Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-01-15 | print stats for tcp md5 checksums (aka 'signature'); ok millert@, deraadt@ | Markus Friedl | |
2004-01-13 | Fix printf formats and add missing include. | Otto Moerbeek | |
ok mcbride@ deraadt@ | |||
2004-01-06 | import netbsd's version of David Borman's syncache code | Markus Friedl | |
http://www.kohala.com/start/borman.97jun06.txt; ok deraadt@, henning@ | |||
2003-12-27 | Fix cut-n-paste oversight in pfsync_stats(). | Ryan Thomas McBride | |
2003-12-22 | remove a suplicate comment | Michael Shalayeff | |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride | |
Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@ | |||
2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl | |
ok deraadt@ | |||
2003-11-28 | remove "or uninstrumented" from "unknown or uninstrumented protocol"; | Jason McIntyre | |
simplified by marc@ and ok millert@; | |||
2003-11-28 | netstat.1: | Jason McIntyre | |
- In SYNOPSIS, -a goes with interface display, not -s - In SYNOPSIS, -i and -I are mutually exclusive - expand -a description (shows multicast with interface display) - expand -b and -d descriptions and fix parenthesis typo - consistently refer to multicast (not Multicast) and MTU (not mtu) - expand -I description (interaction with -a) - two missing full stops - update SEE ALSO main.c: - sync with SYNOPSIS | |||
2003-11-08 | typos from Jonathon Gray; | Jason McIntyre | |
2003-11-07 | Check to make sure that the packet was received on a carp-enabled interface. | Ryan Thomas McBride | |
Pointed out by Marco Pfatschbacher, ok mickey@ | |||
2003-11-06 | fix linklocal multicast address handling. Matthias Drochner | Jun-ichiro itojun Hagino | |
2003-11-02 | print raw ip[46] sockets; ok deraadt@ | Markus Friedl | |
2003-10-31 | Add IPv6 support to CARP. | Ryan Thomas McBride | |
ok deraadt@ | |||
2003-10-25 | #undef p2 in carp_stats() | Ryan Thomas McBride | |
Pointed out by Max Laier | |||
2003-10-17 | Common Address Redundancy Protocol | Ryan Thomas McBride | |
Allows multiple hosts to share an IP address, providing high availability and load balancing. Based on code by mickey@, with additional help from markus@ and Marco_Pfatschbacher@genua.de ok deraadt@ | |||
2003-10-07 | missing free(). Andrey Matveev via deraadt@. ok deraadt@ | Ted Unangst | |
2003-10-04 | oops | Theo de Raadt | |
2003-10-04 | tweaks from andrushock@korovino.net | Theo de Raadt | |
2003-10-03 | deal with KAME embedded scope-id for PF_KEY (Encap) route dump. deraadt ok | Jun-ichiro itojun Hagino | |
2003-09-26 | fix columns; sahara@surt.net | Theo de Raadt | |
2003-09-04 | fix crash and add new icmpnames. based on pr3439. some input fgsch@. | Ted Unangst | |
ok deraadt@ fgsch@ | |||
2003-09-04 | typo; aldo@nullcube.com | Theo de Raadt | |
2003-08-27 | RNF_IGNORE can corrupt the radix tree when an interface is down, it | Henric Jungheim | |
makes routing lookups slightly more expensive, and serves no useful purpose. ok itojun@ tedu@ | |||
2003-08-26 | mark cloned route with RTF_CLONED. remove RTF_CLONED route when clone parent | Jun-ichiro itojun Hagino | |
disappers. deraadt ok | |||
2003-08-19 | number of mbuf clusters is not the same as number of pages allocated for ↵ | Michael Shalayeff | |
'em; noticed by dsb@uvm.poi.dvo.ru | |||
2003-07-14 | - Dv Ta -> Ta Dv | Jason McIntyre | |
- kill a .br | |||
2003-07-10 | add missing includes | David Krause | |
ok deraadt@ tedu@ | |||
2003-07-07 | protos | Theo de Raadt | |
2003-06-26 | more proto fixes | Theo de Raadt | |
2003-06-25 | add proto | Theo de Raadt | |
2003-06-12 | - document -ltu options; | Jason McIntyre | |
from PR 3307 (Zoltan Glozik) - sync SYNOPSIS and usage(); ok henning@ deraadt@ | |||
2003-06-05 | remove some incorrect documentation; | Jason McIntyre | |
from Aldo Cortesi (PR 3277); ok deraadt@ | |||
2003-06-03 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-05-14 | use __KAME__ to determine kame-based kernel. | Jun-ichiro itojun Hagino | |
2003-03-21 | change 'netstat -m' output from: | Philipp Buehler | |
0/28 mapped pages in use to 0/14/1024 mbuf cluster pages in use (current/peak/max) ok henning@, millert@ | |||
2003-03-16 | correctly initialize a pointer | Nikolay Sturm | |
OK millert@ | |||
2003-03-13 | lots of sprintf -> snprintf and strcpy -> strlcpy; checked by tedu | Theo de Raadt | |
2003-02-19 | add a counter for times ipcomp is skipped because the packet is below the | Jason Wright | |
minimum compression threshold. | |||
2003-02-12 | Remove commons; inspired by netbsd. | Jason Wright | |
2003-02-01 | Fix out-of-bounds access to nl[255], found by naddy@ in context of | Daniel Hartmeier | |
propolice. ok theo@ | |||
2003-02-01 | ansi | Theo de Raadt | |
2002-10-26 | typo. NetBSD PR 18816 | Jun-ichiro itojun Hagino | |
2002-09-23 | correctly dump radix_node; henric@attbi.com | Theo de Raadt | |
2002-09-19 | Don't print garbage when getnameinfo fails. henning@ ok. | Hakan Olsson | |
2002-09-18 | fix Xr refs; frisco@blackant.net | Theo de Raadt | |
2002-08-04 | revoke privs earlier | Theo de Raadt | |
2002-07-25 | handle < 0 and such better | Theo de Raadt | |
2002-06-30 | Correctly retrieve mbuf statistics from the kernel. | Angelos D. Keromytis | |
2002-06-24 | KERN_POOL_POOL, not KERN_POOL_NPOOLS --- I wonder how this was not | Angelos D. Keromytis | |
observed. From dfa@solo.ee and dsb@nt.pin.dvgu.ru |