset pf_status.debug and .since on DIOCCLRSTATUS.Daniel Hartmeier
2001-12-01217 lines of diff for KNF, dhartmei, you are evilTheo de Raadt
2001-11-30only make a copy of the mbuf if the route rule is dup-tojasoni
2001-11-30unifdef OLDIP6OUTPUTJun-ichiro itojun Hagino
2001-11-27typo - use correct mbufjasoni
2001-11-27do pf_route() before logging in case the logging created a bogus ruleMike Frantzen