summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2008-10-10back out previous change. Another panic, not as frequent, andDavid Hill
2008-10-10Comment out statekey code to stop 'panic: soreceive 3', whichDavid Hill
2008-09-28Ansify function declarations for gif(4).Joel Sing
2008-09-28Clear the PF state key before an IP packet exits a gif(4) tunnel, in orderJoel Sing
2008-09-16remove another dead store.Charles Longeau
2008-09-15remove dead stores and newly created unused variables.Charles Longeau
2008-09-10Convert timeout_add() calls using multiples of hz to timeout_add_sec()Bret Lambert
2008-09-10icmp_reflect reuses mbufs. call pf_pkt_addr_changed to clear the stateHenning Brauer
2008-09-09The pf state to pcb linking code change didn't account for theMarco Pfatschbacher
2008-09-03do not set the pkthdr mbuf state key pointer to the state key saved in theHenning Brauer
2008-09-03Prevent a possible overflow when the sum of all demotion countersMarco Pfatschbacher
2008-08-26we need to call pf_pkt_addr_changed here too. found by davidHenning Brauer
2008-08-26call pf_pkt_addr_changed instead of manually clearing the pf state key ptrHenning Brauer
2008-08-21Assign the ip and ip6 pointers in ipsp_process_packet() only if aAlexander Bluhm
2008-07-29when detaching pcbs, also free the v6 output options so that we do notTheo de Raadt
2008-07-24ipsec is glued into the stack in a very weird way, violating all kindsHenning Brauer
2008-07-22Assign the struct size to sin6_len instead of sin6_family.Alexander Bluhm
2008-07-16link udp pcbs to pf states, same as done for tcp alreadyHenning Brauer
2008-07-10add X11 ports to default TCP baddynamic listDamien Miller
2008-07-09expand the net.inet.(tcp|udp).baddynamic dynamic source portDamien Miller
2008-07-03link pf state keys to tcp pcbs and vice versa.Henning Brauer
2008-06-28no EOL between tcpsig and sack headers; ok jsing, frantzenMarkus Friedl
2008-06-26First pass at removing clauses 3 and 4 from NetBSD licenses.Ray Lai
2008-06-14make easier to read, found during a bug hunt earlierTodd T. Fries
2008-06-14Include "faith.h" in order to get NFAITH. Also clean up NFAITH conditionalsJoel Sing
2008-06-14add carppeer; an option to specify a different multicast address orReyk Floeter
2008-06-14ANSIfy function definitions.Joel Sing
2008-06-14Include "pf.h" so we get NPF.Joel Sing
2008-06-13Do not log carp state transitions from or to INIT by default.Marco Pfatschbacher
2008-06-12Remove some crazy #if mess.Joel Sing
2008-06-12ANSIfy function definitions.Joel Sing
2008-06-12Fix type difference between function prototype and implementation.Joel Sing
2008-06-110 -> PR_NOWAIT (which is defined as 0) in pool_getBret Lambert
2008-06-11fix an old typo that prevented outer ipv6 headers from being corrected,Can Erkin Acar
2008-06-10encapsulating v4 in v6 IPSec should not be so fun,Todd T. Fries
2008-06-09rename arc4random_bytes => arc4random_buf to match libc's nicer name;Damien Miller
2008-06-08When adding PMTU related routes to the table inherit the priority form theClaudio Jeker
2008-06-08alloc ipq's for fragment reassembly from a pool instead of usingThordur I. Bjornsson
2008-06-06we must not hardcode the route priority in arplookup, it does notHenning Brauer
2008-06-04adderss -> addressMiod Vallat
2008-05-24Remove {tcp/udp}6_usrreq(); Since the normal ones nowThordur I. Bjornsson
2008-05-23Deal with the situation when TCP nfs mounts timeout and processesThordur I. Bjornsson
2008-05-19Unbreak builds for kernels that have atm interfaces. Found the hard way byClaudio Jeker
2008-05-15divert for ipv6; ok henning, pyrMarkus Friedl
2008-05-11Try harder to avoid corrupting the mbuf pool. Stuff any mbuf chain inKenneth R Westerback
2008-05-09more rtrequest() to rtrequest1() replacement.Claudio Jeker
2008-05-09arp entries in the routing table should have priority RTF_CONNECTEDHenning Brauer
2008-05-09should check for null pointers; from henning@Markus Friedl
2008-05-09IP_RECVDSTPORT, allows you to get the destination port of UDP datagramsMarkus Friedl
2008-05-09Add SO_BINDANY socket option from BSD/OS.Markus Friedl