Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-10-10 | Missing m_pullup() and mbuf corruption. This potentially caused | Daniel Hartmeier | |
panic: m_copym0: m == 0 and not COPYALL and/or panic: m_copydata: null muf on bridges running pf with scrubbing enabled. Bug report, test vector and confirmation by Jon Morby. ok jason@, jasoni@ | |||
2002-06-24 | skip routing table lookup if multicasting/broadcasting and the outgoing | Jun-ichiro itojun Hagino | |
interface is specified by setsockopt. from freebsd4, sync with kame (it makes difference when you run routed with RIPv2 enabled - no need for 224/4 route) | |||
2002-06-04 | spaces to tabs, remove trailing whitespace | jasoni | |
2002-05-31 | respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos ok | Jun-ichiro itojun Hagino | |
2002-05-31 | Socket-related IPsec sockoptions --- cleanups etc. | Angelos D. Keromytis | |
2002-05-28 | kill register; ok deraadt@ | jasoni | |
2002-05-28 | Factor out IP fragmentation code into its own function so it can be | jasoni | |
reused. - ok jason@, dhartmei@ | |||
2002-03-15 | Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do things | Todd C. Miller | |
the ANSI way. | |||
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-01-23 | disable pmtu for ipsec when the sysctl says so; bug report cjkim2000@yahoo.com | Niels Provos | |
2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
ok dhartmei@, frantzen@ | |||
2001-11-24 | KNF | Theo de Raadt | |
2001-11-02 | fix multicast loopback checksums; goeran@cdg.chalmers.se, ok angelos | Theo de Raadt | |
2001-08-26 | Uninitialized variable. | Niklas Hallqvist | |
2001-08-22 | IPCOMP policy stuff missed the last time round | Niklas Hallqvist | |
2001-08-21 | Don't check for BYPASS options in PCB on ip_output/ip6_output --- this | Angelos D. Keromytis | |
is already done in ip_spd_lookup() | |||
2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-06-29 | move pf_test check to happen after checksum calculation - without | Bob Beck | |
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@) | |||
2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
okay dhartmei@, dugsong@ | |||
2001-06-27 | Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, depending | Angelos D. Keromytis | |
on how macros should be treated. Code by fgsch@, ok by me and itojun@ | |||
2001-06-27 | Add length to pkthdr.len directly. | Angelos D. Keromytis | |
2001-06-27 | Don't cache packets that hit policies -- we'll do that at the PCB for | Angelos D. Keromytis | |
local packets. | |||
2001-06-26 | no longer pass around **m | Theo de Raadt | |
2001-06-25 | If a PENDING_TDB tag is attached but no TDB is found, drop the packet. | Angelos D. Keromytis | |
2001-06-25 | Check the length of the tag (diagnostic) | Angelos D. Keromytis | |
2001-06-25 | Apply pending TDBs (as indicated by tags). This will be used to handle | Angelos D. Keromytis | |
the case of both the socket and system-wide IPsec policy specifying TDBs to be applied to the same packet. | |||
2001-06-25 | Don't double-clear M_PKTHDR/tags. | Angelos D. Keromytis | |
2001-06-25 | Remove unnecessary temporary variable. | Angelos D. Keromytis | |
2001-06-25 | Always defer output TCP checksumming until ip_output() (or hardware, | Angelos D. Keromytis | |
if it exists). Cuts down on code a bit, and we don't need to look at the routing entry at TCP. Based on NetBSD. UDP case to follow. | |||
2001-06-25 | put pf before ipsec processing. return error code and free mbuf chain | Niels Provos | |
2001-06-24 | make it compile w/o pf | Michael Shalayeff | |
2001-06-24 | Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum. | Angelos D. Keromytis | |
2001-06-24 | Import in_delayed_cksum() and convert to using it; also, don't do | Angelos D. Keromytis | |
TCP/UDP HW checksumming if doing IP fragmentation. From NetBSD | |||
2001-06-24 | Also reset input cached TDB. | Angelos D. Keromytis | |
2001-06-24 | Reset | Angelos D. Keromytis | |
2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding | |
Insane amounts of work done my dhartmei. Great work! | |||
2001-06-24 | check if ipsec processing increases packet size above allowable mtu. | Niels Provos | |
store correct mtu in routing table. | |||
2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt | |
Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment. | |||
2001-06-23 | Only use IP checksumming if the output interface is not in bridge | Angelos D. Keromytis | |
mode. We can't deal with that well. | |||
2001-06-23 | m_copyback(), not m_copydata() | Angelos D. Keromytis | |
2001-06-23 | Software-compute TCP/UDP checksum if we are going to do IPsec or if the | Angelos D. Keromytis | |
output interface does not support hardware checksumming. | |||
2001-06-23 | Placeholder, reminder to fix TCP/UDP checksumming right before doing IPsec. | Angelos D. Keromytis | |
2001-06-23 | Count input/output hardware-checksummed IP packets. | Angelos D. Keromytis | |
2001-06-23 | fix up mtu for routes and ongoing tcp connection when if mtu changes | Niels Provos | |
from FreeBSD; fixes pr/1878 | |||
2001-06-23 | TCP, UDP, IPv4 input hardware checksumming processing; also IPv4 | Angelos D. Keromytis | |
output hardware checksumming. Not tested yet, but should be done tonight. Remain to be solved: interactions with bridge, TCP/UDP output checksumming, interactions of TCP/UDP checksumming with routing changes. | |||
2001-06-19 | revert parts that were meant to be committed (June 12th commit) | jasoni | |
- ok angelos@ | |||
2001-06-14 | limited broadcast 255.255.255.255 was not recognized correctly, reported | Niels Provos | |
by crh@ubiqx.mn.org, fix from NetBSD; okay angelos@ | |||
2001-06-12 | IPsec-related socket options; these can be set/removed/retrieved, but | Angelos D. Keromytis | |
are not taken into consideration in anything just yet. | |||
2001-06-08 | Cut down on include files. | Angelos D. Keromytis | |