| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2004-10-18 | Do not embed an ip header with a decremented ttl into an icmp message. | Otto Moerbeek | |
| Wait with the decrement until after the copy is done. Resolves checksum mismatches on the embedded header, as reported by tcpdump. ok markus@ itojun@ | |||
| 2004-09-23 | remove some more compile time overrides, use the sysctl's. | Brad Smith | |
| ok markus@ | |||
| 2004-07-31 | remove GATEWAY and IPFORWARDING option knobs, use the sysctl. | Brad Smith | |
| ok mcbride@ miod@ deraadt@ | |||
| 2004-06-22 | Pull the plug on source-based routing until remaining bugs are eradicated. | Cedric Berger | |
| No need to reconfig kernel or rebuild userland stuff. requested deraadt@, help beck@ | |||
| 2004-06-21 | Get rid of pf_test_eh() wrapper. | Ryan Thomas McBride | |
| ok cedric@ henning@ | |||
| 2004-06-06 | extend routing table to be able to match and route packets based on | Cedric Berger | |
| their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@ | |||
| 2004-03-15 | strncpy -> strlcpy. ok markus@ "(this is even unused crap, i think)" | Ted Unangst | |
| from Patrick Latifi | |||
| 2004-02-15 | switch to sysctl_int_arr(); ok itojun, henning, miod, deraadt | Markus Friedl | |
| 2004-02-13 | typo, lenght -> length | Brad Smith | |
| 2003-12-10 | de-register. deraadt ok | Jun-ichiro itojun Hagino | |
| 2003-07-29 | fixup ip_len back to wire format after reass. | Jun-ichiro itojun Hagino | |
| 2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino | |
| (please test, especially PF portion) | |||
| 2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
| rescinded 22 July 1999. Proofed by myself and Theo. | |||
| 2003-05-03 | string fixes; tedu ok | Theo de Raadt | |
| 2003-02-12 | Remove commons; inspired by netbsd. | Jason Wright | |
| 2003-02-11 | No ICMP redirect when PF nat code redirect the packet on the LAN. | Cedric Berger | |
| ok dhartmei@ | |||
| 2003-01-07 | remove the altq classifier code which is replaced by pf and no longer used. | Kenjiro Cho | |
| ok henning@, deraadt@ | |||
| 2002-09-04 | Ghosts from the past (fixed 1.65, reverted 1.66) rediscovered by | Daniel Hartmeier | |
| Henric Jungheim. ok deraadt@ | |||
| 2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom | |
| NULL to full 64 bits on a 64 bit address system. Soultion is to add a (void *) cast before NULL. This makes a 64 bit MIPS kernel work and will probably help future 64 bit ports as well. OK from art@ | |||
| 2002-07-03 | Change all variables definitions (int foo) in sys/sys/*.h to variable | Miod Vallat | |
| declarations (extern int foo), and compensate in the appropriate locations. | |||
| 2002-06-09 | whitespace | Jun-ichiro itojun Hagino | |
| 2002-06-07 | use TAILQ_FOREACH macro; ok angelos | jasoni | |
| 2002-05-16 | bring in ECN support from KAME. | Kenjiro Cho | |
| it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@ | |||
| 2002-04-24 | Update IPsec-related comments. | Angelos D. Keromytis | |
| 2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
| 2002-02-22 | do not transmit ICMP source quench. from kjc/kame | Jun-ichiro itojun Hagino | |
| 2002-01-25 | Add a drain hook to each pool. This hook is called in three cases. | Artur Grabowski | |
| 1. When a pool hit the hard limit. Just before bailing out/sleeping. 2. When an allocator fails to allocate memory (with PR_NOWAIT). 3. Just before trying to reclaim some page in pool_reclaim. The function called form the hook should try to free some items to the pool if possible. Convert m_reclaim hooks that were embedded in MCLGET, MGET and MGETHDR into a pool drain hook (making the code much cleaner). | |||
| 2002-01-23 | Pool deals fairly well with physical memory shortage, but it doesn't deal | Artur Grabowski | |
| well (not at all) with shortages of the vm_map where the pages are mapped (usually kmem_map). Try to deal with it: - group all information the backend allocator for a pool in a separate struct. The pool will only have a pointer to that struct. - change the pool_init API to reflect that. - link all pools allocating from the same allocator on a linked list. - Since an allocator is responsible to wait for physical memory it will only fail (waitok) when it runs out of its backing vm_map, carefully drain pools using the same allocator so that va space is freed. (see comments in code for caveats and details). - change pool_reclaim to return if it actually succeeded to free some memory, use that information to make draining easier and more efficient. - get rid of PR_URGENT, noone uses it. | |||
| 2001-12-10 | No need to m_freem(m) if m is already NULL. dhartmei@ ok. | Hakan Olsson | |
| 2001-12-06 | remove #if 0'ed portion (for KAME IPSEC - not needed) | Jun-ichiro itojun Hagino | |
| 2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
| ok dhartmei@, frantzen@ | |||
| 2001-09-18 | Avoid memory leak when disabling PMTU, rt_timer_queue_destroy() expects the | Aaron Campbell | |
| caller to free the structure. | |||
| 2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
| 2001-07-16 | Move altq after pf; suggested by aaron@, kjc@ ok. | Federico G. Schwindt | |
| 2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
| 2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
| okay dhartmei@, dugsong@ | |||
| 2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
| - ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
| 2001-06-26 | no longer pass around **m | Theo de Raadt | |
| 2001-06-25 | Build without IPSEC. | Artur Grabowski | |
| 2001-06-24 | make it compile w/o pf | Michael Shalayeff | |
| 2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding | |
| Insane amounts of work done my dhartmei. Great work! | |||
| 2001-06-24 | take mtu from routing table | Niels Provos | |
| 2001-06-23 | Clear the checksum flags after verification. Also, don't count | Angelos D. Keromytis | |
| checksum errors as hardware checksum packets as well. | |||
| 2001-06-23 | Count input packets hardware-checksummed. | Angelos D. Keromytis | |
| 2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt | |
| Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment. | |||
| 2001-06-23 | Count input/output hardware-checksummed IP packets. | Angelos D. Keromytis | |
| 2001-06-23 | Clear IPv4 input checksum OK flag after verification. | Angelos D. Keromytis | |
| 2001-06-23 | TCP, UDP, IPv4 input hardware checksumming processing; also IPv4 | Angelos D. Keromytis | |
| output hardware checksumming. Not tested yet, but should be done tonight. Remain to be solved: interactions with bridge, TCP/UDP output checksumming, interactions of TCP/UDP checksumming with routing changes. | |||
| 2001-06-19 | mop up after angelos | Theo de Raadt | |
| 2001-06-08 | Cut down on include files. | Angelos D. Keromytis | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |