| Age | Commit message (Expand) | Author |
|---|
| 2001-06-01 | use pool allocation for ip fragement queue, from netbsd, | Niels Provos |
| 2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt |
| 2001-05-27 | Use the new IPsec tags. | Angelos D. Keromytis |
| 2001-05-20 | Remove varargs from ipv4_input; cmetz@ deraadt@ ok. | Federico G. Schwindt |
| 2001-05-20 | Use packet tags instead of tdbi. | Angelos D. Keromytis |
| 2001-05-16 | Don't clobber ip_sum; ip_output always sets this to 0 before calling | Federico G. Schwindt |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell |
| 2001-05-01 | get rid of dtom(), okay itojun@ angelos@ mickey@ millert@ | Niels Provos |
| 2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
| 2001-03-25 | A couple minor fixes to prevent use after free. Thanks to dawson and team for... | Constantine Sapuntzakis |
| 2001-03-18 | enable pmtu by default | Niels Provos |
| 2001-03-03 | on parse error of timestamp option, set parameter error offset correctly. | Jun-ichiro itojun Hagino |
| 2001-03-03 | drop packets with 127.0.0.0/8 in header field, if the packet is from outside. | Jun-ichiro itojun Hagino |
| 2000-12-03 | Fix fastroute-related panic, fixes PR 1541 (cas@trans-nt.com) | Angelos D. Keromytis |
| 2000-10-13 | make sure we don't share external mbuf between m and mcopy, in ip_forward(). | Jun-ichiro itojun Hagino |
| 2000-09-22 | fix my bug dating back to february the 14th of 1998, | Michael Shalayeff |
| 2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |
| 2000-09-18 | Path MTU discovery based on NetBSD but with the decision to use the DF | Niels Provos |
| 2000-05-15 | parse IPv4 options more carefully. make boundary checks against every | Jun-ichiro itojun Hagino |
| 2000-05-10 | make sure ip_timestamp is aligned correctly | Jason Wright |
| 2000-05-06 | avoid underflow on unsigned value arithmetic (when optlen < 4). | Jun-ichiro itojun Hagino |
| 2000-05-06 | avoid unaligned access in timestamp; http://www.newhackcity.net/advisories/20... | Theo de Raadt |
| 2000-04-09 | Pass ip_off and ip_len in the correct byte order to icmp_error(); this | Angelos D. Keromytis |
| 2000-04-04 | Verbiage fix. | Angelos D. Keromytis |
| 2000-03-27 | As I threatened a while ago, ingress IPsec ACL-checking is turned on | Angelos D. Keromytis |
| 2000-03-03 | remove WIDE's experimental ip reass code, mistakingly merged in partially. | Jun-ichiro itojun Hagino |
| 2000-01-10 | Add 10 new ipsec-related sysctl variables...they are currently under | Angelos D. Keromytis |
| 2000-01-10 | Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; the | Angelos D. Keromytis |
| 2000-01-09 | Rename newly-introduced variable to better reflect use. | Angelos D. Keromytis |
| 2000-01-09 | Add a sysctl for IPsec ingress access control (better explanation on a | Angelos D. Keromytis |
| 1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino |
| 1999-11-29 | Make sure M_BCAST is set for IP broadcasts, even if the packet came in as | Hakan Olsson |
| 1999-09-25 | line not needed | Theo de Raadt |
| 1999-09-23 | fix same-interface-out-as-in and packet gets corrupted bug noted by | Theo de Raadt |
| 1999-04-23 | dont accept packets with the destination address of a down interface; | Niels Provos |
| 1999-04-12 | move encdebug to a useful place | Theo de Raadt |
| 1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist |
| 1999-02-21 | split ipintr() to create new ipv4_input() for tunnels; NRL | Theo de Raadt |
| 1999-02-19 | ipq locking | Theo de Raadt |
| 1999-02-17 | add fragment flood protection; configureable using sysctl ip.maxqueue | Theo de Raadt |
| 1998-12-28 | ensure the ip packet embedded inside an icmp packet has correct ip_len, | Theo de Raadt |
| 1998-12-26 | make ip_id random but ensure that ids dont repeat for some period. | Niels Provos |
| 1998-11-13 | Recompute ip header length after packet has been reassembled, and also | Niels Provos |
| 1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos |
| 1998-02-14 | wildcard ifaces; finally, after HE said it's ok | Michael Shalayeff |
| 1998-02-03 | bail out for sourcerouted packets earlier, also do not forward | Theo de Raadt |
| 1998-02-01 | undo wildcard loopback stuff; it was not checked by other developers | Theo de Raadt |
| 1998-02-01 | support wildcard loopbacks. that is, setting up lo1 like: | Michael Shalayeff |
| 1997-08-09 | The list of tcp/udp ports not to allocate dynamically is now | Todd C. Miller |
| 1997-02-28 | IPsec socket API hooks are in. | Angelos D. Keromytis |
