CVS commit: src/usr.sbin/npf
Module Name:src Committed By: rmind Date: Sun May 31 15:57:15 UTC 2020 Modified Files: src/usr.sbin/npf: npf-params.7 Log Message: npf-params(7): fix the state.key defaults. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/usr.sbin/npf/npf-params.7 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npftest/libnpftest
Module Name:src Committed By: rmind Date: Sat May 30 21:00:31 UTC 2020 Modified Files: src/usr.sbin/npf/npftest/libnpftest: npf_test_subr.c Log Message: npftest -- npf_test_init(): add a workaround for NetBSD. To generate a diff of this commit: cvs rdiff -u -r1.17 -r1.18 \ src/usr.sbin/npf/npftest/libnpftest/npf_test_subr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src
Committed By: rmind
Date: Sat May 30 20:54:54 UTC 2020
Modified Files:
src/sys/net/npf: npf_worker.c
Log Message:
npf_worker_sys{init,fini}: initialize/destroy the exit_cv condvar.
To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_worker.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
CVS commit: src
Module Name:src
Committed By: rmind
Date: Sat May 30 14:16:57 UTC 2020
Modified Files:
src/lib/libnpf: libnpf.3 npf.c npf.h
src/sys/net/npf: files.npf npf.c npf.h npf_alg.c npf_alg_icmp.c
npf_conf.c npf_conn.c npf_conn.h npf_conndb.c npf_connkey.c
npf_ctl.c npf_ext_log.c npf_ext_normalize.c npf_ext_rndblock.c
npf_handler.c npf_if.c npf_ifaddr.c npf_impl.h npf_inet.c
npf_mbuf.c npf_nat.c npf_os.c npf_params.c npf_portmap.c
npf_rproc.c npf_ruleset.c npf_sendpkt.c npf_state.c npf_state_tcp.c
npf_tableset.c npf_worker.c npfkern.h
src/usr.sbin/npf: npf-params.7
src/usr.sbin/npf/npfctl: Makefile npf.conf.5 npf_bpf_comp.c npf_build.c
npf_parse.y npf_scan.l npf_show.c npf_var.c npf_var.h npfctl.8
npfctl.c npfctl.h
src/usr.sbin/npf/npftest: npftest.c npftest.conf npftest.h
src/usr.sbin/npf/npftest/libnpftest: Makefile npf_mbuf_subr.c
npf_nat_test.c npf_state_test.c npf_test.h npf_test_subr.c
Added Files:
src/usr.sbin/npf/npfctl: npf_cmd.c
src/usr.sbin/npf/npftest/libnpftest: npf_gc_test.c
Removed Files:
src/usr.sbin/npf/npftest/libnpftest: npf_conn_test.c
Log Message:
Major NPF improvements (merge from upstream):
- Switch to the C11-style atomic primitives using atomic_loadstore(9).
- npfkern: introduce the 'state.key.interface' and 'state.key.direction'
settings. Users can now choose whether the connection state should be
strictly per-interface or global at the configuration level. Keep NAT
logic to be always per-interface, though.
- npfkern: rewrite the G/C worker logic and make it self-tuning.
- npfkern and libnpf: multiple bug fixes; add param exporting; introduce
more parameters. Remove npf_nvlist_{copyin,copyout}() functions and
refactor npfctl_load_nvlist() with others; add npfctl_run_op() to have
a single entry point for operations. Introduce npf_flow_t and clean up
some code.
- npfctl: lots of fixes for the 'npfctl show' logic; make 'npfctl list'
more informative; misc usability improvements and more user-friendly
error messages.
- Amend and improve the manual pages.
To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 src/lib/libnpf/libnpf.3
cvs rdiff -u -r1.48 -r1.49 src/lib/libnpf/npf.c
cvs rdiff -u -r1.38 -r1.39 src/lib/libnpf/npf.h
cvs rdiff -u -r1.22 -r1.23 src/sys/net/npf/files.npf \
src/sys/net/npf/npf_state.c
cvs rdiff -u -r1.42 -r1.43 src/sys/net/npf/npf.c
cvs rdiff -u -r1.62 -r1.63 src/sys/net/npf/npf.h
cvs rdiff -u -r1.21 -r1.22 src/sys/net/npf/npf_alg.c \
src/sys/net/npf/npf_sendpkt.c
cvs rdiff -u -r1.32 -r1.33 src/sys/net/npf/npf_alg_icmp.c
cvs rdiff -u -r1.16 -r1.17 src/sys/net/npf/npf_conf.c \
src/sys/net/npf/npf_ext_log.c
cvs rdiff -u -r1.31 -r1.32 src/sys/net/npf/npf_conn.c
cvs rdiff -u -r1.19 -r1.20 src/sys/net/npf/npf_conn.h \
src/sys/net/npf/npf_rproc.c
cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_conndb.c \
src/sys/net/npf/npf_ext_rndblock.c
cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/npf_connkey.c
cvs rdiff -u -r1.59 -r1.60 src/sys/net/npf/npf_ctl.c
cvs rdiff -u -r1.9 -r1.10 src/sys/net/npf/npf_ext_normalize.c
cvs rdiff -u -r1.48 -r1.49 src/sys/net/npf/npf_handler.c
cvs rdiff -u -r1.12 -r1.13 src/sys/net/npf/npf_if.c
cvs rdiff -u -r1.6 -r1.7 src/sys/net/npf/npf_ifaddr.c
cvs rdiff -u -r1.80 -r1.81 src/sys/net/npf/npf_impl.h
cvs rdiff -u -r1.56 -r1.57 src/sys/net/npf/npf_inet.c
cvs rdiff -u -r1.23 -r1.24 src/sys/net/npf/npf_mbuf.c
cvs rdiff -u -r1.49 -r1.50 src/sys/net/npf/npf_nat.c
cvs rdiff -u -r1.17 -r1.18 src/sys/net/npf/npf_os.c
cvs rdiff -u -r1.2 -r1.3 src/sys/net/npf/npf_params.c
cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/npf_portmap.c \
src/sys/net/npf/npfkern.h
cvs rdiff -u -r1.50 -r1.51 src/sys/net/npf/npf_ruleset.c
cvs rdiff -u -r1.20 -r1.21 src/sys/net/npf/npf_state_tcp.c
cvs rdiff -u -r1.34 -r1.35 src/sys/net/npf/npf_tableset.c
cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_worker.c
cvs rdiff -u -r1.3 -r1.4 src/usr.sbin/npf/npf-params.7
cvs rdiff -u -r1.14 -r1.15 src/usr.sbin/npf/npfctl/Makefile
cvs rdiff -u -r1.90 -r1.91 src/usr.sbin/npf/npfctl/npf.conf.5
cvs rdiff -u -r1.15 -r1.16 src/usr.sbin/npf/npfctl/npf_bpf_comp.c
cvs rdiff -u -r1.54 -r1.55 src/usr.sbin/npf/npfctl/npf_build.c
cvs rdiff -u -r0 -r1.1 src/usr.sbin/npf/npfctl/npf_cmd.c
cvs rdiff -u -r1.50 -r1.51 src/usr.sbin/npf/npfctl/npf_parse.y
cvs rdiff -u -r1.31 -r1.32 src/usr.sbin/npf/npfctl/npf_scan.l \
src/usr.sbin/npf/npfctl/npf_show.c
cvs rdiff -u -r1.12 -r1.13 src/usr.sbin/npf/npfctl/npf_var.c
cvs rdiff -u -r1.9 -r1.10 src/usr.sbin/npf/npfctl/npf_var.h
cvs rdiff -u -r1.24 -r1.25 src/usr.sbin/npf/npfctl/npfctl.8
cvs rdiff -u -r1.63 -r1.64 src/usr.sbin/npf/npfctl/npfctl.c
cvs rdiff -u -r1.52 -r1.53 src/usr.sbin/npf/npfctl/npfctl.h
cvs rdiff -u -r1.24 -r1.25 src/usr.sbin/npf/npftest/npftest.c
cvs rdiff -u -r1.8 -r1.9 src/usr.sbin/npf/npftest/npftest.conf
cvs
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sun May 24 15:35:40 UTC 2020 Modified Files: src/usr.sbin/npf/npfctl: npf_scan.l Log Message: PR/55288: npfctl: change parameter syntax to be more permissive. To generate a diff of this commit: cvs rdiff -u -r1.30 -r1.31 src/usr.sbin/npf/npfctl/npf_scan.l Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src
Committed By: rmind
Date: Sat May 23 19:56:00 UTC 2020
Modified Files:
src/sys/net/npf: npf_conf.c npf_conn.c npf_conn.h npf_conndb.c
npf_inet.c npf_nat.c
src/usr.sbin/npf/npfctl: npf_build.c npf_show.c npfctl.h
Log Message:
Backport selected NPF fixes from the upstream (to be pulled up):
- npf_conndb_lookup: protect the connection lookup with pserialize(9),
instead of incorrectly assuming that the handler always runs at IPL_SOFNET.
Should fix crashes reported on high load (PR/55182).
- npf_config_destroy: handle partially initialized config; fixes crashes
with some invalid configurations.
- NAT policy creation / destruction: set the initial reference and do not
wait for reference draining on destruction; destroy the policy on the
last reference drop instead. Fixes a lockup with the dynamic NAT rules.
- npf_nat_{export,import}: fix a regression since dynamic NAT rules.
- npfctl: fix a regression and restore the default group behaviour.
- Add npf_cache_tcp() and validate the TCP data offset (from maxv@).
To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 src/sys/net/npf/npf_conf.c
cvs rdiff -u -r1.30 -r1.31 src/sys/net/npf/npf_conn.c
cvs rdiff -u -r1.18 -r1.19 src/sys/net/npf/npf_conn.h
cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_conndb.c
cvs rdiff -u -r1.55 -r1.56 src/sys/net/npf/npf_inet.c
cvs rdiff -u -r1.48 -r1.49 src/sys/net/npf/npf_nat.c
cvs rdiff -u -r1.53 -r1.54 src/usr.sbin/npf/npfctl/npf_build.c
cvs rdiff -u -r1.30 -r1.31 src/usr.sbin/npf/npfctl/npf_show.c
cvs rdiff -u -r1.51 -r1.52 src/usr.sbin/npf/npfctl/npfctl.h
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
CVS commit: src/sys/kern
Module Name:src Committed By: rmind Date: Sat May 23 19:52:12 UTC 2020 Modified Files: src/sys/kern: subr_thmap.c Log Message: thmap(9): merge changes from the upstream -- primarily, switch to the C11-style memory fences and atomic primitives; in NetBSD, this translates to using the atomic_loadstore(9) primitives. To be pulled up (just in case). To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 src/sys/kern/subr_thmap.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sun Apr 7 22:23:40 UTC 2019 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 Log Message: npf.conf(5): Add more info about ifaddrs(). To generate a diff of this commit: cvs rdiff -u -r1.84 -r1.85 src/usr.sbin/npf/npfctl/npf.conf.5 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Fri Feb 15 22:49:24 UTC 2019 Modified Files: src/sys/external/bsd/libnv/dist: nvpair.c Log Message: nvpair_remove_nvlist_array: revert part of the rev 1.4 change (it was applied by mistake because the libnv upsteam code on Github has deviated from FreeBSD, i.e. it has a different nvlist_set_array_next() logic). To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 src/sys/external/bsd/libnv/dist/nvpair.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Tue Feb 12 12:52:49 UTC 2019 Modified Files: src/sys/external/bsd/libnv/dist: nvpair.c Log Message: libnv: Free the data array for NV_TYPE_DESCRIPTOR_ARRAY case. Obtained from FreeBSD rev 343987 by oshogbo@. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/external/bsd/libnv/dist/nvpair.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Tue Feb 12 12:49:23 UTC 2019 Modified Files: src/sys/external/bsd/libnv/dist: nv_impl.h nvlist.c nvpair.c Log Message: libnv: fix multiple memory leaks. - nvpair_create_stringv: free the temporary string; this fix affects nvlist_add_stringf() and nvlist_add_stringv(). - nvpair_remove_nvlist_array (NV_TYPE_NVLIST_ARRAY case): free the chain of nvpairs (as resetting it prevents nvlist_destroy() from freeing it). Note: freeing the chain in nvlist_destroy() is not sufficient, because it would still leak through nvlist_take_nvlist_array(). This affects all nvlist_*_nvlist_array() users. Found by clang/gcc ASAN. These fixes have been contributed to the upstream (FreeBSD) repository. To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 src/sys/external/bsd/libnv/dist/nv_impl.h cvs rdiff -u -r1.6 -r1.7 src/sys/external/bsd/libnv/dist/nvlist.c cvs rdiff -u -r1.3 -r1.4 src/sys/external/bsd/libnv/dist/nvpair.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/doc
Module Name:src Committed By: rmind Date: Sat Jan 19 21:36:09 UTC 2019 Modified Files: src/doc: CHANGES Log Message: Mention NPF improvements. To generate a diff of this commit: cvs rdiff -u -r1.2491 -r1.2492 src/doc/CHANGES Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sat Jan 19 21:19:32 UTC 2019 Modified Files: src/lib/libnpf: libnpf.3 npf.c npf.h src/sys/net/npf: npf.c npf.h npf_alg.c npf_conn.c npf_conn.h npf_conndb.c npf_ctl.c npf_ifaddr.c npf_impl.h npf_inet.c npf_nat.c npf_tableset.c npf_worker.c src/usr.sbin/npf: npf.7 src/usr.sbin/npf/npfctl: npf.conf.5 npf_build.c npf_data.c npf_parse.y npf_scan.l npf_show.c npf_var.c npfctl.8 npfctl.c npfctl.h src/usr.sbin/npf/npftest: npfstream.c npftest.c npftest.conf npftest.h src/usr.sbin/npf/npftest/libnpftest: Makefile npf_bpf_test.c npf_mbuf_subr.c npf_nat_test.c npf_nbuf_test.c npf_perf_test.c npf_rule_test.c npf_state_test.c npf_table_test.c npf_test.h npf_test_subr.c Added Files: src/usr.sbin/npf/npftest/libnpftest: npf_conn_test.c Log Message: Major NPF improvements: - Convert NPF connection table to thmap. State lookup is now lock-free. - Improve connection state G/C: it is now incremental and tunable. - Add support for dynamic NAT address. Translation addresses can now be selected from a pool of addresses. There are two selection algorithms, "ip-hash" and "round-robin" (see the man page). - Translation address can be specified as e.g. ifaddrs(wm0) in npf.conf to dynamically choose an IP from the interface address(es). - Add support for the NETMAP algorithm with static NAT for net-to-net translation (it is equivalent to iptables NETMAP logic). - Convert 'ipset' tables to use thmap; the table lookup is now lock-free. - Misc improvements, bug fixes and more unit tests. - Bump NPF_VERSION (will also bump libnpf). To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/lib/libnpf/libnpf.3 cvs rdiff -u -r1.44 -r1.45 src/lib/libnpf/npf.c cvs rdiff -u -r1.34 -r1.35 src/lib/libnpf/npf.h cvs rdiff -u -r1.36 -r1.37 src/sys/net/npf/npf.c cvs rdiff -u -r1.58 -r1.59 src/sys/net/npf/npf.h cvs rdiff -u -r1.18 -r1.19 src/sys/net/npf/npf_alg.c cvs rdiff -u -r1.25 -r1.26 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.14 -r1.15 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/npf_conndb.c \ src/sys/net/npf/npf_ifaddr.c cvs rdiff -u -r1.52 -r1.53 src/sys/net/npf/npf_ctl.c \ src/sys/net/npf/npf_inet.c cvs rdiff -u -r1.73 -r1.74 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.44 -r1.45 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.28 -r1.29 src/sys/net/npf/npf_tableset.c cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/npf_worker.c cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npf.7 cvs rdiff -u -r1.83 -r1.84 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.46 -r1.47 src/usr.sbin/npf/npfctl/npf_build.c \ src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.29 -r1.30 src/usr.sbin/npf/npfctl/npf_data.c cvs rdiff -u -r1.47 -r1.48 src/usr.sbin/npf/npfctl/npf_parse.y cvs rdiff -u -r1.27 -r1.28 src/usr.sbin/npf/npfctl/npf_scan.l cvs rdiff -u -r1.26 -r1.27 src/usr.sbin/npf/npfctl/npf_show.c cvs rdiff -u -r1.11 -r1.12 src/usr.sbin/npf/npfctl/npf_var.c cvs rdiff -u -r1.20 -r1.21 src/usr.sbin/npf/npfctl/npfctl.8 cvs rdiff -u -r1.56 -r1.57 src/usr.sbin/npf/npfctl/npfctl.c cvs rdiff -u -r1.7 -r1.8 src/usr.sbin/npf/npftest/npfstream.c cvs rdiff -u -r1.22 -r1.23 src/usr.sbin/npf/npftest/npftest.c cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npftest/npftest.conf cvs rdiff -u -r1.15 -r1.16 src/usr.sbin/npf/npftest/npftest.h cvs rdiff -u -r1.9 -r1.10 src/usr.sbin/npf/npftest/libnpftest/Makefile \ src/usr.sbin/npf/npftest/libnpftest/npf_bpf_test.c cvs rdiff -u -r0 -r1.1 src/usr.sbin/npf/npftest/libnpftest/npf_conn_test.c cvs rdiff -u -r1.7 -r1.8 src/usr.sbin/npf/npftest/libnpftest/npf_mbuf_subr.c \ src/usr.sbin/npf/npftest/libnpftest/npf_state_test.c cvs rdiff -u -r1.10 -r1.11 src/usr.sbin/npf/npftest/libnpftest/npf_nat_test.c \ src/usr.sbin/npf/npftest/libnpftest/npf_table_test.c cvs rdiff -u -r1.6 -r1.7 src/usr.sbin/npf/npftest/libnpftest/npf_nbuf_test.c \ src/usr.sbin/npf/npftest/libnpftest/npf_perf_test.c cvs rdiff -u -r1.15 -r1.16 \ src/usr.sbin/npf/npftest/libnpftest/npf_rule_test.c cvs rdiff -u -r1.17 -r1.18 src/usr.sbin/npf/npftest/libnpftest/npf_test.h cvs rdiff -u -r1.13 -r1.14 \ src/usr.sbin/npf/npftest/libnpftest/npf_test_subr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/kern
Module Name:src Committed By: rmind Date: Sat Jan 19 20:42:54 UTC 2019 Modified Files: src/sys/kern: subr_thmap.c Log Message: thmap: use KM_NOSLEEP for now; might revisit later. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 src/sys/kern/subr_thmap.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Sun Dec 16 14:06:56 UTC 2018 Modified Files: src/sys/kern: files.kern src/sys/rump/librump/rumpkern: Makefile.rumpkern Added Files: src/sys/kern: subr_thmap.c src/sys/sys: thmap.h Log Message: Import thmap -- a concurrent trie-hash map, combining the elements of hashing and radix trie. It supports lock-free lookups and concurrent inserts/deletes. It is designed to be optimal as a general purpose *concurrent* associative array. Upstream: https://github.com/rmind/thmap Discussed on tech-kern@ To generate a diff of this commit: cvs rdiff -u -r1.27 -r1.28 src/sys/kern/files.kern cvs rdiff -u -r0 -r1.1 src/sys/kern/subr_thmap.c cvs rdiff -u -r1.171 -r1.172 src/sys/rump/librump/rumpkern/Makefile.rumpkern cvs rdiff -u -r0 -r1.1 src/sys/sys/thmap.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/doc
Module Name:src Committed By: rmind Date: Sat Sep 29 18:48:55 UTC 2018 Modified Files: src/doc: CHANGES Log Message: Mention that NPF was converted to use libnv. To generate a diff of this commit: cvs rdiff -u -r1.2443 -r1.2444 src/doc/CHANGES Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sat Sep 29 18:00:36 UTC 2018 Modified Files: src/sys/net/npf: npf_sendpkt.c Log Message: npf_return_tcp: fix no-INET6 case. To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 src/sys/net/npf/npf_sendpkt.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sat Sep 29 14:41:37 UTC 2018 Modified Files: src/lib/libnpf: Makefile libnpf.3 npf.c npf.h src/lib/npf: mod.mk src/lib/npf/ext_log: npfext_log.c src/lib/npf/ext_normalize: npfext_normalize.c src/lib/npf/ext_rndblock: npfext_rndblock.c src/libexec/identd: Makefile src/sys/compat/netbsd32: netbsd32_ioctl.c netbsd32_ioctl.h src/sys/modules/if_npflog: Makefile src/sys/modules/npf: Makefile src/sys/modules/npf_alg_icmp: Makefile src/sys/modules/npf_ext_log: Makefile src/sys/modules/npf_ext_normalize: Makefile src/sys/modules/npf_ext_rndblock: Makefile src/sys/net/npf: files.npf if_npflog.c if_npflog.h lpm.c lpm.h npf.c npf.h npf_alg.c npf_alg_icmp.c npf_bpf.c npf_conf.c npf_conn.c npf_conn.h npf_conndb.c npf_ctl.c npf_ext_log.c npf_ext_normalize.c npf_ext_rndblock.c npf_handler.c npf_if.c npf_ifaddr.c npf_impl.h npf_inet.c npf_mbuf.c npf_nat.c npf_os.c npf_rproc.c npf_ruleset.c npf_sendpkt.c npf_state.c npf_state_tcp.c npf_tableset.c npf_worker.c npfkern.h src/sys/rump/net/lib/libnpf: Makefile src/usr.bin/kdump: Makefile.ioctl-c mkioctls src/usr.sbin/npf/npfctl: Makefile npf_bpf_comp.c npf_build.c npf_data.c npf_extmod.c npf_parse.y npf_scan.l npf_show.c npf_var.c npf_var.h npfctl.c npfctl.h src/usr.sbin/npf/npfd: Makefile src/usr.sbin/npf/npftest: Makefile README npftest.c npftest.h src/usr.sbin/npf/npftest/libnpftest: Makefile npf_bpf_test.c npf_mbuf_subr.c npf_perf_test.c npf_rule_test.c npf_table_test.c npf_test.h npf_test_subr.c Added Files: src/sys/net/npf: README src/usr.sbin/npf: README Log Message: NPF: Major rework -- migrate NPF to the libnv library. - This conversion significantly simplifies the code and moves NPF to a binary serialisation format (replacing the XML-like format). - Fix some memory/reference leaks and possibly use-after-free bugs. - Bump NPF_VERSION as this change makes libnpf incompatible with the previous versions. Also, different serialisation format means NPF connection/config saving and loading is not compatible with the previous versions either. Thanks to christos@ for extra testing. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/lib/libnpf/Makefile cvs rdiff -u -r1.5 -r1.6 src/lib/libnpf/libnpf.3 cvs rdiff -u -r1.43 -r1.44 src/lib/libnpf/npf.c cvs rdiff -u -r1.33 -r1.34 src/lib/libnpf/npf.h cvs rdiff -u -r1.6 -r1.7 src/lib/npf/mod.mk cvs rdiff -u -r1.4 -r1.5 src/lib/npf/ext_log/npfext_log.c cvs rdiff -u -r1.1 -r1.2 src/lib/npf/ext_normalize/npfext_normalize.c cvs rdiff -u -r1.1 -r1.2 src/lib/npf/ext_rndblock/npfext_rndblock.c cvs rdiff -u -r1.16 -r1.17 src/libexec/identd/Makefile cvs rdiff -u -r1.95 -r1.96 src/sys/compat/netbsd32/netbsd32_ioctl.c cvs rdiff -u -r1.63 -r1.64 src/sys/compat/netbsd32/netbsd32_ioctl.h cvs rdiff -u -r1.1 -r1.2 src/sys/modules/if_npflog/Makefile cvs rdiff -u -r1.21 -r1.22 src/sys/modules/npf/Makefile cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_alg_icmp/Makefile cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_log/Makefile cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_normalize/Makefile cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_rndblock/Makefile cvs rdiff -u -r0 -r1.1 src/sys/net/npf/README cvs rdiff -u -r1.20 -r1.21 src/sys/net/npf/files.npf \ src/sys/net/npf/npf_mbuf.c cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/if_npflog.c cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/if_npflog.h src/sys/net/npf/lpm.h \ src/sys/net/npf/npfkern.h cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/lpm.c src/sys/net/npf/npf_worker.c cvs rdiff -u -r1.35 -r1.36 src/sys/net/npf/npf.c cvs rdiff -u -r1.57 -r1.58 src/sys/net/npf/npf.h cvs rdiff -u -r1.17 -r1.18 src/sys/net/npf/npf_alg.c cvs rdiff -u -r1.30 -r1.31 src/sys/net/npf/npf_alg_icmp.c cvs rdiff -u -r1.13 -r1.14 src/sys/net/npf/npf_bpf.c \ src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.11 -r1.12 src/sys/net/npf/npf_conf.c cvs rdiff -u -r1.24 -r1.25 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.3 -r1.4 src/sys/net/npf/npf_conndb.c \ src/sys/net/npf/npf_ifaddr.c cvs rdiff -u -r1.50 -r1.51 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.14 -r1.15 src/sys/net/npf/npf_ext_log.c cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_ext_normalize.c \ src/sys/net/npf/npf_if.c cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_ext_rndblock.c cvs rdiff -u -r1.44 -r1.45 src/sys/net/npf/npf_handler.c cvs rdiff -u -r1.72 -r1.73 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.51 -r1.52 src/sys/net/npf/npf_inet.c cvs rdiff -u -r1.43 -r1.44 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.9 -r1.10 src/sys/net/npf/npf_os.c cvs rdiff -u -r1.16 -r1.17 src/sys/net/npf/npf_rproc.c cvs rdiff -u -r1.46 -r1.47 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.19 -r1.20 src/sys/net/npf/np
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Sun Sep 23 21:35:26 UTC 2018 Modified Files: src/sys/external/bsd/libnv/dist: nv_kern_netbsd.c Log Message: nvlist_copyin: fix the flag handling. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/external/bsd/libnv/dist/nv_kern_netbsd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Sun Sep 23 19:07:10 UTC 2018 Modified Files: src/sys/external/bsd/libnv/dist: nv_impl.h nv_kern_netbsd.c Log Message: libnv: add a wrapper around free(9) since in FreeBSD it can take NULL. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/external/bsd/libnv/dist/nv_impl.h cvs rdiff -u -r1.3 -r1.4 src/sys/external/bsd/libnv/dist/nv_kern_netbsd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/external/bsd/libnv/dist
Module Name:src Committed By: rmind Date: Sat Sep 22 17:13:30 UTC 2018 Modified Files: src/sys/external/bsd/libnv/dist: nv_impl.h nv_kern_netbsd.c nvlist.c Log Message: libnv: fix some NetBSD wrappers. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 src/sys/external/bsd/libnv/dist/nv_impl.h cvs rdiff -u -r1.2 -r1.3 src/sys/external/bsd/libnv/dist/nv_kern_netbsd.c cvs rdiff -u -r1.5 -r1.6 src/sys/external/bsd/libnv/dist/nvlist.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sat Sep 22 12:54:34 UTC 2018 Modified Files: src/distrib/sets/lists/base: shl.mi src/distrib/sets/lists/comp: mi shl.mi src/distrib/sets/lists/debug: mi shl.mi src/sys/rump/kern: Makefile.rumpkerncomp Added Files: src/sys/rump/kern/lib/libnv: Makefile Log Message: Add rumpkern_nv (in-kernel RUMP libnv). To generate a diff of this commit: cvs rdiff -u -r1.847 -r1.848 src/distrib/sets/lists/base/shl.mi cvs rdiff -u -r1.2228 -r1.2229 src/distrib/sets/lists/comp/mi cvs rdiff -u -r1.321 -r1.322 src/distrib/sets/lists/comp/shl.mi cvs rdiff -u -r1.265 -r1.266 src/distrib/sets/lists/debug/mi cvs rdiff -u -r1.207 -r1.208 src/distrib/sets/lists/debug/shl.mi cvs rdiff -u -r1.12 -r1.13 src/sys/rump/kern/Makefile.rumpkerncomp cvs rdiff -u -r0 -r1.1 src/sys/rump/kern/lib/libnv/Makefile Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sat Sep 1 16:28:57 UTC 2018 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 Log Message: npf.conf(5): fix some of the previous incorrect or inaccurate changes. The TCP flags option is not only for the stateful tracking. Dynamic NAT implies NAPT; algorithms, at least for now, are for static NAT mappings. Mention that ALG ICMP is also for traceroute behind NAT; also mention "MSS clamping" (some users might search for this term, so keeping the terminology is helpful). To generate a diff of this commit: cvs rdiff -u -r1.70 -r1.71 src/usr.sbin/npf/npfctl/npf.conf.5 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: rmind Date: Thu Mar 29 21:40:53 UTC 2018 Modified Files: src/sys/netinet: tcp_input.c Log Message: tcp_urp_drop: fix a bug introduced in 1.390 rev (hi maxv@). To generate a diff of this commit: cvs rdiff -u -r1.400 -r1.401 src/sys/netinet/tcp_input.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf
Module Name:src Committed By: rmind Date: Sun Dec 10 22:04:41 UTC 2017 Modified Files: src/usr.sbin/npf: npf.7 src/usr.sbin/npf/npfctl: npf.conf.5 npf_build.c npf_parse.y npf_scan.l npf_show.c npfctl.8 npfctl.h todo Log Message: npfctl: add support for the 'no-ports' flag in the 'map' statements. This allows us to create a NAT policy without the port translation. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 src/usr.sbin/npf/npf.7 cvs rdiff -u -r1.49 -r1.50 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.44 -r1.45 src/usr.sbin/npf/npfctl/npf_build.c \ src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.45 -r1.46 src/usr.sbin/npf/npfctl/npf_parse.y cvs rdiff -u -r1.25 -r1.26 src/usr.sbin/npf/npfctl/npf_scan.l cvs rdiff -u -r1.24 -r1.25 src/usr.sbin/npf/npfctl/npf_show.c cvs rdiff -u -r1.19 -r1.20 src/usr.sbin/npf/npfctl/npfctl.8 cvs rdiff -u -r1.14 -r1.15 src/usr.sbin/npf/npfctl/todo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Dec 10 01:18:21 UTC 2017 Modified Files: src/sys/net/npf: npf_ctl.c npf_impl.h npf_ruleset.c npf_worker.c Log Message: - npf_mk_rules: enforce unique names for the dynamic rulesets. - npf_worker_unregister: merge fix for the standalone NPF. To generate a diff of this commit: cvs rdiff -u -r1.49 -r1.50 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.69 -r1.70 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.45 -r1.46 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.3 -r1.4 src/sys/net/npf/npf_worker.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Dec 10 00:07:36 UTC 2017 Modified Files: src/sys/net/npf: npf_alg_icmp.c npf_bpf.c npf_conn.c npf_conn.h npf_ext_normalize.c Log Message: - npf_cop_table: handle non-IP packets in the ether (fixes PR/52290). - npfa_icmp_nat: do not recompute the checksum if no port translation. - npf_normalize (MSS clamping): fix the checksum handling on PFIL_OUT. - npflog: report the packet direction correctly. To generate a diff of this commit: cvs rdiff -u -r1.24 -r1.25 src/sys/net/npf/npf_alg_icmp.c cvs rdiff -u -r1.12 -r1.13 src/sys/net/npf/npf_bpf.c \ src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.23 -r1.24 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/npf_ext_normalize.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libnpf
Module Name:src Committed By: rmind Date: Thu Dec 7 00:22:06 UTC 2017 Modified Files: src/lib/libnpf: libnpf.3 Log Message: libnpf(3): improve the wording, fix and expand some sections. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/lib/libnpf/libnpf.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Fri Jan 20 23:00:30 UTC 2017 Modified Files: src/usr.sbin/npf/npfctl: npf_parse.y Log Message: npfctl: fix shift/reduce conflicts, thanks to riastradh@. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 src/usr.sbin/npf/npfctl/npf_parse.y Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Thu Jan 19 20:18:18 UTC 2017 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 npf_build.c npf_data.c npf_parse.y npfctl.h Log Message: npfctl: - Add protocol filter option for "map". - Print user-friendly error if table contains an entry with invalid netmask. - Add support for inline ports. To generate a diff of this commit: cvs rdiff -u -r1.46 -r1.47 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.43 -r1.44 src/usr.sbin/npf/npfctl/npf_build.c \ src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.27 -r1.28 src/usr.sbin/npf/npfctl/npf_data.c cvs rdiff -u -r1.41 -r1.42 src/usr.sbin/npf/npfctl/npf_parse.y Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Tue Jan 3 01:29:49 UTC 2017 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 npf_build.c npf_parse.y npf_scan.l npfctl.h Log Message: npfctl: dynamic interface address handling; update npf.conf(8). To generate a diff of this commit: cvs rdiff -u -r1.45 -r1.46 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.42 -r1.43 src/usr.sbin/npf/npfctl/npf_build.c \ src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.39 -r1.40 src/usr.sbin/npf/npfctl/npf_parse.y cvs rdiff -u -r1.24 -r1.25 src/usr.sbin/npf/npfctl/npf_scan.l Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Tue Jan 3 00:58:05 UTC 2017 Modified Files: src/sys/net/npf: npf_conf.c npf_ifaddr.c npf_impl.h npf_os.c Log Message: NPF: fix the interface table initialisation on load. To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 src/sys/net/npf/npf_conf.c cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/npf_ifaddr.c cvs rdiff -u -r1.66 -r1.67 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/npf_os.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Mon Jan 2 21:49:51 UTC 2017 Modified Files: src/sys/modules/npf: Makefile src/sys/net/npf: files.npf npf_ctl.c npf_impl.h npf_os.c npf_tableset.c npf_worker.c Added Files: src/sys/net/npf: npf_ifaddr.c Log Message: NPF: implement dynamic handling of interface addresses (the kernel part). To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 src/sys/modules/npf/Makefile cvs rdiff -u -r1.19 -r1.20 src/sys/net/npf/files.npf cvs rdiff -u -r1.45 -r1.46 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r0 -r1.1 src/sys/net/npf/npf_ifaddr.c cvs rdiff -u -r1.65 -r1.66 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.2 -r1.3 src/sys/net/npf/npf_os.c \ src/sys/net/npf/npf_worker.c cvs rdiff -u -r1.25 -r1.26 src/sys/net/npf/npf_tableset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Thu Dec 29 20:48:50 UTC 2016 Modified Files: src/usr.sbin/npf/npfctl: npf_show.c npfctl.c Log Message: Improve 'npfctl debug' a little bit. To generate a diff of this commit: cvs rdiff -u -r1.21 -r1.22 src/usr.sbin/npf/npfctl/npf_show.c cvs rdiff -u -r1.51 -r1.52 src/usr.sbin/npf/npfctl/npfctl.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Tue Dec 27 22:35:33 UTC 2016 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 npf_bpf_comp.c npf_build.c npf_data.c npf_parse.y npf_scan.l npfctl.h Log Message: npf.conf: add support for logical NOT, e.g.: pass from ! 10.0.0.1 to any To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.9 -r1.10 src/usr.sbin/npf/npfctl/npf_bpf_comp.c cvs rdiff -u -r1.41 -r1.42 src/usr.sbin/npf/npfctl/npf_build.c \ src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.26 -r1.27 src/usr.sbin/npf/npfctl/npf_data.c cvs rdiff -u -r1.38 -r1.39 src/usr.sbin/npf/npfctl/npf_parse.y cvs rdiff -u -r1.23 -r1.24 src/usr.sbin/npf/npfctl/npf_scan.l Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfd
Module Name:src Committed By: rmind Date: Tue Dec 27 22:20:00 UTC 2016 Added Files: src/usr.sbin/npf/npfd: Makefile npfd.c npfd.h npfd_log.c Log Message: Add some very preliminary npfd(8) code. To generate a diff of this commit: cvs rdiff -u -r0 -r1.1 src/usr.sbin/npf/npfd/Makefile \ src/usr.sbin/npf/npfd/npfd.c src/usr.sbin/npf/npfd/npfd.h \ src/usr.sbin/npf/npfd/npfd_log.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libnpf
Module Name:src Committed By: rmind Date: Tue Dec 27 20:32:58 UTC 2016 Modified Files: src/lib/libnpf: npf.c npf.h Log Message: KNF To generate a diff of this commit: cvs rdiff -u -r1.41 -r1.42 src/lib/libnpf/npf.c cvs rdiff -u -r1.32 -r1.33 src/lib/libnpf/npf.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libnpf
Module Name:src Committed By: rmind Date: Tue Dec 27 17:58:56 UTC 2016 Modified Files: src/lib/libnpf: libnpf.3 Log Message: Update libnpf(3) man page. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/lib/libnpf/libnpf.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Dec 26 23:59:48 UTC 2016 Modified Files: src/sys/net/npf: npf_os.c Log Message: Convert NPF to the latest pfil(9) changes. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/npf_os.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Dec 26 23:39:18 UTC 2016 Modified Files: src/sys/net/npf: npf.h Log Message: Bump NPF_VERSION to 19. To generate a diff of this commit: cvs rdiff -u -r1.52 -r1.53 src/sys/net/npf/npf.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Dec 26 23:10:46 UTC 2016 Modified Files: src/sys/net/npf: npf_state_tcp.c Log Message: npf_tcp_fsm: fix for the NPF_TCPS_SYN_RECEIVED state. SYN re-transmission after SYN-ACK was seen by NPF should not terminate the connection. Thanks to: Alexander Kiselev To generate a diff of this commit: cvs rdiff -u -r1.17 -r1.18 src/sys/net/npf/npf_state_tcp.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Dec 26 21:16:06 UTC 2016 Modified Files: src/sys/net/npf: lpm.c Log Message: Fix kmem_free() in hashmap_remove(). To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/sys/net/npf/lpm.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Dec 26 12:44:10 UTC 2016 Modified Files: src/sys/net/npf: lpm.c Log Message: Fix kmem_free() sizes in hashmap_rehash() and lpm_clear(). To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/lpm.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Thu Dec 8 23:07:12 UTC 2016 Modified Files: src/sys/net/npf: npf.h npf_conn.c npf_handler.c npf_mbuf.c Log Message: NPF: adjust the 'stateful-ends' mechanism to tag the packets and thus pass-through them on other interfaces. Per discussion with christos@. To generate a diff of this commit: cvs rdiff -u -r1.47 -r1.48 src/sys/net/npf/npf.h cvs rdiff -u -r1.16 -r1.17 src/sys/net/npf/npf_conn.c \ src/sys/net/npf/npf_mbuf.c cvs rdiff -u -r1.33 -r1.34 src/sys/net/npf/npf_handler.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf
Module Name:src Committed By: rmind Date: Sun Jul 12 23:54:44 UTC 2015 Modified Files: src/usr.sbin/npf: npf.7 src/usr.sbin/npf/npfctl: npf_var.c Log Message: - npfvar_get_type1: check for NULL first. - Minor fix for the npf(7) man page. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/usr.sbin/npf/npf.7 cvs rdiff -u -r1.8 -r1.9 src/usr.sbin/npf/npfctl/npf_var.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Jul 12 23:51:53 UTC 2015 Modified Files: src/sys/net/npf: npf_if.c npf_mbuf.c Log Message: npfkern: eliminate INACTIVE_ID and use 0 for unregistered interfaces. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/npf_if.c cvs rdiff -u -r1.13 -r1.14 src/sys/net/npf/npf_mbuf.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Mon Jun 8 01:00:43 UTC 2015 Modified Files: src/sys/net/npf: npf_ctl.c src/usr.sbin/npf/npfctl: npf_bpf_comp.c npf_build.c Log Message: - npfctl: fix the confusion in the parser (0/0 case with no other filter). - Always populate the error dictionary, not only for DEBUG/DIAGNOSTIC. To generate a diff of this commit: cvs rdiff -u -r1.41 -r1.42 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.7 -r1.8 src/usr.sbin/npf/npfctl/npf_bpf_comp.c cvs rdiff -u -r1.39 -r1.40 src/usr.sbin/npf/npfctl/npf_build.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Wed Jun 3 23:36:05 UTC 2015 Modified Files: src/usr.sbin/npf/npfctl: npf_show.c Log Message: npfctl: fix the from/to port mess up when showing the rules. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 src/usr.sbin/npf/npfctl/npf_show.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/uvm
Module Name:src Committed By: rmind Date: Wed May 27 19:43:40 UTC 2015 Modified Files: src/sys/uvm: uvm_bio.c Log Message: ubc_alloc: perform pmap_update() in the error path as we might have removed the mapping. To generate a diff of this commit: cvs rdiff -u -r1.82 -r1.83 src/sys/uvm/uvm_bio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sat Mar 21 00:49:07 UTC 2015 Modified Files: src/usr.sbin/npf/npfctl: npf_build.c npf_show.c Log Message: npfctl: - Fix the filter criteria when to/from is omitted but port used. - Print more user-friendly error if an NPF table has a duplicate entry. To generate a diff of this commit: cvs rdiff -u -r1.38 -r1.39 src/usr.sbin/npf/npfctl/npf_build.c cvs rdiff -u -r1.17 -r1.18 src/usr.sbin/npf/npfctl/npf_show.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Fri Mar 20 23:36:28 UTC 2015 Modified Files: src/sys/net/npf: npf_ctl.c npf_ruleset.c Log Message: NPF: replace the TAILQ of the dynamic rules with a linked list and fix the inheriting of the active dynamic rules during the reload; also, fix a bug in the insert path by putting a memory barrier in the right place. To generate a diff of this commit: cvs rdiff -u -r1.40 -r1.41 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.41 -r1.42 src/sys/net/npf/npf_ruleset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Thu Feb 5 22:04:03 UTC 2015 Modified Files: src/sys/net/npf: npf_conn.c Log Message: npf_conn_establish: fix the previous change - drop the reference on error. To generate a diff of this commit: cvs rdiff -u -r1.15 -r1.16 src/sys/net/npf/npf_conn.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Mon Feb 2 19:08:32 UTC 2015 Modified Files: src/usr.sbin/npf/npfctl: npf_show.c Log Message: npfctl_print_rule: print the ID in hex, not decimal. To generate a diff of this commit: cvs rdiff -u -r1.16 -r1.17 src/usr.sbin/npf/npfctl/npf_show.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libnpf
Module Name:src Committed By: rmind Date: Mon Feb 2 00:55:28 UTC 2015 Modified Files: src/lib/libnpf: npf.c npf.h Log Message: libnpf: add npf_rule_getid() and npf_rule_getcode(). Missed in the previous commit. To generate a diff of this commit: cvs rdiff -u -r1.34 -r1.35 src/lib/libnpf/npf.c cvs rdiff -u -r1.27 -r1.28 src/lib/libnpf/npf.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Mon Feb 2 00:31:39 UTC 2015 Modified Files: src/sys/net/npf: npf_impl.h npf_ruleset.c src/usr.sbin/npf/npfctl: npf_show.c Log Message: npfctl(8): report dynamic rule ID in a comment, print the case when libpcap is used correctly. Also, add npf_ruleset_dump() helper in the kernel. To generate a diff of this commit: cvs rdiff -u -r1.60 -r1.61 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.40 -r1.41 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.15 -r1.16 src/usr.sbin/npf/npfctl/npf_show.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sun Feb 1 22:57:22 UTC 2015 Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 Log Message: npf.conf(5): mention alg, include in the example, minor fix. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 src/usr.sbin/npf/npfctl/npf.conf.5 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Feb 1 22:41:22 UTC 2015 Modified Files: src/sys/net/npf: npf_conn.c Log Message: - npf_conn_establish: remove a rare race condition when we might destroy a connection when it is still referenced by another thread. - npf_conn_destroy: remove the backwards entry using the saved key, PR/49488. - Sprinkle some asserts. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/sys/net/npf/npf_conn.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Sun Jan 18 23:16:35 UTC 2015 Modified Files: src/sys/kern: subr_ipi.c src/sys/sys: ipi.h Log Message: Implement ipi_trigger_multi(9); requested by cherry@. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/sys/kern/subr_ipi.c cvs rdiff -u -r1.2 -r1.3 src/sys/sys/ipi.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Fri Dec 26 20:44:38 UTC 2014 Modified Files: src/usr.sbin/npf/npfctl: npfctl.c Log Message: npfctl(8): attempt to preload bpfjit kernel module and print the warning on failure. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 src/usr.sbin/npf/npfctl/npfctl.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sat Dec 20 16:19:43 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c npf_conn.h npf_nat.c Log Message: NPF: set the connection flags atomically in the post-creation logic and fix a tiny race condition window. Might fix PR/49488. To generate a diff of this commit: cvs rdiff -u -r1.13 -r1.14 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.37 -r1.38 src/sys/net/npf/npf_nat.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Nov 30 01:37:53 UTC 2014 Modified Files: src/sys/net/npf: npf_conf.c npf_impl.h npf_nat.c npf_ruleset.c Log Message: - npf_config_load: if loading the connections, do not perform any actice NAT policy take over or or portmap sharing - just replace them all. - npf_config_fini: flush with the empty connection database. - npf_nat_import: fix the stat counter. To generate a diff of this commit: cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_conf.c cvs rdiff -u -r1.59 -r1.60 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.36 -r1.37 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.39 -r1.40 src/sys/net/npf/npf_ruleset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Nov 30 00:40:55 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c npf_conn.h npf_nat.c npf_ruleset.c Log Message: NPF: - npf_nat_import: take the port only if using the portmap. - Sprinkle some comments and asserts. To generate a diff of this commit: cvs rdiff -u -r1.12 -r1.13 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.6 -r1.7 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.35 -r1.36 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.38 -r1.39 src/sys/net/npf/npf_ruleset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Wed Nov 26 21:25:35 UTC 2014 Modified Files: src/sys/net/npf: npf_nat.c npf_ruleset.c Log Message: NPF: fix the reference counting and share the active NAT portmap correctly when performing the reload. Should fixes PR/49412, reported by kardel@. To generate a diff of this commit: cvs rdiff -u -r1.34 -r1.35 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.37 -r1.38 src/sys/net/npf/npf_ruleset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Sat Sep 13 17:18:45 UTC 2014 Modified Files: src/sys/net: bpf.c Log Message: PR/49190: bpf_deliver: set scratch memory store in bpf_args_t. To generate a diff of this commit: cvs rdiff -u -r1.188 -r1.189 src/sys/net/bpf.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Tue Sep 9 20:16:12 UTC 2014 Modified Files: src/sys/net: if.c if.h route.c src/sys/netatalk: at_control.c src/sys/netinet: in.c src/sys/netinet6: in6.c in6_ifattach.c mld6.c nd6_nbr.c Log Message: Eliminate IFAREF() and IFAFREE() macros in favour of functions. To generate a diff of this commit: cvs rdiff -u -r1.290 -r1.291 src/sys/net/if.c cvs rdiff -u -r1.174 -r1.175 src/sys/net/if.h cvs rdiff -u -r1.132 -r1.133 src/sys/net/route.c cvs rdiff -u -r1.35 -r1.36 src/sys/netatalk/at_control.c cvs rdiff -u -r1.147 -r1.148 src/sys/netinet/in.c cvs rdiff -u -r1.175 -r1.176 src/sys/netinet6/in6.c cvs rdiff -u -r1.92 -r1.93 src/sys/netinet6/in6_ifattach.c cvs rdiff -u -r1.59 -r1.60 src/sys/netinet6/mld6.c cvs rdiff -u -r1.100 -r1.101 src/sys/netinet6/nd6_nbr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Sun Sep 7 00:50:57 UTC 2014 Modified Files: src/sys/netinet: in_pcb.c src/sys/netinet6: in6_pcb.c Log Message: in_pcbdetach: move ip_freemoptions() under softnet_lock for now (this will be changed back once other IP paths become MP-safe). Same for IPv6 routine. This partially reverts 1.150 of in_pcb.c and 1.127 of in6_pcb.c changes. To generate a diff of this commit: cvs rdiff -u -r1.151 -r1.152 src/sys/netinet/in_pcb.c cvs rdiff -u -r1.128 -r1.129 src/sys/netinet6/in6_pcb.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libnpf
Module Name:src Committed By: rmind Date: Sun Aug 24 20:37:35 UTC 2014 Modified Files: src/lib/libnpf: npf.c Log Message: npf_config_submit: finally, include the saved connections. To generate a diff of this commit: cvs rdiff -u -r1.33 -r1.34 src/lib/libnpf/npf.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Aug 24 20:36:30 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c npf_ctl.c npf_nat.c Log Message: - npf_conn_import: add a missing stat counter increment. - npf_nat_import: add a missing reference and make a comment. To generate a diff of this commit: cvs rdiff -u -r1.11 -r1.12 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.39 -r1.40 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.33 -r1.34 src/sys/net/npf/npf_nat.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Mon Aug 11 23:48:01 UTC 2014 Modified Files: src/lib/libnpf: npf.c src/sys/net/npf: npf_alg.c npf_conn.c npf_ctl.c npf_impl.h npf_nat.c src/usr.sbin/npf/npfctl: npfctl.c Log Message: - Add and use npf_alg_export(). - npf_conn_import: handle NAT metadata correctly. - npf_nat_newpolicy: restore the policy ID. - npfctl_load: fix error code handling for the limit cases. - npf_config_import: fix the inverted logic. - npfctl_load: improve error handling. To generate a diff of this commit: cvs rdiff -u -r1.32 -r1.33 src/lib/libnpf/npf.c cvs rdiff -u -r1.14 -r1.15 src/sys/net/npf/npf_alg.c cvs rdiff -u -r1.10 -r1.11 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.38 -r1.39 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.58 -r1.59 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.32 -r1.33 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.42 -r1.43 src/usr.sbin/npf/npfctl/npfctl.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Aug 11 01:54:13 UTC 2014 Modified Files: src/sys/net/npf: npf_conf.c npf_ctl.c npf_impl.h npf_rproc.c npf_ruleset.c npf_tableset.c Log Message: NPF: finish up the rework of npfctl_save() mechanism. To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_conf.c cvs rdiff -u -r1.37 -r1.38 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.57 -r1.58 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.11 -r1.12 src/sys/net/npf/npf_rproc.c cvs rdiff -u -r1.36 -r1.37 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.21 -r1.22 src/sys/net/npf/npf_tableset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sun Aug 10 19:09:43 UTC 2014 Modified Files: src/lib/libnpf: npf.c src/sys/net/npf: npf.h npf_conn.c npf_conn.h npf_ctl.c npf_if.c npf_impl.h npf_mbuf.c npf_nat.c npf_ruleset.c src/usr.sbin/npf: npf.7 src/usr.sbin/npf/npftest/libnpftest: npf_rule_test.c Log Message: - Add npf_ruleset_export(), npf_rule_export() and npf_nat_policyexport(). - Split off npf_conn_export(). Add npf_ifmap_getname() and use it to save the interface name; pick it up on npf_conn_import(). - Misc fixes. Bump NPF_VERSION. To generate a diff of this commit: cvs rdiff -u -r1.31 -r1.32 src/lib/libnpf/npf.c cvs rdiff -u -r1.46 -r1.47 src/sys/net/npf/npf.h cvs rdiff -u -r1.9 -r1.10 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.36 -r1.37 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.3 -r1.4 src/sys/net/npf/npf_if.c cvs rdiff -u -r1.56 -r1.57 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.12 -r1.13 src/sys/net/npf/npf_mbuf.c cvs rdiff -u -r1.31 -r1.32 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.35 -r1.36 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.1 -r1.2 src/usr.sbin/npf/npf.7 cvs rdiff -u -r1.11 -r1.12 \ src/usr.sbin/npf/npftest/libnpftest/npf_rule_test.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet6
Module Name:src Committed By: rmind Date: Sun Aug 3 22:55:24 UTC 2014 Modified Files: src/sys/netinet6: in6_pcb.c Log Message: in6_pcbdetach: now that IGMP and multicast groups are MP-safe, we can move the ip6_freemoptions() call outside the softnet_lock. Should fix PR/49065. To generate a diff of this commit: cvs rdiff -u -r1.126 -r1.127 src/sys/netinet6/in6_pcb.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: rmind Date: Sun Aug 3 22:11:50 UTC 2014 Modified Files: src/sys/netinet: in_pcb.c Log Message: in_pcbdetach: not that IGMP and multicast groups are MP-safe, we can move the ip_freemoptions() call outside the softnet_lock. Should fix PR/49065. To generate a diff of this commit: cvs rdiff -u -r1.149 -r1.150 src/sys/netinet/in_pcb.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sun Aug 3 00:02:56 UTC 2014 Modified Files: src/lib/libnpf: libnpf.3 src/usr.sbin/npf/npfctl: npf.conf.5 npfctl.8 Log Message: Cross-link npf(7). To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/lib/libnpf/libnpf.3 cvs rdiff -u -r1.41 -r1.42 src/usr.sbin/npf/npfctl/npf.conf.5 cvs rdiff -u -r1.16 -r1.17 src/usr.sbin/npf/npfctl/npfctl.8 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sat Aug 2 23:57:40 UTC 2014 Modified Files: src/distrib/sets/lists/man: mi src/usr.sbin/npf: Makefile Added Files: src/usr.sbin/npf: npf.7 Log Message: NPF: add a general npf(7) manual page. Improved by wiz@. To generate a diff of this commit: cvs rdiff -u -r1.1481 -r1.1482 src/distrib/sets/lists/man/mi cvs rdiff -u -r1.4 -r1.5 src/usr.sbin/npf/Makefile cvs rdiff -u -r0 -r1.1 src/usr.sbin/npf/npf.7 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sat Jul 26 16:42:03 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c Log Message: npf_conn_conkey: fix a comment. To generate a diff of this commit: cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_conn.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Fri Jul 25 23:21:46 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c npf_conn.h Log Message: npf_conn_conkey: adjust to return the key length and add a comment describing the key layout. To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/npf_conn.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Fri Jul 25 23:07:21 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c npf_conn.h npf_ctl.c Log Message: npf_mk_connlist: destroy the connections on error path. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.3 -r1.4 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.35 -r1.36 src/sys/net/npf/npf_ctl.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Fri Jul 25 20:07:32 UTC 2014 Modified Files: src/sys/net/npf: npf_state_tcp.c Log Message: npf_tcp_inwindow: enable strict RST check by default. To generate a diff of this commit: cvs rdiff -u -r1.15 -r1.16 src/sys/net/npf/npf_state_tcp.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Wed Jul 23 01:48:05 UTC 2014 Modified Files: src/sys/net/npf: npf.h Log Message: npf_iscached: add an assert. To generate a diff of this commit: cvs rdiff -u -r1.45 -r1.46 src/sys/net/npf/npf.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Wed Jul 23 01:25:34 UTC 2014 Modified Files: src/lib/libnpf: npf.c npf.h src/sys/net/npf: npf.c npf.h npf_conf.c npf_conn.c npf_conn.h npf_conndb.c npf_ctl.c npf_handler.c npf_impl.h npf_nat.c npf_ruleset.c src/usr.sbin/npf/npfctl: npfctl.8 npfctl.c npfctl.h src/usr.sbin/npf/npftest/libnpftest: npf_test_subr.c Log Message: NPF: rework of the connection saving and restoring: - Add support for saving a snapshot of the current connections together with a full configuration. Support a reverse load operation. Eliminate the old 'sess-save' and 'sess-load' in favour of the new mechanism. - Share code between load and reload operations: the latter performs load from npf.conf without affecting the connections. - Simplify and fix races with connection loading. - Bump NPF_VERSION. To generate a diff of this commit: cvs rdiff -u -r1.29 -r1.30 src/lib/libnpf/npf.c cvs rdiff -u -r1.26 -r1.27 src/lib/libnpf/npf.h cvs rdiff -u -r1.20 -r1.21 src/sys/net/npf/npf.c cvs rdiff -u -r1.44 -r1.45 src/sys/net/npf/npf.h cvs rdiff -u -r1.6 -r1.7 src/sys/net/npf/npf_conf.c cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/npf_conn.c cvs rdiff -u -r1.2 -r1.3 src/sys/net/npf/npf_conn.h cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/npf_conndb.c cvs rdiff -u -r1.34 -r1.35 src/sys/net/npf/npf_ctl.c \ src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.32 -r1.33 src/sys/net/npf/npf_handler.c cvs rdiff -u -r1.55 -r1.56 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.30 -r1.31 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.15 -r1.16 src/usr.sbin/npf/npfctl/npfctl.8 cvs rdiff -u -r1.40 -r1.41 src/usr.sbin/npf/npfctl/npfctl.c cvs rdiff -u -r1.37 -r1.38 src/usr.sbin/npf/npfctl/npfctl.h cvs rdiff -u -r1.9 -r1.10 src/usr.sbin/npf/npftest/libnpftest/npf_test_subr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npfctl
Module Name:src Committed By: rmind Date: Sun Jul 20 00:48:51 UTC 2014 Modified Files: src/usr.sbin/npf/npfctl: npf_show.c Log Message: formatting To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/usr.sbin/npf/npfctl/npf_show.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sun Jul 20 00:43:47 UTC 2014 Removed Files: src/sys/net/npf: npf_session.c Log Message: Bye bye npf_session.c To generate a diff of this commit: cvs rdiff -u -r1.33 -r0 src/sys/net/npf/npf_session.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sat Jul 19 20:59:01 UTC 2014 Modified Files: src/sys/net/npf: npf_conn.c Log Message: Fix gcc warnings. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/npf_conn.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Sat Jul 19 19:14:21 UTC 2014 Added Files: src/sys/net/npf: npf_conn.h Log Message: Add npf_conn.h missed in the previous commit. To generate a diff of this commit: cvs rdiff -u -r0 -r1.1 src/sys/net/npf/npf_conn.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Sat Jul 19 18:24:17 UTC 2014 Modified Files: src/sys/modules/npf: Makefile src/sys/net/npf: files.npf npf.c npf.h npf_alg.c npf_alg_icmp.c npf_ctl.c npf_handler.c npf_if.c npf_impl.h npf_inet.c npf_nat.c npf_session.c npf_state.c npf_state_tcp.c src/sys/rump/net/lib/libnpf: Makefile Added Files: src/sys/net/npf: npf_conn.c npf_conndb.c Log Message: NPF: partially rewrite the connection tracking mechanism: - Separate the tracking interface from the storage (state table) and thus prepare to use a new data structure for the storage. - Fix some race conditions in NAT association logic. To generate a diff of this commit: cvs rdiff -u -r1.16 -r1.17 src/sys/modules/npf/Makefile cvs rdiff -u -r1.16 -r1.17 src/sys/net/npf/files.npf cvs rdiff -u -r1.19 -r1.20 src/sys/net/npf/npf.c cvs rdiff -u -r1.42 -r1.43 src/sys/net/npf/npf.h cvs rdiff -u -r1.12 -r1.13 src/sys/net/npf/npf_alg.c cvs rdiff -u -r1.21 -r1.22 src/sys/net/npf/npf_alg_icmp.c cvs rdiff -u -r0 -r1.1 src/sys/net/npf/npf_conn.c \ src/sys/net/npf/npf_conndb.c cvs rdiff -u -r1.33 -r1.34 src/sys/net/npf/npf_ctl.c cvs rdiff -u -r1.30 -r1.31 src/sys/net/npf/npf_handler.c \ src/sys/net/npf/npf_inet.c cvs rdiff -u -r1.2 -r1.3 src/sys/net/npf/npf_if.c cvs rdiff -u -r1.53 -r1.54 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.28 -r1.29 src/sys/net/npf/npf_nat.c cvs rdiff -u -r1.32 -r1.33 src/sys/net/npf/npf_session.c cvs rdiff -u -r1.15 -r1.16 src/sys/net/npf/npf_state.c cvs rdiff -u -r1.13 -r1.14 src/sys/net/npf/npf_state_tcp.c cvs rdiff -u -r1.13 -r1.14 src/sys/rump/net/lib/libnpf/Makefile Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: rmind Date: Thu Jul 10 14:05:19 UTC 2014 Modified Files: src/sys/netinet: tcp_usrreq.c Log Message: tcp_accept: simplify a little. To generate a diff of this commit: cvs rdiff -u -r1.186 -r1.187 src/sys/netinet/tcp_usrreq.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net/npf
Module Name:src Committed By: rmind Date: Mon Jun 30 00:01:24 UTC 2014 Modified Files: src/sys/net/npf: npf_bpf.c Log Message: NPF: use BPF JIT by default. To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 src/sys/net/npf/npf_bpf.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Sun Jun 29 00:05:24 UTC 2014 Modified Files: src/sys/net/npf: npf.h npf_bpf.c src/usr.sbin/npf/npfctl: npf_bpf_comp.c Log Message: NPF: - Populate the BPF external memory store with L3 information. - Eliminate NPF_COP_L3 call and just use the data in the memstore. - Bump NPF_VERSION. To generate a diff of this commit: cvs rdiff -u -r1.41 -r1.42 src/sys/net/npf/npf.h cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_bpf.c cvs rdiff -u -r1.6 -r1.7 src/usr.sbin/npf/npfctl/npf_bpf_comp.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Wed Jun 25 01:21:36 UTC 2014 Modified Files: src/sys/net: bpfjit.c Log Message: bpfjit_generate_code: emit the instruction correctly. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/sys/net/bpfjit.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/npf/npftest
Module Name:src Committed By: rmind Date: Wed Jun 25 00:21:42 UTC 2014 Modified Files: src/usr.sbin/npf/npftest: README src/usr.sbin/npf/npftest/libnpftest: npf_perf_test.c Log Message: npftest: add an example in the README, fix the total in npf_test_conc(). To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npftest/README cvs rdiff -u -r1.3 -r1.4 src/usr.sbin/npf/npftest/libnpftest/npf_perf_test.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src
Module Name:src Committed By: rmind Date: Wed Jun 25 00:20:06 UTC 2014 Modified Files: src/sys/net/npf: npf.h npf_bpf.c npf_impl.h npf_ruleset.c src/usr.sbin/npf/npftest/libnpftest: npf_bpf_test.c Log Message: Adjust NPF to the recent BPF / BPF JIT changes and make it work again. All regression tests are happy now (hi alnsn!). To generate a diff of this commit: cvs rdiff -u -r1.40 -r1.41 src/sys/net/npf/npf.h cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_bpf.c cvs rdiff -u -r1.52 -r1.53 src/sys/net/npf/npf_impl.h cvs rdiff -u -r1.32 -r1.33 src/sys/net/npf/npf_ruleset.c cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npftest/libnpftest/npf_bpf_test.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Tue Jun 24 22:27:40 UTC 2014 Modified Files: src/sys/net: bpf_filter.c Log Message: - bpf_validate_ext: fix memword validation in BPF_ST/BPF_STX case. - bpf_set_extmem: check the number of words against BPF_MAX_MEMWORDS. To generate a diff of this commit: cvs rdiff -u -r1.63 -r1.64 src/sys/net/bpf_filter.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Tue Jun 24 22:19:36 UTC 2014 Modified Files: src/sys/net: bpf.h bpf_filter.c bpfjit.c Log Message: - Improve the comments in bpf.h and KNF a little. - Rename bpf_ctx_t member noinit to preinited (reflects the meaning better). To generate a diff of this commit: cvs rdiff -u -r1.64 -r1.65 src/sys/net/bpf.h cvs rdiff -u -r1.62 -r1.63 src/sys/net/bpf_filter.c cvs rdiff -u -r1.13 -r1.14 src/sys/net/bpfjit.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Fri Jun 13 13:54:08 UTC 2014 Modified Files: src/sys/net: if.c Log Message: if_detach: drain ip6_pktq as well. To generate a diff of this commit: cvs rdiff -u -r1.280 -r1.281 src/sys/net/if.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src Committed By: rmind Date: Mon Jun 9 14:44:48 UTC 2014 Modified Files: src/sys/net: pktqueue.c Log Message: pktqueue: add or fix some comments, remove some header inclusions. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 src/sys/net/pktqueue.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Mon Jun 9 13:03:16 UTC 2014 Modified Files: src/sys/net: pktqueue.c src/sys/rump/librump/rumpkern: intr.c Log Message: Restore the assert in RUMP's softint_schedule_cpu() and just ensure curcpu() in the caller. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/sys/net/pktqueue.c cvs rdiff -u -r1.44 -r1.45 src/sys/rump/librump/rumpkern/intr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/net
Module Name:src
Committed By: rmind
Date: Mon Jun 9 12:57:05 UTC 2014
Modified Files:
src/sys/net: if.c pktqueue.c pktqueue.h
Log Message:
Implement pktq_set_maxlen() and let sysctl net.inet.{ip,ip6}.ifq.maxlen be
changed on the fly again.
To generate a diff of this commit:
cvs rdiff -u -r1.278 -r1.279 src/sys/net/if.c
cvs rdiff -u -r1.1 -r1.2 src/sys/net/pktqueue.c src/sys/net/pktqueue.h
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: rmind Date: Mon Jun 9 12:44:07 UTC 2014 Modified Files: src/sys/kern: subr_pcq.c src/sys/sys: pcq.h Log Message: Add PCQ_MAXLEN constant. To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/sys/kern/subr_pcq.c cvs rdiff -u -r1.1 -r1.2 src/sys/sys/pcq.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/rump/librump/rumpkern
Module Name:src Committed By: rmind Date: Sun Jun 8 15:24:34 UTC 2014 Modified Files: src/sys/rump/librump/rumpkern: intr.c Log Message: RUMP's softint_schedule_cpu: comment out an assert for now. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 src/sys/rump/librump/rumpkern/intr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
