| Age | Commit message (Expand) | Author |
|---|
| 2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos |
| 2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho |
| 2001-06-26 | no longer pass around **m | Theo de Raadt |
| 2001-06-25 | Build without IPSEC. | Artur Grabowski |
| 2001-06-24 | make it compile w/o pf | Michael Shalayeff |
| 2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding |
| 2001-06-24 | take mtu from routing table | Niels Provos |
| 2001-06-23 | Clear the checksum flags after verification. Also, don't count | Angelos D. Keromytis |
| 2001-06-23 | Count input packets hardware-checksummed. | Angelos D. Keromytis |
| 2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt |
| 2001-06-23 | Count input/output hardware-checksummed IP packets. | Angelos D. Keromytis |
| 2001-06-23 | Clear IPv4 input checksum OK flag after verification. | Angelos D. Keromytis |
| 2001-06-23 | TCP, UDP, IPv4 input hardware checksumming processing; also IPv4 | Angelos D. Keromytis |
| 2001-06-19 | mop up after angelos | Theo de Raadt |
| 2001-06-08 | Cut down on include files. | Angelos D. Keromytis |
| 2001-06-01 | use pool allocation for ip fragement queue, from netbsd, | Niels Provos |
| 2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt |
| 2001-05-27 | Use the new IPsec tags. | Angelos D. Keromytis |
| 2001-05-20 | Remove varargs from ipv4_input; cmetz@ deraadt@ ok. | Federico G. Schwindt |
| 2001-05-20 | Use packet tags instead of tdbi. | Angelos D. Keromytis |
| 2001-05-16 | Don't clobber ip_sum; ip_output always sets this to 0 before calling | Federico G. Schwindt |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell |
| 2001-05-01 | get rid of dtom(), okay itojun@ angelos@ mickey@ millert@ | Niels Provos |
| 2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
| 2001-03-25 | A couple minor fixes to prevent use after free. Thanks to dawson and team for... | Constantine Sapuntzakis |
| 2001-03-18 | enable pmtu by default | Niels Provos |
| 2001-03-03 | on parse error of timestamp option, set parameter error offset correctly. | Jun-ichiro itojun Hagino |
| 2001-03-03 | drop packets with 127.0.0.0/8 in header field, if the packet is from outside. | Jun-ichiro itojun Hagino |
| 2000-12-03 | Fix fastroute-related panic, fixes PR 1541 (cas@trans-nt.com) | Angelos D. Keromytis |
| 2000-10-13 | make sure we don't share external mbuf between m and mcopy, in ip_forward(). | Jun-ichiro itojun Hagino |
| 2000-09-22 | fix my bug dating back to february the 14th of 1998, | Michael Shalayeff |
| 2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |
| 2000-09-18 | Path MTU discovery based on NetBSD but with the decision to use the DF | Niels Provos |
| 2000-05-15 | parse IPv4 options more carefully. make boundary checks against every | Jun-ichiro itojun Hagino |
| 2000-05-10 | make sure ip_timestamp is aligned correctly | Jason Wright |
| 2000-05-06 | avoid underflow on unsigned value arithmetic (when optlen < 4). | Jun-ichiro itojun Hagino |
| 2000-05-06 | avoid unaligned access in timestamp; http://www.newhackcity.net/advisories/20... | Theo de Raadt |
| 2000-04-09 | Pass ip_off and ip_len in the correct byte order to icmp_error(); this | Angelos D. Keromytis |
| 2000-04-04 | Verbiage fix. | Angelos D. Keromytis |
| 2000-03-27 | As I threatened a while ago, ingress IPsec ACL-checking is turned on | Angelos D. Keromytis |
| 2000-03-03 | remove WIDE's experimental ip reass code, mistakingly merged in partially. | Jun-ichiro itojun Hagino |
| 2000-01-10 | Add 10 new ipsec-related sysctl variables...they are currently under | Angelos D. Keromytis |
| 2000-01-10 | Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; the | Angelos D. Keromytis |
| 2000-01-09 | Rename newly-introduced variable to better reflect use. | Angelos D. Keromytis |
| 2000-01-09 | Add a sysctl for IPsec ingress access control (better explanation on a | Angelos D. Keromytis |
| 1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino |
| 1999-11-29 | Make sure M_BCAST is set for IP broadcasts, even if the packet came in as | Hakan Olsson |
| 1999-09-25 | line not needed | Theo de Raadt |
| 1999-09-23 | fix same-interface-out-as-in and packet gets corrupted bug noted by | Theo de Raadt |
| 1999-04-23 | dont accept packets with the destination address of a down interface; | Niels Provos |
