summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_output.c
AgeCommit message (Collapse)Author
1997-10-02conditional error loggingTheo de Raadt
1997-09-28log() needs a \nTheo de Raadt
1997-08-26indentTheo de Raadt
1997-08-04No more crashes because of this bug (double m_freem(), essentially).Angelos D. Keromytis
1997-07-31some indentation stuffTheo de Raadt
1997-07-27expiration messages, fixes, updates, all sorts of thingsNiklas Hallqvist
1997-07-18enablespi/disablespi in encap + print spi's in hostorderNiels Provos
1997-07-14routes with zero spi can be used to avoid ipsec processingNiels Provos
1997-07-11put old esp/ah and new esp/ah in different files.Niels Provos
generalised way of handling transforms.
1997-07-01major restructuringNiels Provos
1997-06-25hard and soft limits for SPI's per absolute timer, relative since establish,Niels Provos
relative since first use timers, packet and byte counters. notify key mgmt on soft limits. key mgmt can now specify limits. new encap messages: EMT_RESERVESPI, EMT_ENABLESPI, EMT_DISABLESPI
1997-06-24handle IP options in AH + allow IP options in outgoing encapsulated packetsNiels Provos
+ usage counters for later use with keymanagement processes
1997-06-16swap labels; adam@math.tau.ac.ilTheo de Raadt
1997-03-02Need to get a new pointer for the IP header after doing a pullup on the mbufThorsten Lockert
1997-03-02Cosmetic changes.Angelos D. Keromytis
1997-02-28Moved IPsec socket state to the PCB.Angelos D. Keromytis
1997-02-28IPsec socket API hooks are in.Angelos D. Keromytis
1997-02-20IPSEC package by John Ioannidis and Angelos D. Keromytis. Written inTheo de Raadt
Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz
1996-07-29From FreeBSD (with slightly different sysctl names):Jason Downs
"... Allow the user to nominate one of three ranges of port numbers as candidates for selecting a local address to replace a zero port number. The ranges are selected via a setsockopt(s, IPPROTO_IP, IP_PORTRANGE, &arg) call. The three ranges are: default, high (to bypass firewalls) and low (to get a port below 1024). The default and high port ranges are sysctl settable under sysctl net.inet.ip.portrange.* [net.inet.ip.portfirst, net.inet.ip.portlast, net.inet.ip.porthifirst, and net.inet.ip.porthilast currently in OpenBSD.] This code also fixes a potential deadlock if the system accidently ran out of local port addresses. It'd drop into an infinite while loop. The secure port selection (for root) should reduce overheads and increase reliability of rlogin/rlogind/rsh/rshd if they are modified to take advantage of it."
1996-03-04Initial commit of NetBSD 960217 netiso.Michael Shalayeff
all the rest is the fixes to the import by Niklas.
1996-03-03From NetBSD: 960217 mergeNiklas Hallqvist
1996-01-25IP filter 3.0.1dm
1996-01-07from beurton@fnet.fr: Darren Reed's IP filterdm
1995-10-18initial import of NetBSD treeTheo de Raadt