| #
c57e67d0 |
| 07-Jun-2011 |
Andrey V. Elsukov <ae@FreeBSD.org> |
Sync ng_nat with recent (r222806) ipfw_nat changes:
Make a behaviour of the libalias based in-kernel NAT a bit closer to
how natd(8) does work. natd(8) drops packets only when libalias returns
Sync ng_nat with recent (r222806) ipfw_nat changes:
Make a behaviour of the libalias based in-kernel NAT a bit closer to
how natd(8) does work. natd(8) drops packets only when libalias returns
PKT_ALIAS_IGNORED and "deny_incoming" option is set, but ipfw_nat
always did drop packets that were not aliased, even if they should
not be aliased and just are going through.
Also add SCTP support: mark response packets to skip firewall processing.
MFC after: 1 month
show more ...
|
| #
ca47294d |
| 18-Apr-2011 |
Gleb Smirnoff <glebius@FreeBSD.org> |
LibAliasInit() should allocate memory with M_WAITOK flag. Modify it
and its callers.
|
| #
674d86bf |
| 18-Apr-2011 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Node constructor methods are supposed to be called in syscall
context always. Convert nodes to consistently use M_WAITOK flag
for memory allocation.
Reviewed by: julian
|
|
Revision tags: release/7.4.0_cvs, release/8.2.0_cvs, release/7.4.0, release/8.2.0, release/8.1.0_cvs, release/8.1.0, release/7.3.0_cvs, release/7.3.0, release/8.0.0_cvs, release/8.0.0, release/7.2.0_cvs, release/7.2.0, release/7.1.0_cvs, release/7.1.0 |
|
| #
e57c2b13 |
| 04-Dec-2008 |
Dag-Erling Smørgrav <des@FreeBSD.org> |
integrate from head@185615
|
|
Revision tags: release/6.4.0_cvs, release/6.4.0 |
|
| #
1ede983c |
| 23-Oct-2008 |
Dag-Erling Smørgrav <des@FreeBSD.org> |
Retire the MALLOC and FREE macros. They are an abomination unto style(9).
MFC after: 3 months
|
| #
a9a13b54 |
| 01-Jun-2008 |
Alexander Motin <mav@FreeBSD.org> |
Pass really available buffer size to libalias instead of MCLBYTES constant.
MCLBYTES constant were used with believe that m_megapullup() always moves
date into a fresh cluster that may become not so.
|
| #
fffba935 |
| 01-Mar-2008 |
Alexander Motin <mav@FreeBSD.org> |
Add support for the libalias redirect functionality.
Submitted by: Vadim Goncharov <vadim_nuclight@mail.ru>
|
|
Revision tags: release/7.0.0_cvs, release/7.0.0, release/6.3.0_cvs, release/6.3.0 |
|
| #
e842c540 |
| 22-May-2007 |
Alexander Motin <mav@FreeBSD.org> |
Add support for setmode and settarget messages.
Approved by: glebius (mentor)
|
| #
179f56e1 |
| 22-May-2007 |
Alexander Motin <mav@FreeBSD.org> |
Allow node to bypass traffic while no alias address defined.
Approved by: glebius (mentor)
|
|
Revision tags: release/6.2.0_cvs, release/6.2.0 |
|
| #
4b4ee018 |
| 21-Dec-2006 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Return value PKT_ALIAS_FOUND_HEADER_FRAGMENT isn't an error case. The
packet shouldn't be dropped.
Submitted by: Alexander Motin <mav alkar.net>
|
| #
e7bf4700 |
| 12-Dec-2006 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Correctly calculate length of IP header.
Submitted by: Eugene Hartmann <eugene tpsb.com.ru>
|
| #
e876228e |
| 01-Dec-2006 |
Paolo Pisati <piso@FreeBSD.org> |
Remove m_megapullup from ng_nat and put it under libalias.
Approved by: gleb
|
| #
b0dc0083 |
| 13-Oct-2006 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Fix result of some mechanical change that I did some time ago, when
writing this node.
|
|
Revision tags: release/5.5.0_cvs, release/5.5.0, release/6.1.0_cvs, release/6.1.0, release/6.0.0_cvs, release/6.0.0 |
|
| #
3a48a9fa |
| 27-Jun-2005 |
Gleb Smirnoff <glebius@FreeBSD.org> |
- After LibAlias processing check for TCP packet with th_x2 field
set. If found, then recalculate its checksum.
- Remove debugging printfs.
- Slightly rearrange code in ng_nat_rcvdata().
Approved
- After LibAlias processing check for TCP packet with th_x2 field
set. If found, then recalculate its checksum.
- Remove debugging printfs.
- Slightly rearrange code in ng_nat_rcvdata().
Approved by: re (scottl)
show more ...
|
| #
cc8c6970 |
| 11-May-2005 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Move assertion below initializer.
Submitted by: Noritoshi Demizu
Pointy hat to: glebius
|
| #
2046fd5f |
| 10-May-2005 |
Gleb Smirnoff <glebius@FreeBSD.org> |
- Assert that mbuf length equals packet length.
- Tell libalias, that we have MCLBYTES to play with.
- Obtain length of data in mbuf from updated IP header.
|
|
Revision tags: release/5.4.0_cvs, release/5.4.0 |
|
| #
c4c9b52b |
| 06-May-2005 |
Gleb Smirnoff <glebius@FreeBSD.org> |
ng_nat - a netgraph(4) node, which does NAT
|
|
Revision tags: release/6.4.0_cvs, release/6.4.0 |
|
| #
1ede983c |
| 23-Oct-2008 |
Dag-Erling Smørgrav <des@FreeBSD.org> |
Retire the MALLOC and FREE macros. They are an abomination unto style(9).
MFC after: 3 months
|
| #
a9a13b54 |
| 01-Jun-2008 |
Alexander Motin <mav@FreeBSD.org> |
Pass really available buffer size to libalias instead of MCLBYTES constant.
MCLBYTES constant were used with believe that m_megapullup() always moves
date into a fresh cluster that may become not so.
|
| #
fffba935 |
| 01-Mar-2008 |
Alexander Motin <mav@FreeBSD.org> |
Add support for the libalias redirect functionality.
Submitted by: Vadim Goncharov <vadim_nuclight@mail.ru>
|
|
Revision tags: release/7.0.0_cvs, release/7.0.0, release/6.3.0_cvs, release/6.3.0 |
|
| #
e842c540 |
| 22-May-2007 |
Alexander Motin <mav@FreeBSD.org> |
Add support for setmode and settarget messages.
Approved by: glebius (mentor)
|
| #
179f56e1 |
| 22-May-2007 |
Alexander Motin <mav@FreeBSD.org> |
Allow node to bypass traffic while no alias address defined.
Approved by: glebius (mentor)
|
|
Revision tags: release/6.2.0_cvs, release/6.2.0 |
|
| #
4b4ee018 |
| 21-Dec-2006 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Return value PKT_ALIAS_FOUND_HEADER_FRAGMENT isn't an error case. The
packet shouldn't be dropped.
Submitted by: Alexander Motin <mav alkar.net>
|
| #
e7bf4700 |
| 12-Dec-2006 |
Gleb Smirnoff <glebius@FreeBSD.org> |
Correctly calculate length of IP header.
Submitted by: Eugene Hartmann <eugene tpsb.com.ru>
|
| #
e876228e |
| 01-Dec-2006 |
Paolo Pisati <piso@FreeBSD.org> |
Remove m_megapullup from ng_nat and put it under libalias.
Approved by: gleb
|