summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2010-01-18Convert pf debug logging to using log()/addlog(), a single standardisedRyan Thomas McBride
2010-01-14henning and I are both dumbasses, testing &foo against NULL is pointless.Ryan Thomas McBride
2010-01-14When printing states in debug output, print the rule number that createdRyan Thomas McBride
2010-01-14i forgot to remove a now obsolete comment in pf_create_state aboutHenning Brauer
2010-01-14in pf_create_state, when we fixed the leaks, we were a bit too triggerHenning Brauer
2010-01-13in pf_state_key_detach, ensure that the state key pointer on the stateHenning Brauer
2010-01-13cleanup pipex code. ok henning@YASUOKA Masahiko
2010-01-13replace static on functions with Static so openbsd can define it awayDavid Gwynne
2010-01-13Preliminary rdomain support in bridge(4). Make sure that m->m_pkthdr.rdomainClaudio Jeker
2010-01-13make ifa_ifwithaddr use the shiny new ifaddr RB tree instead of traversingHenning Brauer
2010-01-13maintain a global RB tree of all local addresses in the system. thisHenning Brauer
2010-01-13instead of fiddling with the per-interface address lists directly inHenning Brauer
2010-01-13Remove extern reference to pf_pabuf which uses a structJonathan Gray
2010-01-12factor m_pulldown out of the message handlers up into pfsync_input nowDavid Gwynne
2010-01-12delete more left-over stuff from vether developmentTheo de Raadt
2010-01-12the bridge does bpf for us, so we do not need bpf.hTheo de Raadt
2010-01-12delete the unused debug macrosTheo de Raadt
2010-01-12do not need rndvar.h anymoreTheo de Raadt
2010-01-12check the new pfsync_subheader len field on input.David Gwynne
2010-01-12After calling pipex_pppoe_input(), we must goto done to restore the spl.YASUOKA Masahiko
2010-01-12Remove simple_unlock() that is mistakenly introduced and add requiredYASUOKA Masahiko
2010-01-12Move initialization of the MCLGETI ticker to mbinit(), instead of ifinit()Theo de Raadt
2010-01-12Unify the various fake ethernet generators as ether_fakeaddr() whichTheo de Raadt
2010-01-12First pass at removing the 'pf_pool' mechanism for translation and routingRyan Thomas McBride
2010-01-12Remove bpfdetach() call right in front of the if_detach() call sinceClaudio Jeker
2010-01-12Delete unused structures. Pointed out by deraadt@.YASUOKA Masahiko
2010-01-12fix ioctl number that conflicted with tun(4)'s ioctl number.YASUOKA Masahiko
2010-01-12set the length of the send queue to 1.David Gwynne
2010-01-12Make the structures for ifa_msghdr and friends even more likeTheo de Raadt
2010-01-11"final" leak in state creation: in pf_state_key_setup, if we actuallyHenning Brauer
2010-01-11fix a bug in pf_create_state that was a major source of amusement for meHenning Brauer
2010-01-11Initial import PIPEX. PIPEX(Pppac IP EXtension) is a IP forwardingYASUOKA Masahiko
2010-01-11remove some debug code that snuck in somehow.David Gwynne
2010-01-10replace a pad in the pfsync subheader with a length field. it stores theDavid Gwynne
2010-01-09No need to call bpfdetach() in mpe_clone_destroy() since this is done inClaudio Jeker
2010-01-08During "ifconfig $if -inet6" remove v6 addresses even if theStefan Sperling
2009-12-26Initial rdomain support for mpe(4). Caveat: assumes MPLS is always inClaudio Jeker
2009-12-24add support to pf for filtering a packet by the interface it was receivedDavid Gwynne
2009-12-14fix sticky-address - by pretty much re-implementing it. still followingHenning Brauer
2009-12-13Ensure that if_start() is called at IPL_NET.Joel Sing
2009-12-08move "pf: key search" and "pf: key setup" messages to PF_DEBUG_NOISYStuart Henderson
2009-12-03fix order dependency of pfsync interface setup, with claudio;Otto Moerbeek
2009-11-26magical fix for a fault which reliably brings my firewalls down. i thinkDavid Gwynne
2009-11-24kill obsolete natpassHenning Brauer
2009-11-23with the old code we initialized the state keys early in some casesHenning Brauer
2009-11-23one kinda-missing log |= PFLOG_FORCE in the v6 case, spotted by claudioHenning Brauer
2009-11-23sync the handling of the log flag from pf_test (where it is correct)Henning Brauer
2009-11-23pf_test_fragment: we need to bail out if action == PF_DROP, notHenning Brauer
2009-11-23sync some comments with realityHenning Brauer
2009-11-23remove the nat_rule pointer on pf_state and pf_pdesc, obsolete afterHenning Brauer