Age | Commit message (Collapse) | Author | |
---|---|---|---|
1999-08-08 | typo | Niklas Hallqvist | |
1999-08-08 | Fix cases when wanting to communicate with the bridge' | Niklas Hallqvist | |
s remote interfaces, both ARP and local delivery had bugs | |||
1999-08-08 | Support detaching of network interfaces. Still work to do in ipf, and | Niklas Hallqvist | |
other families than inet. | |||
1999-08-06 | Fix an uninitialized variable bug. Remove statics. | Niklas Hallqvist | |
1999-08-05 | Add SADB_FLUSH logic (tdb flushing). | Hakan Olsson | |
1999-07-30 | Add IEEE 802 hardware type. | Federico G. Schwindt | |
1999-07-28 | Add LLC_SNAPFRAMELEN define. indent. | Federico G. Schwindt | |
1999-07-24 | fix size calculation in SIOCBRDGRTS | Jason Wright | |
code size reduction from deraadt@ | |||
1999-07-24 | Return EMSGSIZE for zero length writes - don't panic. | brian | |
1999-07-21 | 1000baseXX media | Jason Wright | |
1999-07-15 | From angelos@, edits by me, demand keying for PF_KEY | Niklas Hallqvist | |
1999-07-06 | ipsec_in_use could get out of sync. (Also niklas@. angelos@ ok) | Hakan Olsson | |
1999-07-06 | Added support for TCP MD5 option (RFC 2385). | cmetz | |
1999-07-05 | remove bogus entry from if_enc address list; and rename enc_softc to encif | Theo de Raadt | |
1999-07-04 | fix unsigned without a size-type | Theo de Raadt | |
1999-07-04 | fix link level type codes | Brad Smith | |
1999-07-04 | Typos | Marc Espie | |
1999-07-02 | rename SADB_foo_X_bar to SADB_X_foo_bar | Theo de Raadt | |
1999-07-02 | do not use fuword() | Theo de Raadt | |
1999-07-01 | lmc driver; ported by chris@dqc.org | Theo de Raadt | |
1999-06-30 | bpfattach bridge's and provide tap for queued packets | Jason Wright | |
1999-06-23 | Added some protocol independent interfaces (supposedly IPv6 support APIs, but | cmetz | |
ones that are useful for all protocols, not just IPv6). | |||
1999-06-03 | Repair amiga builds (int schedules need some machine-specific macros) | Marc Espie | |
1999-06-01 | Introduce M_PFKEY kmem type, and use it. (angelos@ ok) | Hakan Olsson | |
1999-06-01 | Fix some mips -> __mips__ stuff. | Per Fogelstrom | |
1999-05-31 | Fix M_TEMP memory leak in pfkeyv2_expire() | Hakan Olsson | |
(likewise future pfkeyv2_acquire()) | |||
1999-05-26 | Implement DLT_RAW, DLT_{SLIP,PPP}_BSDOS from libpcap 0.4 | Brad Smith | |
1999-05-24 | Only do basic work in the ethernet interrupt context, and queue packets to | Jason Wright | |
be bridged. Do the real work in a scheduled netisr. | |||
1999-05-23 | Avoid bzero + free after failed malloc(). From niklas@ | Hakan Olsson | |
1999-05-21 | For hard expiration-pressure you need to protect PF_KEY socket | Niklas Hallqvist | |
queueing with spltdb() | |||
1999-05-16 | spltdb introduced, protection for tdb lists and related structures, so | Niklas Hallqvist | |
they won't disappear behind our back by an expiration. Cleanup expiration logic too. | |||
1999-05-16 | The enc interface should not be IFF_LOOPBACK, as AH and ESP uses that | Niklas Hallqvist | |
as receiving interface for filtering | |||
1999-05-16 | Add support for static ARP entries that cannot be overwritten. | Hakan Olsson | |
Ordinary static ARPs that are overwritten will no longer still be static. | |||
1999-05-14 | A new scalable IPsec SA expiration model. | Niklas Hallqvist | |
1999-05-03 | Plug mbuf leak | Niklas Hallqvist | |
1999-04-22 | we don't need to include buf.h | Artur Grabowski | |
1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist | |
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too. | |||
1999-04-09 | when the REPLACE flag was used, but no former flows was there, we did not | Niklas Hallqvist | |
increment the IPSEC use counter, potentially missing IPSEC processing on output. | |||
1999-03-31 | Implement SADB_SAFLAGS_X_REPLACEFLOW | Niklas Hallqvist | |
1999-03-27 | add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoing | Niels Provos | |
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company. | |||
1999-03-24 | Implement lifetime expiration notifications. Fix some typos. Remove statics. | Niklas Hallqvist | |
1999-03-19 | Add flag to allow some interfaces to not see packets with unknown destination. | Jason Wright | |
1999-03-19 | Add the ability to mark an interface as "non-learning" | Jason Wright | |
1999-03-13 | make ifa_refcnt a u_int; andrewb@demon.net | Theo de Raadt | |
1999-03-12 | big overhaul: | Jason Wright | |
o SNAP encapsulated IP filtering o static address cache entries o address deletion from cache o dynamic & full cache flush o filter packets based on each interface, not on the bridge as a whole o KNF nits o allow addition of ~IFF_UP interfaces o man page & user level fixes to match the above | |||
1999-03-05 | bump cache timeout up a bit | Jason Wright | |
1999-03-05 | Make address cache expiration actually work and provide a knob | Jason Wright | |
for adjusting the timeout. | |||
1999-03-05 | restrict replay window size to 32 | Theo de Raadt | |
1999-03-05 | update allocation statistics | Theo de Raadt | |
1999-03-04 | remove unnecessary malloc checks when using WAITOK | Theo de Raadt | |