summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2009-11-21Add a way to bind the tunnel endpoint of a gif/gre interface into aClaudio Jeker
2009-11-20NULL dereference in IPV6_PORTRANGE and IP_IPSEC_*, found by Clement LECIGNE,Philip Guenthe
2009-11-19avoid overflow since protos > IPPROTO_MAX exist. From FreeBSD withOtto Moerbeek
2009-11-13Extend the protosw pr_ctlinput function to include the rdomain. This isClaudio Jeker
2009-11-13Packets generated by ip_fragment() need to inherit the rdomain from theClaudio Jeker
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-10-28*NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,Theo de Raadt
2009-10-25Get rid of unused macro `la_timer'.Michael Knudsen
2009-10-17Allow us to accept gratuitous ARP requests in cases where theMarco Pfatschbacher
2009-10-06Redo the route lookup in the output (and IPv6 forwarding) path if theClaudio Jeker
2009-10-04Add (again) support for divert sockets. They allow you to:Michele Marchetto
2009-09-08I had not enough oks to commit this diff.Michele Marchetto
2009-09-08Add support for divert sockets. They allow you to:Michele Marchetto
2009-08-23revert the icmp error diff again (r1.167-1.169)David Krause
2009-08-20fix indentationAlexander Bluhm
2009-08-12don't confuse chars with strings; ok oga@Martynas Venckus
2009-08-107 years ofHenning Brauer
2009-08-10we need to null mcopy, gotos bite. theo and i both missed them, theo okHenning Brauer
2009-08-10fix previous:Henning Brauer
2009-08-10this is basically a fixed version of r1.165, avoid m_copym of each and everyHenning Brauer
2009-08-10sockets created via a listening socket lose the rdomain and fail to workClaudio Jeker
2009-08-09once again ipsec tries to be clever and plays fast, this time byHenning Brauer
2009-08-01timeout_add -> timeout_add_msecBret Lambert
2009-07-28revert the avoidance of the mbuf copy for the icmp errors (r1.165)David Gwynne
2009-07-27Define the common DiffServ Codepoints so pf(4) can use them.Claudio Jeker
2009-07-26no need to cast the return value of m_freem() to voidThordur I. Bjornsson
2009-07-24for every packet we forwarded, we copied the first 68 bytes of it in caseDavid Gwynne
2009-07-13Get rid of the token bucket filter.Michele Marchetto
2009-07-09Use MAXTTL instead of the hardcoded value.Michele Marchetto
2009-06-17Correctly handle the carp demote counter in all input cases.Marco Pfatschbacher
2009-06-09By default, don't accept IPv4 ICMP redirects. This behaviour can beStuart Henderson
2009-06-08remove stray * from comment, probably a rewrapping artefactStuart Henderson
2009-06-05Initial support for routing domains. This allows to bind interfaces toClaudio Jeker
2009-06-04the decision on wether a packet is to be delivered locally or forwardedHenning Brauer
2009-06-03add the basic infrastructure to take advantage of TCP and UDP receiveChristian Weisgerber
2009-06-02Shuffle function declarations a bit; ipsp_kern doesn't actually exist,Bret Lambert
2009-06-02do the pf_pkt_addr_changed(m) magic just like gif etcHenning Brauer
2009-06-02satosin was already defined in in.h, no need to redefine it hereBret Lambert
2009-06-020 -> NULLBret Lambert
2009-06-02Fix an off-by-one in the ddb-only debugging function tdb_hashstats.Owain Ainsworth
2009-05-18The routing table index rtableid has type unsigned int in the routingAlexander Bluhm
2009-03-15Introduce splsoftassert(), similar to splassert() but for soft interruptMiod Vallat
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2009-01-30When don't-fragment packets need to get fragemnted some code tries toClaudio Jeker
2009-01-29Always zero the IP checksum field for packets and packet fragmentsChristian Weisgerber
2009-01-27In IPsec acquire mode, if the flow was configured for the "any"Alexander Bluhm
2008-12-24Fix two mbuf leaks in arpresolve. The first one happens on IFF_NOARPClaudio Jeker
2008-12-24report the number of packets that arp resolution is holding onto until itDavid Gwynne
2008-11-26call pf_pkt_addr_changed() when we do encapsulateHenning Brauer
2008-11-08fix macros up so they use the do { } while (/* CONSTCOND */ 0) idiomDavid Gwynne