Age | Commit message (Expand) | Author |
2010-09-08 | Return EACCES when pf_test() blocks a packet in ip_output(). This allows | Claudio Jeker |
2010-08-13 | when sending a fragmented packet, dont check if the interfaces send queue | David Gwynne |
2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
2010-07-03 | Fix the naming of interfaces and variables for rdomains and rtables | Philip Guenthe |
2010-07-02 | m_copyback can fail to allocate memory, but is a void fucntion so gymnastics | Bret Lambert |
2010-07-01 | Allow to specify an alternative enc(4) interface for an SA. All | Reyk Floeter |
2010-06-29 | Replace enc(4) with a new implementation as a cloner device. We still | Reyk Floeter |
2010-05-07 | Start cleaning up the mess called rtalloc*. Kill rtalloc2, make rtalloc1 | Claudio Jeker |
2010-01-13 | Double and in comment. | Claudio Jeker |
2010-01-12 | Allow the queueing of multiple fragments on virtual interfaces with a | Bob Beck |
2009-12-23 | The process's rdomain should be, well, per-process and not per-rthread, | Philip Guenthe |
2009-12-11 | Two cases of IPSEC getsockopt() returning two bytes of uninitialialized | Theo de Raadt |
2009-11-27 | Add setrdomain() and getrdomain() system calls. Committing now to | Philip Guenthe |
2009-11-20 | NULL dereference in IPV6_PORTRANGE and IP_IPSEC_*, found by Clement LECIGNE, | Philip Guenthe |
2009-11-13 | Packets generated by ip_fragment() need to inherit the rdomain from the | Claudio Jeker |
2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
2009-10-28 | *NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL, | Theo de Raadt |
2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
2009-01-30 | When don't-fragment packets need to get fragemnted some code tries to | Claudio Jeker |
2009-01-29 | Always zero the IP checksum field for packets and packet fragments | Christian Weisgerber |
2008-05-09 | IP_RECVDSTPORT, allows you to get the destination port of UDP datagrams | Markus Friedl |
2007-10-29 | MALLOC/FREE -> malloc/free | Charles Longeau |
2007-09-18 | allow 4095 instead of 20 multicast group memberships per socket (you need | Markus Friedl |
2007-07-20 | Remove inm_ifp from struct in_multi -- caching struct ifnet is dangerous | Claudio Jeker |
2007-05-30 | no need to declare extern ipsec_in_use, we get it via ip_ipsp.h | Henning Brauer |
2007-05-29 | gain another 5+% in ip forwarding performance. | Henning Brauer |
2007-05-27 | -static | David Gwynne |
2006-12-05 | do not install pmtu routes for transport mode SAs, as they do not | Markus Friedl |
2006-12-01 | rangecheck ttl on IP_TTL, collected dust in my tree | Henning Brauer |
2006-10-11 | implement IP_MINTTL socket option fo tcp sockets | Henning Brauer |
2006-10-11 | implement IP_RECVTTL socket option. | Henning Brauer |
2006-06-18 | Add support for equal-cost multipath IP. | Christopher Pascoe |
2006-06-06 | Put mrouting enable flag inside the right ifdef. If you change files | Theo de Raadt |
2006-05-29 | Make savecontrol functions more generic and use them now for raw IP too. | Claudio Jeker |
2006-05-26 | rename jumbo mtu to if_hardmtu; ok brad reyk | Theo de Raadt |
2006-03-05 | Use more queue macros rather than doing it by hand; ok otto@ krw@ | Miod Vallat |
2006-03-05 | revert unrelated change that snuck into the last commit. | Brad Smith |
2006-03-04 | With the exception of two other small uncommited diffs this moves | Brad Smith |
2005-10-05 | Add multicast routing to GENERIC. | Esben Norby |
2005-06-10 | getsockopt(): allocate a mbuf cluster for large ipsec credentials | Markus Friedl |
2005-05-27 | Experimental support for opportunitic use of jumbograms where only some hosts | Ryan Thomas McBride |
2005-04-25 | csum -> csum_flags | Brad Smith |
2005-01-04 | restrict forwarding to ipsec processed traffic of ip.forwarding==2 | Markus Friedl |
2004-11-10 | Add some (ifp != NULL) checks to ip_fragment() so it can be used even if there | Ryan Thomas McBride |
2004-06-22 | Pull the plug on source-based routing until remaining bugs are eradicated. | Cedric Berger |
2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
2004-06-21 | Get rid of pf_test_eh() wrapper. | Ryan Thomas McBride |
2004-06-21 | don't leak ipsec pmtu routes; with mpf@ | Markus Friedl |
2004-06-06 | extend routing table to be able to match and route packets based on | Cedric Berger |