jdolecek
20d2b45d7d
fix bug introduced in rev 1.70 - in the "keep state" & "oow" flag check,
...
ensure a pointer to a state structure is non-NULL before dereferencing
Fixes PR kern/26927 by me and PR kern/26947 by Brett Lymn
2004-10-03 12:21:13 +00:00
jdolecek
a9bc4a2fda
frrequest(): move some variable initializations for clarity
...
no functional change
2004-10-03 12:16:32 +00:00
jdolecek
46134b3da6
move ip_htable.h from sys/netinet/ to sys/dist/ipf/netinet/, it's ipfilter file
2004-10-02 07:59:14 +00:00
christos
d0905be2d3
moved from sys/netinet.
2004-10-02 07:51:53 +00:00
christos
f33294b6a4
Moved from sys/netinet as part of the ipfilter separation.
2004-10-01 15:25:59 +00:00
dyoung
34a3fbf64e
"RB_PROTOTYPE();" does not lint because you end up with two
...
consecutive semicolons, so let's use RB_PROTOTYPE() alone.
2004-09-28 00:14:02 +00:00
yamt
d37ce14181
pflog_packet: use bpf_mtap2().
...
(our bpf_mtap() is more "strict" about mbufs
than openbsd's one is. eg. M_PKTHDR should be set properly.)
2004-09-10 08:48:32 +00:00
yamt
c3b066f850
pull following fixes from openbsd. ok'ed by itojun.
...
> ----------------------------
> revision 1.58
> date: 2004/06/23 04:34:17; author: mcbride; state: Exp; lines: +5 -3
> pfr_commit_ktable calls functions that can result in the current
> ktable being destroyed, which makes it unsafe in a SLIST_FOREACH.
>
> Fix from Chris Pascoe
> ----------------------------
> revision 1.56
> date: 2004/06/11 05:21:20; author: mcbride; state: Exp; lines: +5 -3
> Eliminate a dereference after pool_put when an inactive/no-longer referenced
> table is destroyed in pfr_setflags_ktable.
>
> Fix from Chris Pascoe
> ----------------------------
2004-09-09 14:56:00 +00:00
yamt
31715f4eb9
remove no longer needed caddr_t casts to reduce diffs from openbsd.
2004-09-08 12:11:25 +00:00
yamt
421ffa4969
pfil4_wrapper, pfil6_wrapper:
...
ensure that mbufs are writable beforehand as pf assumes it.
PR/26433.
2004-09-06 10:01:39 +00:00
yamt
0370fc7128
- rename PFIL_NEWIF to PFIL_IFNET, and handle interface detach events
...
as well.
- use it for pf(4).
mostly from Peter Postma. PR/26403.
2004-07-27 12:22:59 +00:00
yamt
46abcaebe4
fix dynaddr tracking.
...
from Peter Postma, PR/26369.
ok'ed by itojun.
2004-07-26 13:46:43 +00:00
yamt
4f755d07b4
ANSIfy. (inside #ifdef __NetBSD__)
...
from Peter Postma.
ok'ed by itojun.
2004-07-26 13:45:40 +00:00
yamt
48d156e320
call PFIL_NEWIF hooks at a correct place.
...
(on SIOCAIFADDR rather than SIOCGIFALIAS.)
from Peter Postma, PR/26402.
ok'ed by itojun.
2004-07-26 13:43:14 +00:00
itojun
0407dd42ae
make PF lkm working. from Peter Postma and Joel Wilsson.
...
remove pf_ioctl_head/pf_newif_head, which was never used.
2004-06-29 04:42:54 +00:00
itojun
ce0e658ff3
PR kern/26011: pf leaks mbufs on disallowed packets. Peter Postma
2004-06-25 13:17:01 +00:00
martin
149fa38cf4
Make it compile on non-IPv6 kernels.
2004-06-22 18:59:14 +00:00
martin
be9dcae132
Fix formatting for 64 bit archs. This fixes PR port-sparc64/26010.
...
While there, make it compile for non-INET6 aware kernels.
2004-06-22 18:37:49 +00:00
christos
6ecf0e2cbe
add a pfdetach() method to be used by lkm's
2004-06-22 18:04:32 +00:00
itojun
bfcdaa5766
PF from openbsd 3.5. missing features:
...
- pfsync (due to protocol # assignment issues)
- carp (not really a PF portion, but thought important to mention)
- PF and ALTQ are mutually-exclusive. this will be sorted out when
kjc@csl.sony.co.jp updates ALTQ and PF (and API inbetween)
reviewed by matt, christos, perry
torture-test is very welcomed.
2004-06-22 14:17:07 +00:00
itojun
6adffbf983
PF from OpenBSD 3.5
2004-06-22 13:52:05 +00:00