Age | Commit message (Collapse) | Author | |
---|---|---|---|
2000-01-27 | Merge "old" and "new" ESP and AH in two files (one for each). | Angelos D. Keromytis | |
Fix a couple of buglets with ingress flow deletion. tcpdump on enc0 should now show all outgoing packets *before* being processed, and all incoming packets *after* being processed. Good to be in Canada (land of the free commits). | |||
2000-01-21 | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | Angelos D. Keromytis | |
affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input. | |||
2000-01-17 | fix "traceroute -P 41", outgoing side. incoming side needs fix in | Jun-ichiro itojun Hagino | |
ip4_input(). Requested from: Niels Provos <provos@citi.umich.edu> | |||
2000-01-11 | The entry for IP4 should always be there. | Angelos D. Keromytis | |
2000-01-07 | GRE/MobileIP input routine processing, from NetBSD (with a few | Angelos D. Keromytis | |
changes). Also, minor cleanup in in_proto.c | |||
2000-01-02 | Fix non-IPSEC kernel compilation (or part of it). | Angelos D. Keromytis | |
1999-12-21 | fix non-IPsec compilation. (too complex #ifdef...) | Jun-ichiro itojun Hagino | |
1999-12-21 | reuse encapsulate/decapsulate routine in ip_ip4.c from gif interface | Jun-ichiro itojun Hagino | |
(outer=IPv4 case). tested with (inner=IPv6, outer=IPv4) case. BUG ALERT: in_gif_output() assumes about ipe4_output()'s behavior too much. I mean, "tdb" is configured with certain knowledge about ipe4_output()'s behavior. | |||
1999-12-09 | We can't use the gif interface input routine for IPIP/IP6IP | Angelos D. Keromytis | |
encapsulation. | |||
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino | |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). | |||
1999-10-28 | Add IPPROTO_ETHERIP in the protocol switch; comment out INET6 IPv4-IPv4 | Angelos D. Keromytis | |
handling that was re-using ipv4_input() instead of using ip4_input() from netinet/ip_ip4.c | |||
1999-04-20 | Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets. | Niklas Hallqvist | |
Fix a panic case in the MROUTING code too. Drop M_TUNNEL support, nothing ever uses it. | |||
1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist | |
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too. | |||
1999-04-09 | The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4) | Niklas Hallqvist | |
support, when IPSEC is compiled in. The default is disabled. Turn on with: sysctl -w net.inet.ip4.allow=1 ***Only*** do this if you are really knowing what you do! This control does not control the tunnel modes of ESP and AH. | |||
1999-02-24 | Remove encap.h include; saner debugging printfs; fix buglets; work with | Angelos D. Keromytis | |
pfkeyv2. | |||
1999-01-08 | INET6 hooks; NRL/cmetz | Theo de Raadt | |
1998-07-30 | Forgot this one with the previous batch of commits; use ip4_input() | Angelos D. Keromytis | |
instead of ipip_input() whenever possible, it seems more stable. | |||
1998-03-18 | Fix tunnel mode input processing (use ip4_input instead of ipe4_input), | Niels Provos | |
fix some old code leftovers in ah_new_input (adjust to variable hash length), avoid double ip encapsulation in tunnel mode. Problems reportd by Petr Novak <petr@internet.cz>. | |||
1997-02-20 | IPSEC package by John Ioannidis and Angelos D. Keromytis. Written in | Theo de Raadt | |
Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz | |||
1996-10-08 | Prototype & Stylistic fixes for high -W gcc levels | Niklas Hallqvist | |
1996-07-18 | ipfilter 3.1.0 | dm | |
1996-04-24 | Add IPXIP entry, to not to get cvs confused in the future. | Michael Shalayeff | |
1996-03-04 | From NetBSD: Fix PR/2095 options MROUTING did not compile. | Niklas Hallqvist | |
1996-03-03 | From NetBSD: 960217 merge | Niklas Hallqvist | |
1995-10-18 | initial import of NetBSD tree | Theo de Raadt | |