| Commit message (Expand) | Author | Age | Files | Lines |
* | Add explicit includes for jail.h to the files that need them and | bz | 2009-06-17 | 1 | -0/+1 |
* | Add the explicit include of vimage.h to another five .c files still | bz | 2009-06-17 | 2 | -3/+1 |
* | Changes to the NR-Sack code so that: | rrs | 2009-06-17 | 4 | -224/+132 |
* | Trim extra sets of ()'s. | jhb | 2009-06-16 | 2 | -5/+5 |
* | Fix edge cases with ticks wrapping from INT_MAX to INT_MIN in the handling | jhb | 2009-06-16 | 1 | -2/+2 |
* | - Change members of tcpcb that cache values of ticks from int to u_int: | jhb | 2009-06-16 | 2 | -12/+12 |
* | Get vnets from creds instead of threads where they're available, and from | jamie | 2009-06-15 | 1 | -2/+2 |
* | Since dn_pipe.numbytes is int64_t now - remove unnecessary overflow detection | oleg | 2009-06-15 | 1 | -21/+7 |
* | Move the kernel option FLOWTABLE chacking from the header file to the | bz | 2009-06-12 | 2 | -1/+8 |
* | Added support for NAT-Traversal (RFC 3948) in IPsec stack. | vanhu | 2009-06-12 | 4 | -1/+285 |
* | Correct printf format type mismatches. | jhb | 2009-06-11 | 1 | -3/+3 |
* | Trim extra ()'s. | jhb | 2009-06-11 | 1 | -1/+1 |
* | Change a few members of tcpcb that store cached copies of ticks to be ints | jhb | 2009-06-10 | 3 | -8/+8 |
* | These are no longer referenced in the tree, so can be safely removed. | imp | 2009-06-10 | 1 | -13/+0 |
* | in ip_dn_ctl(), do not allocate a large structure on the stack, | luigi | 2009-06-10 | 1 | -9/+11 |
* | Remove the "The option TCPDEBUG requires option INET." requirement. | bz | 2009-06-10 | 1 | -4/+6 |
* | small simplifications to the code in charge of reaping deleted rules: | luigi | 2009-06-10 | 1 | -16/+13 |
* | Close long existed race with net.inet.ip.fw.one_pass = 0: | oleg | 2009-06-09 | 5 | -89/+58 |
* | After r193232 rt_tables in vnet.h are no longer indirectly dependent on | bz | 2009-06-08 | 9 | -12/+0 |
* | Introduce an infrastructure for dismantling vnet instances. | zec | 2009-06-08 | 12 | -0/+130 |
* | Fix and add a workaround on an issue of EtherIP packet with reversed | hrs | 2009-06-07 | 1 | -2/+16 |
* | Unbreak options VIMAGE build. | zec | 2009-06-06 | 1 | -1/+0 |
* | Only four out of nine arguments for ip_ipsec_output() are actually used. | pjd | 2009-06-05 | 3 | -5/+3 |
* | move kernel ipfw-related sources to a separate directory, | luigi | 2009-06-05 | 4 | -0/+0 |
* | Several ipfw options and actions use a 16-bit argument to indicate | luigi | 2009-06-05 | 1 | -5/+17 |
* | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | rwatson | 2009-06-05 | 17 | -17/+0 |
* | Unifdef MAC label pointer in syncache entries -- in general, ifdef'd | rwatson | 2009-06-05 | 1 | -2/+0 |
* | More cleanup in preparation of ipfw relocation (no actual code change): | luigi | 2009-06-05 | 7 | -37/+27 |
* | Small changes (no actual code changes) in preparation of moving ipfw-related | luigi | 2009-06-05 | 1 | -4/+6 |
* | fix a bug introduced in rev.190865 related to the signedness | luigi | 2009-06-04 | 1 | -3/+3 |
* | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 1 | -2/+0 |
* | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | rwatson | 2009-06-02 | 3 | -6/+0 |
* | Rework socket upcalls to close some races with setup/teardown of upcalls. | jhb | 2009-06-01 | 3 | -47/+28 |
* | Convert the two dimensional array to be malloced and introduce | bz | 2009-06-01 | 1 | -6/+4 |
* | Merge fixes from p4: | bms | 2009-06-01 | 1 | -85/+133 |
* | Reimplement the netisr framework in order to support parallel netisr | rwatson | 2009-06-01 | 4 | -28/+63 |
* | - Rename IP_NONLOCALOK IP socket option to IP_BINDANY, to be more consistent | pjd | 2009-06-01 | 5 | -32/+18 |
* | Adds missing sysctl to manage the vtag_time_wait time. This will | rrs | 2009-05-30 | 3 | -1/+21 |
* | Fix a small memory leak from the nr-sack code - the mapping array | rrs | 2009-05-30 | 2 | -40/+14 |
* | Make sctp_uio user to kernel structure match the | rrs | 2009-05-30 | 1 | -2/+2 |
* | Correct handling of SYN packets that are to the left of the current window of... | zml | 2009-05-27 | 1 | -1/+5 |
* | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 2 | -8/+10 |
* | Don't discard packets with 'Destination Unreachable' at the beginning | trasz | 2009-05-27 | 1 | -3/+11 |
* | Correct the sense of a test so that this filter always waits for the full | jhb | 2009-05-26 | 1 | -2/+2 |
* | Remove comment about moving tcp_reass() to its own file named tcp_reass.c, | rwatson | 2009-05-25 | 1 | -2/+1 |
* | For UDP with introducing the UDP control block, the uma zone had to | bz | 2009-05-23 | 1 | -1/+1 |
* | Implement UDP control block support. | bz | 2009-05-23 | 3 | -39/+83 |
* | Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL | bz | 2009-05-23 | 1 | -2/+9 |
* | If including vnet.h one has to include opt_route.h as well. This is | bz | 2009-05-22 | 1 | -0/+1 |
* | Consolidate and clean up the first section of ip_output.c in light of the | rwatson | 2009-05-21 | 1 | -7/+12 |