summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2014-02-25If the in6 domain was not attached, do not attempt to process IPv6 packets.pooka
2014-02-25Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist beforepooka
the sysctl link sets are processed, and remove redundancy. Shaves >13kB off of an amd64 GENERIC, not to mention >1k duplicate lines of code.
2014-02-19NPF: fix the recent breakage of the traceroute ALG. Also, simplify andrmind
refactor a little bit.
2014-02-17npf_alg_session: fix inverted logic in the previous commit.rmind
2014-02-16NPF: pass ALG functions via npfa_funcs_t structure.rmind
2014-02-13NPF: add support for IPv6-to-IPv6 Network Prefix Translation (NPTv6),rmind
as per RFC 6296. Add a unit test. Also, bump NPF_VERSION. Thanks to S.P.Zeidler for the help with NPTv6 work!
2014-02-07NPF: add support for static (stateless) NAT.rmind
2014-02-06Add support for CDB based NPF tables.rmind
2014-01-25add __USEchristos
2014-01-25add a lint commentchristos
2014-01-03missed one inet6 checkpooka
2014-01-02Allow kernels compiled with INET+INET6 to be booted as IPv4-only or IPv6-only.pooka
2013-12-29Modularize net/zlib so it can be used by the vnd module (and, eventually,pgoyette
by an opencrypto module).
2013-12-15XXXgcc Wuninitialized kludgepooka
2013-12-06NPF:rmind
- Adjust NAT to not assume flow direction in some cases and thus support less usual setups which are possible when using 'map' with a custom filter criteria. - Introduce NPF_SRC/NPF_DST and replace npc_src/npc_dst with npc_ips[2] for more convenient handling. - ICMP ALG: restrict matching only to the outgoing traffic, but be more direction-agnostic elsewhere.
2013-12-05It is silly to kill the system when an interface failed to clear promiscuouschristos
mode. Some return EINVAL when they are dying, but others like USB return EIO. Downgrade to a DIAGNOSTIC printf. Same should be done for the malloc/NOWAIT, but this is rarely hit.
2013-12-04- npf_do_nat: fix a race condition and simplify the logic.rmind
- npf_session_setnat: clear the NAT association on failure.
2013-11-23Move initialisation of bpf_args_t into the npf_ruleset_inspect().rmind
This allows us to reuse the BPF memory store as a cache.
2013-11-22Optimise checksum fixup routines:rmind
- npf_fixup16_cksum: 1's complement sum is endian-independent. - npf_fixup32_cksum: the first 32->16 bit reduction is not needed. Pointed out by Valery Ushakov.
2013-11-22npf_addr_mix: use xor rather than sum.rmind
2013-11-22Add npf_tableset_syncdict() to sync the table IDs in the proplib dictionary,rmind
as they can change on reload now. Also, fix table name checking in npfctl.
2013-11-16NPF: convert to bpf_jit_generate()/bpf_jit_freecode().rmind
2013-11-16bpf_deliver: convert to bpf_filter_ext().rmind
2013-11-15Fix the bpfjit build.rmind
2013-11-15- Add bpf_args_t and convert bpf_filter_ext() to use it. This allows thermind
caller to initialise (and re-use) the memory store. - Add bpf_jit_generate() and bpf_jit_freecode() wrappers.
2013-11-12NPF: add support for table naming and remove NPF_TABLE_SLOTS (there isrmind
just an arbitrary sanity limit of NPF_MAX_TABLES currently set to 128). Few misc fixes. Bump NPF_VERSION.
2013-11-11Add missing [0] (check for unused entries) when matching interfacemartin
names.
2013-11-08NPF: add support for specifying the interfaces before they are attached.rmind
If an interface is or gets detached, all associated rules and connections will be deactivated (it might be useful to have an option to invalidate the associated connections). Once the interface is reattached they will become active. Bump NPF_VERSION.
2013-11-07eliminate unused variablechristos
2013-11-04npf_generic_fsm and npf_tcp_fsm: use uint8_t and make the arrays more dense.rmind
2013-10-30used __diagused where appropriate.mrg
2013-10-29npf_session_setnat: fix the race condition when the old connection is stillrmind
being expired while a new/duplicate is being created.
2013-10-28add an alias for the linux name for the interface indexchristos
2013-10-27Add NPF_MAX_RULES, an artificial limit (set it to 1M).rmind
2013-10-25Turn a few __unused into __diagusedmartin
2013-10-25RFC3032 conformance for Router Alert Labelkefren
2013-10-19adjust previous; old_link_state is also used in INET6.mrg
2013-10-19Ifdef a variable like its usemartin
2013-10-06remove unrelated diff.christos
2013-10-05fix the source too, not just the doc.christos
2013-10-05Add SIOCGIFINDEX from Ty Sarna and Matthew Sporleder.christos
2013-10-05bpf_filter: re-use some code. No functional change intended.rmind
2013-09-26sess_hash_bucket: convert to murmurhash2, include ports, use random seed.rmind
2013-09-20bpfjit: replace malloc with kmem, KNF a little, add RCS ID.rmind
2013-09-19NPF: G/C n-code in favour of BPF byte-code. Delete lots of code, mmm!rmind
2013-09-19- Convert NPF to use BPF byte-code by default. Compile BPF byte-code inrmind
npfctl(8) and generate separate marks to describe the filter criteria. - Rewrite 'npfctl show' functionality and fix some of the bugs. - npftest: add a test for BPF COP. - Bump NPF_VERSION.
2013-09-19npfctl_rule: fixes for the dynamic rules.rmind
2013-09-19bpf_validate_ext: allow COP to modify the memstore.rmind
2013-09-18Add bpf_filter_ext() to use with BPF COP, restore bpf_filter() as it wasrmind
originally to preserve compatibility. Similarly, add bpf_validate_ext() which takes bpf_ctx_t.
2013-09-13Remove unused variablemartin