| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 1999-10-29 | Remove unnecessary argument from ipe4_output() and etherip_output() | Angelos D. Keromytis | |
| 1999-10-29 | Fix some comments. | Angelos D. Keromytis | |
| 1999-05-16 | Don't judge locally generated tunnel packets as spoof attempts. indent. | Niklas Hallqvist | |
| 1999-05-12 | Obvious pasto | Niklas Hallqvist | |
| 1999-04-20 | Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets. | Niklas Hallqvist | |
| Fix a panic case in the MROUTING code too. Drop M_TUNNEL support, nothing ever uses it. | |||
| 1999-04-09 | The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4) | Niklas Hallqvist | |
| support, when IPSEC is compiled in. The default is disabled. Turn on with: sysctl -w net.inet.ip4.allow=1 ***Only*** do this if you are really knowing what you do! This control does not control the tunnel modes of ESP and AH. | |||
| 1999-04-09 | Check for local address spoofing on encapsulated packets. | Angelos D. Keromytis | |
| 1999-04-04 | fix tunnelling; provos | Theo de Raadt | |
| 1999-02-25 | Clear the DF bit, so packets don't get dropped inside a tunnel. | Angelos D. Keromytis | |
| The real solution is probably to keep soft state; however, it's not entirely clear what a tunnel's properties with regards to fragmentation are (it may be considered a infinitely-large MTU pipe). | |||
| 1999-02-24 | Update copyright; remove a few annoying debugging printfs. | Angelos D. Keromytis | |
| Btw, OpenBSD hit 25000 commits a couple commits ago. | |||
| 1999-02-24 | Remove encap.h include; saner debugging printfs; fix buglets; work with | Angelos D. Keromytis | |
| pfkeyv2. | |||
| 1999-01-08 | dont call ip_randomid() in htons(). | Niels Provos | |
| 1998-12-26 | make ip_id random but ensure that ids dont repeat for some period. | Niels Provos | |
| 1998-07-29 | Proper handling of IP in IP and checksumming. | Angelos D. Keromytis | |
| 1998-06-10 | make the packets which were successfully processed by IPSec available to | Niels Provos | |
| bpf via the enc0 interface, using linktype DLT_ENC. | |||
| 1998-05-22 | Set the outter IP header's ttl, not the inner. | Angelos D. Keromytis | |
| 1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos | |
| draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy. | |||
| 1998-03-18 | adapt function arguments to get the expected prototype. | Niels Provos | |
| 1997-11-04 | make it easier to add additional transforms. add blowfish and cast | Niels Provos | |
| encryption. some more info for kernfs/ipsec. | |||
| 1997-10-02 | conditional error logging | Theo de Raadt | |
| 1997-09-28 | more \n in log() | Theo de Raadt | |
| 1997-07-14 | global byte counters. | Niels Provos | |
| 1997-07-11 | put old esp/ah and new esp/ah in different files. | Niels Provos | |
| generalised way of handling transforms. | |||
| 1997-07-01 | major restructuring | Niels Provos | |
| 1997-06-25 | hard and soft limits for SPI's per absolute timer, relative since establish, | Niels Provos | |
| relative since first use timers, packet and byte counters. notify key mgmt on soft limits. key mgmt can now specify limits. new encap messages: EMT_RESERVESPI, EMT_ENABLESPI, EMT_DISABLESPI | |||
| 1997-06-24 | handle IP options in AH + allow IP options in outgoing encapsulated packets | Niels Provos | |
| + usage counters for later use with keymanagement processes | |||
| 1997-06-24 | Comment reordering. | Angelos D. Keromytis | |
| 1997-06-20 | ah-sha1 + esp-3des + indentation | Niels Provos | |
| 1997-02-26 | I/O packet counters for IP-in-IP and AH. | Angelos D. Keromytis | |
| 1997-02-24 | OpenBSD tags + some prototyping police | Niklas Hallqvist | |
| 1997-02-22 | Resolved a couple of open issues (just changed comments after checking | Angelos D. Keromytis | |
| RFCs). | |||
| 1997-02-22 | User-defined TTL for external IP header. | Angelos D. Keromytis | |
| 1997-02-20 | IPSEC package by John Ioannidis and Angelos D. Keromytis. Written in | Theo de Raadt | |
| Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |