| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-02-25 | If the in6 domain was not attached, do not attempt to process IPv6 packets. | pooka | |
| 2014-02-25 | Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist before | pooka | |
| the sysctl link sets are processed, and remove redundancy. Shaves >13kB off of an amd64 GENERIC, not to mention >1k duplicate lines of code. | |||
| 2014-02-19 | NPF: fix the recent breakage of the traceroute ALG. Also, simplify and | rmind | |
| refactor a little bit. | |||
| 2014-02-17 | npf_alg_session: fix inverted logic in the previous commit. | rmind | |
| 2014-02-16 | NPF: pass ALG functions via npfa_funcs_t structure. | rmind | |
| 2014-02-13 | NPF: add support for IPv6-to-IPv6 Network Prefix Translation (NPTv6), | rmind | |
| as per RFC 6296. Add a unit test. Also, bump NPF_VERSION. Thanks to S.P.Zeidler for the help with NPTv6 work! | |||
| 2014-02-07 | NPF: add support for static (stateless) NAT. | rmind | |
| 2014-02-06 | Add support for CDB based NPF tables. | rmind | |
| 2014-01-25 | add __USE | christos | |
| 2014-01-25 | add a lint comment | christos | |
| 2014-01-03 | missed one inet6 check | pooka | |
| 2014-01-02 | Allow kernels compiled with INET+INET6 to be booted as IPv4-only or IPv6-only. | pooka | |
| 2013-12-29 | Modularize net/zlib so it can be used by the vnd module (and, eventually, | pgoyette | |
| by an opencrypto module). | |||
| 2013-12-15 | XXXgcc Wuninitialized kludge | pooka | |
| 2013-12-06 | NPF: | rmind | |
| - Adjust NAT to not assume flow direction in some cases and thus support less usual setups which are possible when using 'map' with a custom filter criteria. - Introduce NPF_SRC/NPF_DST and replace npc_src/npc_dst with npc_ips[2] for more convenient handling. - ICMP ALG: restrict matching only to the outgoing traffic, but be more direction-agnostic elsewhere. | |||
| 2013-12-05 | It is silly to kill the system when an interface failed to clear promiscuous | christos | |
| mode. Some return EINVAL when they are dying, but others like USB return EIO. Downgrade to a DIAGNOSTIC printf. Same should be done for the malloc/NOWAIT, but this is rarely hit. | |||
| 2013-12-04 | - npf_do_nat: fix a race condition and simplify the logic. | rmind | |
| - npf_session_setnat: clear the NAT association on failure. | |||
| 2013-11-23 | Move initialisation of bpf_args_t into the npf_ruleset_inspect(). | rmind | |
| This allows us to reuse the BPF memory store as a cache. | |||
| 2013-11-22 | Optimise checksum fixup routines: | rmind | |
| - npf_fixup16_cksum: 1's complement sum is endian-independent. - npf_fixup32_cksum: the first 32->16 bit reduction is not needed. Pointed out by Valery Ushakov. | |||
| 2013-11-22 | npf_addr_mix: use xor rather than sum. | rmind | |
| 2013-11-22 | Add npf_tableset_syncdict() to sync the table IDs in the proplib dictionary, | rmind | |
| as they can change on reload now. Also, fix table name checking in npfctl. | |||
| 2013-11-16 | NPF: convert to bpf_jit_generate()/bpf_jit_freecode(). | rmind | |
| 2013-11-16 | bpf_deliver: convert to bpf_filter_ext(). | rmind | |
| 2013-11-15 | Fix the bpfjit build. | rmind | |
| 2013-11-15 | - Add bpf_args_t and convert bpf_filter_ext() to use it. This allows the | rmind | |
| caller to initialise (and re-use) the memory store. - Add bpf_jit_generate() and bpf_jit_freecode() wrappers. | |||
| 2013-11-12 | NPF: add support for table naming and remove NPF_TABLE_SLOTS (there is | rmind | |
| just an arbitrary sanity limit of NPF_MAX_TABLES currently set to 128). Few misc fixes. Bump NPF_VERSION. | |||
| 2013-11-11 | Add missing [0] (check for unused entries) when matching interface | martin | |
| names. | |||
| 2013-11-08 | NPF: add support for specifying the interfaces before they are attached. | rmind | |
| If an interface is or gets detached, all associated rules and connections will be deactivated (it might be useful to have an option to invalidate the associated connections). Once the interface is reattached they will become active. Bump NPF_VERSION. | |||
| 2013-11-07 | eliminate unused variable | christos | |
| 2013-11-04 | npf_generic_fsm and npf_tcp_fsm: use uint8_t and make the arrays more dense. | rmind | |
| 2013-10-30 | used __diagused where appropriate. | mrg | |
| 2013-10-29 | npf_session_setnat: fix the race condition when the old connection is still | rmind | |
| being expired while a new/duplicate is being created. | |||
| 2013-10-28 | add an alias for the linux name for the interface index | christos | |
| 2013-10-27 | Add NPF_MAX_RULES, an artificial limit (set it to 1M). | rmind | |
| 2013-10-25 | Turn a few __unused into __diagused | martin | |
| 2013-10-25 | RFC3032 conformance for Router Alert Label | kefren | |
| 2013-10-19 | adjust previous; old_link_state is also used in INET6. | mrg | |
| 2013-10-19 | Ifdef a variable like its use | martin | |
| 2013-10-06 | remove unrelated diff. | christos | |
| 2013-10-05 | fix the source too, not just the doc. | christos | |
| 2013-10-05 | Add SIOCGIFINDEX from Ty Sarna and Matthew Sporleder. | christos | |
| 2013-10-05 | bpf_filter: re-use some code. No functional change intended. | rmind | |
| 2013-09-26 | sess_hash_bucket: convert to murmurhash2, include ports, use random seed. | rmind | |
| 2013-09-20 | bpfjit: replace malloc with kmem, KNF a little, add RCS ID. | rmind | |
| 2013-09-19 | NPF: G/C n-code in favour of BPF byte-code. Delete lots of code, mmm! | rmind | |
| 2013-09-19 | - Convert NPF to use BPF byte-code by default. Compile BPF byte-code in | rmind | |
| npfctl(8) and generate separate marks to describe the filter criteria. - Rewrite 'npfctl show' functionality and fix some of the bugs. - npftest: add a test for BPF COP. - Bump NPF_VERSION. | |||
| 2013-09-19 | npfctl_rule: fixes for the dynamic rules. | rmind | |
| 2013-09-19 | bpf_validate_ext: allow COP to modify the memstore. | rmind | |
| 2013-09-18 | Add bpf_filter_ext() to use with BPF COP, restore bpf_filter() as it was | rmind | |
| originally to preserve compatibility. Similarly, add bpf_validate_ext() which takes bpf_ctx_t. | |||
| 2013-09-13 | Remove unused variable | martin | |
