Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-07-05 | Also, return EAFNOSUPPORT instead of ENOBUFS. Both this and the | Angelos D. Keromytis | |
previous commit where noted by sam@errno.com | |||
2002-07-05 | Bump ipips_family in ipipstat in all cases where EAFNOSUPPORT is returned. | Angelos D. Keromytis | |
2002-06-10 | correct tcpdump on gif interface (inbound). reported by fries | Jun-ichiro itojun Hagino | |
2002-06-09 | whitespace | Jun-ichiro itojun Hagino | |
2002-05-16 | bring in ECN support from KAME. | Kenjiro Cho | |
it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@ | |||
2001-12-06 | Sanity check on inner IP header in IP-in-IP encapsulation; could be | Angelos D. Keromytis | |
exploited to crash systems that allowed IP-in-IP protocol (sysctl -w net.inet.ipip.allow=1) | |||
2001-08-19 | Pass the interface (if any) to ipip_input(), so it can be used in | Angelos D. Keromytis | |
BPF. Closes PR 2000. | |||
2001-07-04 | Make preprocessor happier, don't give it untasty tokens at end of input. | Marc Espie | |
Ok millert@ | |||
2001-06-26 | More KNF | Angelos D. Keromytis | |
2001-06-25 | Copyright. | Angelos D. Keromytis | |
2001-06-19 | mop up after angelos | Theo de Raadt | |
2001-06-08 | Cut down on include files. | Angelos D. Keromytis | |
2001-05-30 | Match prototype. | Angelos D. Keromytis | |
2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell | |
2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis | |
information will be stored in the TDB. ok ho@ provos@ | |||
2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis | |
2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis | |
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs. | |||
2001-02-28 | If net.inet.ipip.allow is set to 2, don't check for loopback address | Angelos D. Keromytis | |
spoofing of encapsulated packets (useful for single-machinet testing of isakmpd) | |||
2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis | |
2000-08-04 | One parenthesis too many. | Angelos D. Keromytis | |
2000-08-04 | Worked out the logic (thanks to pt98asp@student.hk-r.se and | Angelos D. Keromytis | |
pt98kfr@student.hk-r.se -- I still don't know why rev1.5 didn't work). | |||
2000-08-03 | Back to the submitted patch -- this needs more investigation. | Angelos D. Keromytis | |
2000-08-03 | In fact, this is the correct behaviour (or I'm going crazy). | Angelos D. Keromytis | |
2000-08-03 | Correct handling of ip_off (askk@rsn.hk-r.se) | Angelos D. Keromytis | |
2000-06-20 | try to cope with AH6 with scoped address case better. | Jun-ichiro itojun Hagino | |
2000-01-21 | Typo. | Angelos D. Keromytis | |
2000-01-21 | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | Angelos D. Keromytis | |
affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input. |