Age | Commit message (Expand) | Author |
2001-06-27 | Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, depending | Angelos D. Keromytis |
2001-06-27 | Add length to pkthdr.len directly. | Angelos D. Keromytis |
2001-06-27 | Don't cache packets that hit policies -- we'll do that at the PCB for | Angelos D. Keromytis |
2001-06-26 | no longer pass around **m | Theo de Raadt |
2001-06-25 | If a PENDING_TDB tag is attached but no TDB is found, drop the packet. | Angelos D. Keromytis |
2001-06-25 | Check the length of the tag (diagnostic) | Angelos D. Keromytis |
2001-06-25 | Apply pending TDBs (as indicated by tags). This will be used to handle | Angelos D. Keromytis |
2001-06-25 | Don't double-clear M_PKTHDR/tags. | Angelos D. Keromytis |
2001-06-25 | Remove unnecessary temporary variable. | Angelos D. Keromytis |
2001-06-25 | Always defer output TCP checksumming until ip_output() (or hardware, | Angelos D. Keromytis |
2001-06-25 | put pf before ipsec processing. return error code and free mbuf chain | Niels Provos |
2001-06-24 | make it compile w/o pf | Michael Shalayeff |
2001-06-24 | Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum. | Angelos D. Keromytis |
2001-06-24 | Import in_delayed_cksum() and convert to using it; also, don't do | Angelos D. Keromytis |
2001-06-24 | Also reset input cached TDB. | Angelos D. Keromytis |
2001-06-24 | Reset | Angelos D. Keromytis |
2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding |
2001-06-24 | check if ipsec processing increases packet size above allowable mtu. | Niels Provos |
2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt |
2001-06-23 | Only use IP checksumming if the output interface is not in bridge | Angelos D. Keromytis |
2001-06-23 | m_copyback(), not m_copydata() | Angelos D. Keromytis |
2001-06-23 | Software-compute TCP/UDP checksum if we are going to do IPsec or if the | Angelos D. Keromytis |
2001-06-23 | Placeholder, reminder to fix TCP/UDP checksumming right before doing IPsec. | Angelos D. Keromytis |
2001-06-23 | Count input/output hardware-checksummed IP packets. | Angelos D. Keromytis |
2001-06-23 | fix up mtu for routes and ongoing tcp connection when if mtu changes | Niels Provos |
2001-06-23 | TCP, UDP, IPv4 input hardware checksumming processing; also IPv4 | Angelos D. Keromytis |
2001-06-19 | revert parts that were meant to be committed (June 12th commit) | jasoni |
2001-06-14 | limited broadcast 255.255.255.255 was not recognized correctly, reported | Niels Provos |
2001-06-12 | IPsec-related socket options; these can be set/removed/retrieved, but | Angelos D. Keromytis |
2001-06-08 | Cut down on include files. | Angelos D. Keromytis |
2001-06-05 | That debug message was just too chatty, even as a debug message :-) | Angelos D. Keromytis |
2001-05-30 | Update to match prototype. | Angelos D. Keromytis |
2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt |
2001-05-29 | Make sure packets that need crypto processing on the NIC don't escape | Angelos D. Keromytis |
2001-05-28 | Don't check IP_ENCAPSULATED. | Angelos D. Keromytis |
2001-05-27 | And clear the M_PKTHDR flag. | Angelos D. Keromytis |
2001-05-27 | Copy tags to first mbuf. | Angelos D. Keromytis |
2001-05-27 | Placeholders for the new socket options. | Angelos D. Keromytis |
2001-05-27 | Use the new IPsec tags. | Angelos D. Keromytis |
2001-05-20 | Record outgoing SA processing, do loop detection. | Angelos D. Keromytis |
2001-05-16 | No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok) | Hakan Olsson |
2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis |
2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis |
2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
2001-03-07 | More careful spl usage for the IPSEC case in ip_output(); from angelos@ | Aaron Campbell |
2000-12-03 | Fix fastroute-related panic, fixes PR 1541 (cas@trans-nt.com) | Angelos D. Keromytis |
2000-11-07 | initialize tdb pointer correctly, from Jean-Jacques.Bernard@hsc.fr | Niels Provos |
2000-10-25 | Do not null deref in the IPSEC+PMTU case; provos@ ok. Thanks to | Aaron Campbell |
2000-09-29 | Outgoing packets that hit IPsec will be IPF/IPNAT processed as well on | Angelos D. Keromytis |
2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |