| Commit message (Expand) | Author | Age | Files | Lines |
* | Socket MAC labels so_label and so_peerlabel are now protected by | rwatson | 2004-06-13 | 5 | -1/+12 |
* | Extend coverage of SOCK_LOCK(so) to include so_count, the socket | rwatson | 2004-06-12 | 3 | -4/+7 |
* | Modify ip fw so that whenever UID or GID constraints exist in a | csjp | 2004-06-11 | 1 | -30/+77 |
* | Remove unneeded Giant acquisition in divert_packet(), which is | rwatson | 2004-06-11 | 1 | -15/+0 |
* | Lock down parallel router_info list for tracking multicast IGMP | rwatson | 2004-06-11 | 1 | -1/+27 |
* | init_tables() must be run after sys/net/route.c:route_init(). | ru | 2004-06-10 | 1 | -1/+4 |
* | Introduce a new feature to IPFW2: lookup tables. These are useful | ru | 2004-06-09 | 4 | -1/+354 |
* | do not send icmp response if the original packet is encrypted. | ume | 2004-06-07 | 1 | -0/+3 |
* | Move the locking of the pcb into raw_output(). Organize code so | bmilekic | 2004-06-03 | 1 | -10/+14 |
* | add missing #include <sys/module.h> | phk | 2004-05-30 | 3 | -0/+3 |
* | Add some missing <sys/module.h> includes which are masked by the | phk | 2004-05-30 | 1 | -0/+1 |
* | Add a super-user check to ipfw_ctl() to make sure that the calling | csjp | 2004-05-25 | 1 | -0/+4 |
* | When checking for possible port theft, skip over a TCP inpcb | yar | 2004-05-20 | 1 | -7/+3 |
* | o Calculate a number of bytes to copy (cnt) correctly: | maxim | 2004-05-11 | 1 | -1/+1 |
* | o IFNAMSIZ does include the trailing \0. | maxim | 2004-05-07 | 1 | -1/+1 |
* | Provide the sysctl net.inet.ip.process_options to control the processing | andre | 2004-05-06 | 3 | -2/+24 |
* | Switch to using the inpcb MAC label instead of socket MAC label when | rwatson | 2004-05-04 | 6 | -8/+20 |
* | Assert inpcb lock in udp_append(). | rwatson | 2004-05-04 | 1 | -0/+2 |
* | Assert the inpcb lock on 'last' in udp_append(), since it's always | rwatson | 2004-05-04 | 1 | -0/+2 |
* | o Fix misindentation in the previous commit. | maxim | 2004-05-03 | 1 | -8/+7 |
* | Back out a change that slipped into the previous commit for which other | andre | 2004-05-03 | 1 | -10/+2 |
* | Optimize IP fastforwarding some more: | andre | 2004-05-03 | 1 | -95/+114 |
* | Rename m_claim_next_hop() to m_claim_next(), as suggested by Max Laier. | darrenr | 2004-05-02 | 4 | -4/+4 |
* | oops, I forgot this file in a prior commit (change was still sitting here, | darrenr | 2004-05-02 | 2 | -2/+2 |
* | Rename ip_claim_next_hop() to m_claim_next_hop(), give it an extra arg | darrenr | 2004-05-02 | 3 | -18/+2 |
* | Give jail(8) the feature to allow raw sockets from within a | bmilekic | 2004-04-26 | 1 | -2/+31 |
* | Tighten up reset handling in order to make reset attacks as difficult as | silby | 2004-04-26 | 3 | -0/+21 |
* | Another small set of changes to reduce diffs with the new arp code. | luigi | 2004-04-25 | 1 | -31/+18 |
* | remove a stale comment on the behaviour of arpresolve | luigi | 2004-04-25 | 1 | -10/+0 |
* | Start the arp timer at init time. | luigi | 2004-04-25 | 1 | -10/+1 |
* | This commit does two things: | luigi | 2004-04-25 | 1 | -7/+28 |
* | Wrap two long lines in the previous commit. | silby | 2004-04-23 | 1 | -2/+4 |
* | Correct an edge case in tcp_mss() where the cached path MTU | andre | 2004-04-23 | 2 | -4/+4 |
* | Add the option versrcreach to verify that a valid route to the | andre | 2004-04-23 | 2 | -7/+32 |
* | Fix a potential race when purging expired hostcache entries. | andre | 2004-04-23 | 1 | -3/+3 |
* | Take out an unneeded variable I forgot to remove in the last commit, | silby | 2004-04-22 | 1 | -2/+3 |
* | Simplify random port allocation, and add net.inet.ip.portrange.randomized, | silby | 2004-04-22 | 1 | -27/+13 |
* | Fix a typo in a comment. | bms | 2004-04-20 | 1 | -1/+1 |
* | Switch from using sequential to random ephemeral port allocation, | silby | 2004-04-20 | 1 | -6/+28 |
* | Enhance our RFC1948 implementation to perform better in some pathlogical | silby | 2004-04-20 | 3 | -4/+107 |
* | Replace Bcopy with 'the real thing' as in the rest of the file. | luigi | 2004-04-18 | 1 | -1/+1 |
* | In an effort to simplify the routing code, try to deprecate rtalloc() | luigi | 2004-04-14 | 2 | -2/+2 |
* | Remove advertising clause from University of California Regent's | imp | 2004-04-07 | 44 | -176/+0 |
* | Fixed a bug in previous revision: compute the payload checksum before | ru | 2004-04-07 | 1 | -8/+8 |
* | Fixed misspelling of IPPORT_MAX as USHRT_MAX. Don't include <sys/limits.h> | bde | 2004-04-06 | 1 | -9/+9 |
* | Two missed in previous commit -- compare pointer with NULL rather than | rwatson | 2004-04-05 | 2 | -4/+4 |
* | Prefer NULL to 0 when checking pointer values as integers or booleans. | rwatson | 2004-04-05 | 2 | -38/+40 |
* | Fix a panic possibility caused by returning without releasing locks. | pjd | 2004-04-04 | 1 | -37/+26 |
* | + arpresolve(): remove an unused argument | luigi | 2004-04-04 | 2 | -9/+4 |
* | Unbreak natd. | deischen | 2004-04-02 | 1 | -0/+1 |