Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-12-16 | when a bridge filter rule specifies both src and dst mac address, we do not | Henning Brauer | |
want to compare both against the packet's source address. works much better when we compare the dst address to the packet's dst address. ok camield@ canacar@ markus@ jason@ | |||
2003-12-16 | Add SLIST_FOREACH_PREVPTR and SLIST_REMOVE_NEXT. SLIST_FOREACH_PREVPTR | Todd C. Miller | |
is like SLIST_FOREACH but it saves a pointer to the previous element. SLIST_REMOVE_NEXT will remove the element *after* the one passed in. SLIST_FOREACH_PREVPTR is from FreeBSD; SLIST_REMOVE_NEXT was suggested by canacar@; man page additions by yours truly. OK deraadt@ (grudgingly) and man page changes OK jmc@. | |||
2003-12-16 | reenable sti1 as the issues has been resolved | Michael Shalayeff | |
2003-12-16 | return error in ifc_destroy; ok deraadt, itojun, cedric, hshoexer | Markus Friedl | |
2003-12-16 | uncessary defns | Jason Wright | |
2003-12-16 | Don't need linear mappings here either | Jason Wright | |
2003-12-16 | don't do a linear mapping (prevents warnings on the leopard) | Jason Wright | |
2003-12-16 | Compute openings value, out of boot-time count of devices. | Niklas Hallqvist | |
Add reentrancy check of gdt_exec_ccb. The latter change changes timing enough to not trigger a timing bug on really fast machines too often. A real fix is being worked on. | |||
2003-12-16 | Compute openings value, out of boot-time count of devices. | Niklas Hallqvist | |
Add reentrancy check of gdt_exec_ccb. The latter change changes timing enough to not trigger a timing bug on really fast machines too often. A real fix is being worked on. | |||
2003-12-16 | Becuase | Theo de Raadt | |
2003-12-16 | Don't do all the heavy pfsync processing if there are no bpf listeners | Ryan Thomas McBride | |
and no network synchronization is happening. | |||
2003-12-16 | clean the cpu types and sync | Michael Shalayeff | |
2003-12-16 | only map the rom and do not touch the hpa space getting rid of memsize ↵ | Michael Shalayeff | |
define that was not really true; plus tested by otto@ and miod@ | |||
2003-12-16 | Pass gcc -Wsign-compare; ok grange@ | Todd C. Miller | |
2003-12-16 | shrink error strings a lot; ok millert | Theo de Raadt | |
2003-12-16 | Remove unused strings; we print out info from pcmciadevs during | Todd C. Miller | |
device attachment so we don't need extra ones. OK mickey@ deraadt@ | |||
2003-12-16 | shorten terminal baud rate change strings | Theo de Raadt | |
2003-12-16 | becuase | Theo de Raadt | |
2003-12-15 | Set devclass to DV_IFNET for all USB network drivers. | Cedric Berger | |
ok deraadt@ nate@ | |||
2003-12-15 | sync | Theo de Raadt | |
2003-12-15 | more shrink | Theo de Raadt | |
2003-12-15 | Fix some sign issues that fell out from the change of rlim_t to unsigned. | Todd C. Miller | |
Also add a check for a negative result when subtracting microtime(&now) from runtime and simply treat this as zero. This should *not* happen but due to an apparent bug in microtime on dual clock machines, it does. The microtime bug is currently being examined. Based on a diff from miod@ with help from otto@; ok deraadt@ otto@ | |||
2003-12-15 | sc_sp is a #define on some architectures, use a different name | Theo de Raadt | |
2003-12-15 | ryan left a few for me ;-) | Henning Brauer | |
2003-12-15 | workaround a clock tick handling bug that the rlimit code just exposed. | Theo de Raadt | |
2003-12-15 | Fix whitespace screwups before henning wakes up. | Ryan Thomas McBride | |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride | |
Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@ | |||
2003-12-15 | sync | Theo de Raadt | |
2003-12-15 | shorten names a lot | Theo de Raadt | |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride | |
to: - Ensure that clients get a consistent IP mapping with load-balanced translation/routing rules - Limit the number of simultaneous connections a client can make - Limit the number of clients which can connect through a rule ok dhartmei@ deraadt@ | |||
2003-12-14 | the extended long (bracketed) cpu names are not useful to anyone -- they are | Theo de Raadt | |
just trivia -- and they bloat the ramdisk kernels by a fair bit. remove them. | |||
2003-12-14 | Replace pmap_testbit/pmap_changebit sequences with a tailor-made pmap_unsetbit | Miod Vallat | |
routine, in order to speed up pmap_clear_modify() and pmap_clear_reference(). | |||
2003-12-14 | Remove unnecessary trunc_page() calls, and change pmap_enter() logic to | Miod Vallat | |
match m68k. | |||
2003-12-14 | In pmap_testbit, always update the attribute flags for the pv list hander. | Miod Vallat | |
Fixes a regression introduced in the conversion from physseg to VM_PAGE_MD. | |||
2003-12-14 | alignment fixes (e.g sparc 64); from Daniel Lucq; ok millert, henning | Markus Friedl | |
2003-12-13 | initial support ifconfig destroy; ok deraadt@ | Markus Friedl | |
2003-12-12 | sync | Theo de Raadt | |
2003-12-12 | 7954 will be a speed-bin 7955 | Theo de Raadt | |
2003-12-12 | another small compiler warning cleanup (#error instead of bailing out) | Hans-Joerg Hoexer | |
ok henning@ | |||
2003-12-12 | Provide a better delay() resolution on 188. | Miod Vallat | |
2003-12-12 | Move PF interface code to new net/pf_if.c | Cedric Berger | |
Expect improvements in this area soon. ok dhartmei@ mcbride@ | |||
2003-12-12 | typo | Theo de Raadt | |
2003-12-12 | Support for 2 new acard ata133 chips. | Alexander Yurchenko | |
2003-12-12 | nforce chip doesn't have cable check bit; noticed by hugh@ a long | Alexander Yurchenko | |
time ago. | |||
2003-12-12 | small compiler warning cleanup (#error instead of bailing out) | Hans-Joerg Hoexer | |
ok henning@ grange@ | |||
2003-12-12 | initialze -> initializes; from Eric Borsboom; | Jason McIntyre | |
2003-12-12 | missing parameter to printf; erick@bonzai.space-ei.nl | Theo de Raadt | |
2003-12-12 | niels kindly dropped clause 3/4 from the license. tnx! | Jun-ichiro itojun Hagino | |
2003-12-12 | previous commit included bad hunk. sorry | Jun-ichiro itojun Hagino | |
2003-12-12 | Remove unused and incorrect generic interface ioctl defines SIOCSIFGENERIC | Ryan Thomas McBride | |
and SIOCGIFGENERIC. ok mickey@ |