summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
1999-08-08typoNiklas Hallqvist
1999-08-08Fix cases when wanting to communicate with the bridge'Niklas Hallqvist
s remote interfaces, both ARP and local delivery had bugs
1999-08-08Support detaching of network interfaces. Still work to do in ipf, andNiklas Hallqvist
other families than inet.
1999-08-06Fix an uninitialized variable bug. Remove statics.Niklas Hallqvist
1999-08-05Add SADB_FLUSH logic (tdb flushing).Hakan Olsson
1999-07-30Add IEEE 802 hardware type.Federico G. Schwindt
1999-07-28Add LLC_SNAPFRAMELEN define. indent.Federico G. Schwindt
1999-07-24fix size calculation in SIOCBRDGRTSJason Wright
code size reduction from deraadt@
1999-07-24Return EMSGSIZE for zero length writes - don't panic.brian
1999-07-211000baseXX mediaJason Wright
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-07-06ipsec_in_use could get out of sync. (Also niklas@. angelos@ ok)Hakan Olsson
1999-07-06Added support for TCP MD5 option (RFC 2385).cmetz
1999-07-05remove bogus entry from if_enc address list; and rename enc_softc to encifTheo de Raadt
1999-07-04fix unsigned without a size-typeTheo de Raadt
1999-07-04fix link level type codesBrad Smith
1999-07-04TyposMarc Espie
1999-07-02rename SADB_foo_X_bar to SADB_X_foo_barTheo de Raadt
1999-07-02do not use fuword()Theo de Raadt
1999-07-01lmc driver; ported by chris@dqc.orgTheo de Raadt
1999-06-30bpfattach bridge's and provide tap for queued packetsJason Wright
1999-06-23Added some protocol independent interfaces (supposedly IPv6 support APIs, butcmetz
ones that are useful for all protocols, not just IPv6).
1999-06-03Repair amiga builds (int schedules need some machine-specific macros)Marc Espie
1999-06-01Introduce M_PFKEY kmem type, and use it. (angelos@ ok)Hakan Olsson
1999-06-01Fix some mips -> __mips__ stuff.Per Fogelstrom
1999-05-31Fix M_TEMP memory leak in pfkeyv2_expire()Hakan Olsson
(likewise future pfkeyv2_acquire())
1999-05-26Implement DLT_RAW, DLT_{SLIP,PPP}_BSDOS from libpcap 0.4Brad Smith
1999-05-24Only do basic work in the ethernet interrupt context, and queue packets toJason Wright
be bridged. Do the real work in a scheduled netisr.
1999-05-23Avoid bzero + free after failed malloc(). From niklas@Hakan Olsson
1999-05-21For hard expiration-pressure you need to protect PF_KEY socketNiklas Hallqvist
queueing with spltdb()
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist
they won't disappear behind our back by an expiration. Cleanup expiration logic too.
1999-05-16The enc interface should not be IFF_LOOPBACK, as AH and ESP uses thatNiklas Hallqvist
as receiving interface for filtering
1999-05-16Add support for static ARP entries that cannot be overwritten.Hakan Olsson
Ordinary static ARPs that are overwritten will no longer still be static.
1999-05-14A new scalable IPsec SA expiration model.Niklas Hallqvist
1999-05-03Plug mbuf leakNiklas Hallqvist
1999-04-22we don't need to include buf.hArtur Grabowski
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too.
1999-04-09when the REPLACE flag was used, but no former flows was there, we did notNiklas Hallqvist
increment the IPSEC use counter, potentially missing IPSEC processing on output.
1999-03-31Implement SADB_SAFLAGS_X_REPLACEFLOWNiklas Hallqvist
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-24Implement lifetime expiration notifications. Fix some typos. Remove statics.Niklas Hallqvist
1999-03-19Add flag to allow some interfaces to not see packets with unknown destination.Jason Wright
1999-03-19Add the ability to mark an interface as "non-learning"Jason Wright
1999-03-13make ifa_refcnt a u_int; andrewb@demon.netTheo de Raadt
1999-03-12big overhaul:Jason Wright
o SNAP encapsulated IP filtering o static address cache entries o address deletion from cache o dynamic & full cache flush o filter packets based on each interface, not on the bridge as a whole o KNF nits o allow addition of ~IFF_UP interfaces o man page & user level fixes to match the above
1999-03-05bump cache timeout up a bitJason Wright
1999-03-05Make address cache expiration actually work and provide a knobJason Wright
for adjusting the timeout.
1999-03-05restrict replay window size to 32Theo de Raadt
1999-03-05update allocation statisticsTheo de Raadt
1999-03-04remove unnecessary malloc checks when using WAITOKTheo de Raadt