summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2001-07-13everytime i clean in here, i get a 250 line diff...Theo de Raadt
2001-07-11Simplify pf_pull_hdr(), don't use inner IP header's ip_len or ip_offDaniel Hartmeier
2001-07-10Missing breaks.Marc Espie
2001-07-10another lame OpenBSD tag.Federico G. Schwindt
2001-07-09do compare in host order. found by millert@.Daniel Hartmeier
2001-07-09More lame OpenBSD tags.Federico G. Schwindt
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier
2001-07-07get rid of compiler warningMarco S Hyman
2001-07-06style change #2, avoid (a == b) == cDaniel Hartmeier
2001-07-06style change #1, avoid ternary operatorDaniel Hartmeier
2001-07-06theo requests less archaic styleChris Cappuccio
2001-07-06don't evaluate rules for packets that have state but mismatch seq range (coul...Daniel Hartmeier
2001-07-06Allow negative match on interface name for nat and rdrChris Cappuccio
2001-07-06some cleanup, okay dhartmei@Niels Provos
2001-07-06Indentation.Hakan Olsson
2001-07-06fix userland side prototypesTheo de Raadt
2001-07-06do not use quad for countersTheo de Raadt
2001-07-05initalize fragment correctlyNiels Provos
2001-07-05IPComp. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05$OpenBSD$ tagAngelos D. Keromytis
2001-07-05KNFAngelos D. Keromytis
2001-07-05Include files for IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-04Make preprocessor happier, don't give it untasty tokens at end of input.Marc Espie
2001-07-04call ip_output() correctly, use ICMP_MINLEN, only m_copyback() where needed. ...Daniel Hartmeier
2001-07-03Use PADUP() instead of hand-crafted weirdness; also, it's supposed toAngelos D. Keromytis
2001-07-03grr, you guys keep not obeying KNFTheo de Raadt
2001-07-03add DIOCNATLOOK ioctl and pf_natlook structure, this enables a userlandBob Beck
2001-07-02another memory leakNiels Provos
2001-07-02fix memory leakNiels Provos
2001-07-01-WallDug Song
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not filtere...Daniel Hartmeier
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
2001-07-01for ICMP error messages refering to TCP packets, only use the first 8 bytes o...Daniel Hartmeier
2001-07-01Add missing space in debug message.Angelos D. Keromytis
2001-07-01Fix length check, add some more sanity checks on INET6.Angelos D. Keromytis
2001-07-01KNF, and add DPRINTFs all over the place.Angelos D. Keromytis
2001-06-29Move ifq_maxlen setting to if_attach(). Doing it at if_init() is wrong,Federico G. Schwindt
2001-06-29Prepend pf_ to limit potential namespace problems, shorten some lines.Niklas Hallqvist
2001-06-29list instead of tailq for frents, use pool hardlimits, correctly freeNiels Provos
2001-06-29Fix PF_SCRUB enumerator.Angelos D. Keromytis
2001-06-29fix counter/reason array usageDaniel Hartmeier
2001-06-28lower hiwat limits, enforce hi water markNiels Provos
2001-06-28add tree traversal code (new pf_tree_node->parent), dump states TAILQ and tra...Daniel Hartmeier
2001-06-28wrap 5-tuple rule match with MATCH_TUPLE. from ben fleis <ben@monkey.org>Dug Song
2001-06-28forgot to init fr_timeoutNiels Provos
2001-06-28first stab at packet normalization. includes full ip reassembly.Niels Provos
2001-06-28Disallow filter modification when the system is "highly secure".Hugh Graham
2001-06-27change pf_tree_key->addr[2] from u_int32_t to struct in_addr for NielsDaniel Hartmeier
2001-06-27in rdr rules, let port 0 be the port wildcard; ok dhartmei@jasoni
2001-06-27change pf_tree_node->state to void *, so Niels can use a tree for fragment ha...Daniel Hartmeier