| Age | Commit message (Expand) | Author |
|---|
| 2000-09-22 | fix my bug dating back to february the 14th of 1998, | Michael Shalayeff |
| 2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |
| 2000-09-18 | Path MTU discovery based on NetBSD but with the decision to use the DF | Niels Provos |
| 2000-05-15 | parse IPv4 options more carefully. make boundary checks against every | Jun-ichiro itojun Hagino |
| 2000-05-10 | make sure ip_timestamp is aligned correctly | Jason Wright |
| 2000-05-06 | avoid underflow on unsigned value arithmetic (when optlen < 4). | Jun-ichiro itojun Hagino |
| 2000-05-06 | avoid unaligned access in timestamp; http://www.newhackcity.net/advisories/20... | Theo de Raadt |
| 2000-04-09 | Pass ip_off and ip_len in the correct byte order to icmp_error(); this | Angelos D. Keromytis |
| 2000-04-04 | Verbiage fix. | Angelos D. Keromytis |
| 2000-03-27 | As I threatened a while ago, ingress IPsec ACL-checking is turned on | Angelos D. Keromytis |
| 2000-03-03 | remove WIDE's experimental ip reass code, mistakingly merged in partially. | Jun-ichiro itojun Hagino |
| 2000-01-10 | Add 10 new ipsec-related sysctl variables...they are currently under | Angelos D. Keromytis |
| 2000-01-10 | Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; the | Angelos D. Keromytis |
| 2000-01-09 | Rename newly-introduced variable to better reflect use. | Angelos D. Keromytis |
| 2000-01-09 | Add a sysctl for IPsec ingress access control (better explanation on a | Angelos D. Keromytis |
| 1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino |
| 1999-11-29 | Make sure M_BCAST is set for IP broadcasts, even if the packet came in as | Hakan Olsson |
| 1999-09-25 | line not needed | Theo de Raadt |
| 1999-09-23 | fix same-interface-out-as-in and packet gets corrupted bug noted by | Theo de Raadt |
| 1999-04-23 | dont accept packets with the destination address of a down interface; | Niels Provos |
| 1999-04-12 | move encdebug to a useful place | Theo de Raadt |
| 1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist |
| 1999-02-21 | split ipintr() to create new ipv4_input() for tunnels; NRL | Theo de Raadt |
| 1999-02-19 | ipq locking | Theo de Raadt |
| 1999-02-17 | add fragment flood protection; configureable using sysctl ip.maxqueue | Theo de Raadt |
| 1998-12-28 | ensure the ip packet embedded inside an icmp packet has correct ip_len, | Theo de Raadt |
| 1998-12-26 | make ip_id random but ensure that ids dont repeat for some period. | Niels Provos |
| 1998-11-13 | Recompute ip header length after packet has been reassembled, and also | Niels Provos |
| 1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos |
| 1998-02-14 | wildcard ifaces; finally, after HE said it's ok | Michael Shalayeff |
| 1998-02-03 | bail out for sourcerouted packets earlier, also do not forward | Theo de Raadt |
| 1998-02-01 | undo wildcard loopback stuff; it was not checked by other developers | Theo de Raadt |
| 1998-02-01 | support wildcard loopbacks. that is, setting up lo1 like: | Michael Shalayeff |
| 1997-08-09 | The list of tcp/udp ports not to allocate dynamically is now | Todd C. Miller |
| 1997-02-28 | IPsec socket API hooks are in. | Angelos D. Keromytis |
| 1997-02-22 | Fixed problem in ip_weadvertise(). | Angelos D. Keromytis |
| 1997-02-22 | ICMP redirects will not be sent if we do proxy arp pointing to ourselves. | Angelos D. Keromytis |
| 1997-02-13 | off-by-one-slot for IP timestamp option data inserts, PR#103, andreas.gunnars... | Theo de Raadt |
| 1997-02-11 | ensure ipt->ipt_ptr is right; pr#96, andreas.gunnarsson@emw.ericsson.se | Theo de Raadt |
| 1997-01-26 | Make ip_len and ip_off unsigned values; don't transmit or accept packets | Thorsten Lockert |
| 1996-10-27 | record route is not a problem; thanks bitblt | Theo de Raadt |
| 1996-10-18 | Do not run IP defragmentation routines unneccecarily; NetBSD PR# 2772 | Thorsten Lockert |
| 1996-09-02 | Don't drain the protocol queues at interrupt level. | dm |
| 1996-08-14 | ipaddrs are int; like many other things found after spotting a similar netbsd... | Theo de Raadt |
| 1996-08-02 | Allow viewing of net.inet.ip.sourceroute in secure mode | Thorsten Lockert |
| 1996-07-29 | From FreeBSD (with slightly different sysctl names): | Jason Downs |
| 1996-07-18 | ipfilter 3.1.0 | dm |
| 1996-05-07 | from NetBSD PR#2296: | Michael Shalayeff |
| 1996-04-21 | partial sync with netbsd 960418, more to come | Theo de Raadt |
| 1996-03-09 | restored IP filtering | dm |
