rmind 15d58f91b8 - Add NPF_DECISION_BLOCK and NPF_DECISION_PASS. Be more defensive in the ... packet handler. Change the default policy to block when the config is loaded and set it to pass when flush operation is performed. - Use kmem_zalloc(9) instead of kmem_alloc(9) in few places. - npf_rproc_{create,release}: use kmem_intr_{alloc,free} as the destruction of rule procedure might happen in the interrupt handler (under a very rare condition, if config reload races with the handler). - npf_session_establish: check whether layer 3 and 4 are cached. - npfctl_build_group: do not make groups as passing rules. - Remove some unecessary header inclusion.		2012-02-20 00:18:19 +00:00
..
agr	Use if_flags_set() and if_addr_init() instead of ifp->if_ioctl().	2011-10-19 01:49:50 +00:00
npf	- Add NPF_DECISION_BLOCK and NPF_DECISION_PASS. Be more defensive in the	2012-02-20 00:18:19 +00:00
Makefile	…
bpf.c	make comment reflect reality	2011-12-16 03:05:23 +00:00
bpf.h	Provide netbsd32 compat for bpf. Beside the ioctls, the structure	2011-08-30 14:22:22 +00:00
bpf_filter.c	Apply same bounds checks for BPF_LD|BPF_B|BPF_IND as for	2011-12-29 23:47:21 +00:00
bpf_stub.c	Use proper ANSI prototypes for foo() -> foo(void)	2012-01-30 23:31:27 +00:00
bpfdesc.h	Provide netbsd32 compat for bpf. Beside the ioctls, the structure	2011-08-30 14:22:22 +00:00
bridgestp.c	…
bsd-comp.c	…
dlt.h	PR/45730: David Holland: Avoid having 2 copies of bpf.h in /usr/include.	2011-12-21 19:04:18 +00:00
ethertypes.h	…
files.pf	build pf module with WARNS=3, and remove the need for -Wno-shadow	2011-08-29 09:50:04 +00:00
if.c	PR/45764, PR/45914	2012-02-03 03:35:30 +00:00
if.h	Document the ifioctl locking in comments.	2011-10-25 22:26:18 +00:00
if_arc.h	…
if_arcsubr.c	…
if_arp.h	…
if_atm.h	…
if_atmsubr.c	…
if_bridge.c	First step of random number subsystem rework described in	2011-11-19 22:51:18 +00:00
if_bridgevar.h	…
if_dl.h	…
if_eco.h	…
if_ecosubr.c	Fix build failed. Include if_inarp.h.	2011-11-20 12:15:38 +00:00
if_ether.h	…
if_etherip.c	kauth isn't used in here, so don't #include <sys/kauth.h>.	2011-10-28 16:10:12 +00:00
if_etherip.h	…
if_ethersubr.c	use ETHERTYPE_MPLS only for unicast packets (RFC3032)	2011-06-16 19:47:30 +00:00
if_faith.c	…
if_faith.h	…
if_fddi.h	…
if_fddisubr.c	…
if_gif.c	Don't kauth-orize SIOCDIFPHYADDR, SIOCSIFFLAGS, SIOCSIFMTU, or	2011-10-28 16:42:52 +00:00
if_gif.h	…
if_gre.c	cosmetic, no functional change:	2011-11-09 19:43:22 +00:00
if_gre.h	sys/pcq.h isn't installed to userland, so only include it ifdef _KERNEL,	2011-11-29 17:28:45 +00:00
if_hippi.h	…
if_hippisubr.c	…
if_ieee1394.h	…
if_ieee1394subr.c	…
if_llc.h	…
if_loop.c	Avoid computing INET[6] cksums for MPLS packets	2011-06-20 09:43:27 +00:00
if_media.c	…
if_media.h	…
if_mpls.c	Avoid putting implicit null labels on the wire	2011-07-03 18:46:12 +00:00
if_mpls.h	…
if_ppp.c	For these interfaces, the implementation of SIOCSIFDSTADDR is identical	2011-10-28 22:08:14 +00:00
if_ppp.h	…
if_pppoe.c	Add support for RFC 4638 to pppoe(4).	2011-09-05 12:19:09 +00:00
if_pppoe.h	…
if_pppvar.h	…
if_sl.c	Change obsolete CBSIZE constant (48), to a power of two constant (64) that	2011-09-23 15:29:08 +00:00
if_slvar.h	…
if_sppp.h	…
if_spppsubr.c	Separate /dev/random pseudodevice implemenation from kernel entropy pool	2011-12-17 20:05:38 +00:00
if_spppvar.h	…
if_srt.c	For these interfaces, the implementation of SIOCSIFDSTADDR is identical	2011-10-28 22:08:14 +00:00
if_srt.h	…
if_stf.c	Don't kauth-orize SIOCSIFMTU in pppsioctl() and stf_ioctl(), ifioctl()	2011-10-28 20:13:32 +00:00
if_stf.h	…
if_strip.c	Change obsolete CBSIZE constant (48), to a power of two constant (64) that	2011-09-23 15:29:08 +00:00
if_stripvar.h	…
if_tap.c	…
if_tap.h	…
if_token.h	…
if_tokensubr.c	Fix weird hardware address assignment that GCC 4.5 complains about.	2011-07-19 19:42:27 +00:00
if_tun.c	Replace tun_lock with mutex(9). XXX: too far from being MP-safe yet.	2012-01-28 01:02:27 +00:00
if_tun.h	Replace tun_lock with mutex(9). XXX: too far from being MP-safe yet.	2012-01-28 01:02:27 +00:00
if_types.h	…
if_vlan.c	Use if_flags_set() and if_mcast_op().	2011-10-19 22:07:09 +00:00
if_vlanvar.h	…
link_proto.c	Cosmetic: remove whitespace at the end of line.	2011-10-07 16:34:31 +00:00
net_osdep.h	…
net_stats.c	…
net_stats.h	…
netisr.h	…
netisr_dispatch.h	dependant -> dependent	2011-06-30 20:09:15 +00:00
pfil.c	…
pfil.h	…
pfkeyv2.h	more "const"	2011-06-09 19:54:18 +00:00
ppp-comp.h	…
ppp-deflate.c	…
ppp_defs.h	…
ppp_tty.c	…
radix.c	Retire varargs.h support. Move machine/stdarg.h logic into MI	2011-07-17 20:54:30 +00:00
radix.h	…
raw_cb.c	…
raw_cb.h	…
raw_usrreq.c	Retire varargs.h support. Move machine/stdarg.h logic into MI	2011-07-17 20:54:30 +00:00
route.c	Count length from the beginning of the structure not the sa_data portion.	2012-01-30 20:01:08 +00:00
route.h	rt_setkey: remove invalid assert, sockaddr_dup() may fail if no memory.	2012-02-18 23:47:48 +00:00
rtbl.c	Hide the radix-trie implementation of the forwarding table so that we	2011-03-31 19:40:51 +00:00
rtsock.c	- don't copy past the end of sockaddr if we are rounding, zero it out instead,	2012-01-30 20:02:55 +00:00
slcompress.c	…
slcompress.h	…
slip.h	…
zlib.c	…
zlib.h	…