summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2012-02-05Improve the ICMPv6 direction checkMike Belopuhov
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-02-02add netflow v9/ipfix support to pflow(4).Sebastian Benoit
2012-01-31add missing calls to pf_pkt_addr_changed(); ok henning@Markus Friedl
2012-01-29Remove fastq from struct sppp. Missed when I committed if_spppsubr.c r1.96,Stuart Henderson
2012-01-28improve icmp virtual id generation for ND and MLD packets so thatMike Belopuhov
2012-01-28try to lookup the icmp state based on a correct packet descriptor;Mike Belopuhov
2012-01-28Remove a horrible sppp(4)-specific "fast queue" used for tcp ports 21 23 513.Stuart Henderson
2012-01-27If some length checks in pflog_bpfcopy() failed, the functionAlexander Bluhm
2012-01-26Clean up the pf normalization code:Alexander Bluhm
2012-01-26Minor fixes for pf_walk_header6():Alexander Bluhm
2012-01-26when table content changes we need to reset indexMike Belopuhov
2012-01-23Do not keep state when dropping overlapping IPv6 fragments in pfAlexander Bluhm
2012-01-23The ingress filter of pipex and npppd become configurable and disabledYASUOKA Masahiko
2012-01-20Ansify ppp... function definitions.Alexander Bluhm
2012-01-19Teach pppoe(4) about RFC 4638. This allows negotiating increased MTU withStuart Henderson
2012-01-18Remove dead assignments and newly created unused variables.Charles Longeau
2012-01-18Fix a problem that causes LCP keepalive timeout. In case the ack number ofYASUOKA Masahiko
2012-01-17Fix trailing whitespace.Alexander Bluhm
2012-01-16Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() toAlexander Bluhm
2012-01-16do carp demotion adjustments on syncdev link state change.Mike Belopuhov
2012-01-16bpf devices behave similar to raw sockets and never block on write,Philip Guenthe
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2012-01-13Drop IPv6 packets built from overlapping fragments in pf reassembly.Alexander Bluhm
2012-01-11Ansify raw_... function definitions. No binary change.Alexander Bluhm
2012-01-11ansify and de'register some prototypesDavid Hill
2012-01-03To access the ifaddr of an in_ifaddr or in6_ifaddr struct, it isAlexander Bluhm
2012-01-03Instead of having two functions pf_free_fragment() and pf_remove_fragment()Alexander Bluhm
2011-12-21Just use pd->sidx and pd->didx to reverse the state key argumentsMarco Pfatschbacher
2011-12-21don't attempt to run pf_translate on fragments: it will fail miserably.Mike Belopuhov
2011-12-19improve the icmp direction check to deal correctly with af-to statesMike Belopuhov
2011-12-12fixup af-to regression with match rulesMike Belopuhov
2011-12-06Remove needless temporary variable for greater clarity.Bret Lambert
2011-12-06don't duplicate rtfree actions taken by rtrequest1() in rtdeletemsg()Bret Lambert
2011-12-06simplify the somewhat-tangled conditional maze in rt_getifa()Bret Lambert
2011-12-02Kill unused IFCAP_IPSEC and IFCAP_IPCOMP.Christiano F. Haesbaert
2011-12-01Make sure we only enter pf_route() when undefering in the PF_ROUTETO case.Ryan Thomas McBride
2011-11-29use a u_int64_t for the state id in pfsync_state. this makes it consistentDavid Gwynne
2011-11-28deprecate PFTM_UNTIL_PACKET. nothing in the tree uses it, andDavid Gwynne
2011-11-27Protect more operations in the pfsync_clone_destroy to preventMike Belopuhov
2011-11-27Kill old comment, we already do 802.1p tagging.Christiano F. Haesbaert
2011-11-26Tie the 802.1p (CoS) value in vlan(4) with the new prio scheme in pf.Christiano F. Haesbaert
2011-11-26Apply route-to to deferred packet; without this the first packet of aRyan Thomas McBride
2011-11-25fix compile errors without INET6. no binary change.YASUOKA Masahiko
2011-11-25use time_uptime to set state creation values as time_second can beDavid Gwynne
2011-11-16Improve flag setting ioctl so that bulk updates are requestedMike Belopuhov
2011-11-12Fix a commentClaudio Jeker
2011-11-09State expire time is a baseline time ("last active") for expiryCamiel Dobbelaar
2011-11-04Select a correct protocol for a stack side state key when importingMike Belopuhov
2011-11-02Expose if_capabilities to userland so that ifconfig can display theChristiano F. Haesbaert