summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-12-03add support for ifconfig clone/destroy; ok henning deraadtMarkus Friedl
2003-12-03support for network interface "cloning", e.g. gif(4) via ifconfig(8)Markus Friedl
2003-12-03protect against if_index wrap; similar to what netbsd does; ok henning deraadtMarkus Friedl
2003-12-02UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)Markus Friedl
2003-12-02add kq support from wayne@epipe.com.au and cmaxwell@themanor.net (now that re...Michael Shalayeff
2003-11-28More pf stats fixups:Ryan Thomas McBride
2003-11-21Remove redundant arguments to pf_sockaddr_lookup(); proto and af are alreadyRyan Thomas McBride
2003-11-21Remove unused "ipoff" arguments.Ryan Thomas McBride
2003-11-16pf_test() and pf_test6() consistency:Ryan Thomas McBride
2003-11-16convert __attribute__((__packed__)) to __packed so that parsers unawareAnil Madhavapeddy
2003-11-09remove stale forward declarationDaniel Hartmeier
2003-11-08Return proper anchor rule number in correct byte order.Daniel Hartmeier
2003-11-08Add 'no-sync' state option to prevent state transition messages for statesRyan Thomas McBride
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
2003-11-06move netisr definition into md code to allow arch provide suitable allocation...Michael Shalayeff
2003-11-04add in(6)_pcblookup_listen() and replace all calls to in_pcblookup()Markus Friedl
2003-11-03pf_route() can change output NIC, so we need to check its capabilities.Cedric Berger
2003-11-02Don't zero the debug level when we enable pf.Ryan Thomas McBride
2003-10-31Remove remenants of pf_tree stuff that I missed.Ryan Thomas McBride
2003-10-29fix binat for incoming connections when a netblock (not just a singleDaniel Hartmeier
2003-10-25Build state search indexes directly on pf_state instead of pf_tree_node.Ryan Thomas McBride
2003-10-25"goto bad" on error with carp_input, instead of simply returning.Ryan Thomas McBride
2003-10-24Fix write filter blocking when no filter was set. FixesCan Erkin Acar
2003-10-22Add locking and write filtering to bpf descriptors.Can Erkin Acar
2003-10-20tyopJason Wright
2003-10-19Add missing "#ifdef ALTQ"'s in the ioctl transacions code.Ryan Thomas McBride
2003-10-19more typosDavid Krause
2003-10-17Common Address Redundancy ProtocolRyan Thomas McBride
2003-10-10make sure pd is initialized before use (or byte counters may increaseDaniel Hartmeier
2003-10-08obviously i'm on drugs, revertHenning Brauer
2003-10-08missing DIOCX* in the securelevel > 1 caseHenning Brauer
2003-10-04bpf support for atm cards; from jason@ackley.netTheo de Raadt
2003-10-02do not try to send incomplete fragments on ENOBUFS caseJun-ichiro itojun Hagino
2003-10-02correct endian handling of ip->ip_off.Jun-ichiro itojun Hagino
2003-10-01Fix stack leak into pfloghdr (the pad field is not initialized),Can Erkin Acar
2003-10-01make ifindex2ifnet growing code more correct. (found by iij seil team)Jun-ichiro itojun Hagino
2003-09-28Correct off-by-ones with respect to PRC_NCMDS. Mostly from FreeBSD.Chad Loder
2003-09-26Rearchitecture of the userland/kernel IOCTL interface for transactions.Cedric Berger
2003-09-26Move statistics counters from individual pf_test_<proto>() andRyan Thomas McBride
2003-09-24Remove state setup no-ops.Ryan Thomas McBride
2003-09-23Replace select backends with poll backends. selscan() and pollscan()Todd C. Miller
2003-09-21sync with netbsd defines. no functional changes.Federico G. Schwindt
2003-09-18comment spelling, from jonathon grayTed Unangst
2003-09-01KNFHenning Brauer
2003-09-01Make nat rule update the table counters when no filtering rule is used.Cedric Berger
2003-08-29Fix three cases of potential accesses to free'd memory. At least one ofDaniel Hartmeier
2003-08-28fix "pfctl -vvsr" output for rules with tables inside anchors.Cedric Berger
2003-08-27fix inconsistency how we handle tcpopt EOL versus how p0f v2 handles itMike Frantzen
2003-08-27it is supprisingly common (>4%) for some NAT and DSL routers to tweak MSSMike Frantzen
2003-08-27RNF_IGNORE can corrupt the radix tree when an interface is down, itHenric Jungheim