summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_output.c
AgeCommit message (Expand)Author
2001-05-30Update to match prototype.Angelos D. Keromytis
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
2001-05-29Make sure packets that need crypto processing on the NIC don't escapeAngelos D. Keromytis
2001-05-28Don't check IP_ENCAPSULATED.Angelos D. Keromytis
2001-05-27And clear the M_PKTHDR flag.Angelos D. Keromytis
2001-05-27Copy tags to first mbuf.Angelos D. Keromytis
2001-05-27Placeholders for the new socket options.Angelos D. Keromytis
2001-05-27Use the new IPsec tags.Angelos D. Keromytis
2001-05-20Record outgoing SA processing, do loop detection.Angelos D. Keromytis
2001-05-16No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok)Hakan Olsson
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-07More careful spl usage for the IPSEC case in ip_output(); from angelos@Aaron Campbell
2000-12-03Fix fastroute-related panic, fixes PR 1541 (cas@trans-nt.com)Angelos D. Keromytis
2000-11-07initialize tdb pointer correctly, from Jean-Jacques.Bernard@hsc.frNiels Provos
2000-10-25Do not null deref in the IPSEC+PMTU case; provos@ ok. Thanks toAaron Campbell
2000-09-29Outgoing packets that hit IPsec will be IPF/IPNAT processed as well onAngelos D. Keromytis
2000-09-19Lots and lots of changes.Angelos D. Keromytis
2000-09-18Path MTU discovery based on NetBSD but with the decision to use the DFNiels Provos
2000-07-29Don't set the source IP address if doing multicast; this is a quickAngelos D. Keromytis
2000-06-21Fix gateway function; ok angelos@Oleg Safiullin
2000-06-20Big oops on my previous commit, broke gateway function; patch fromAngelos D. Keromytis
2000-06-18Oops on checking inp_tdb etc. (itojun@)Angelos D. Keromytis
2000-06-18sanity check: panic if AF_INET6 inpcb is passed to ip_outputJun-ichiro itojun Hagino
2000-06-18remove obsolete IP_DF handling from KAME tree (#if 0'ed all the time)Jun-ichiro itojun Hagino
2000-06-18for mcdonald-simple-ipsec-api get/setsockopt, variable size was mixed up.Jun-ichiro itojun Hagino
2000-06-17Change processing sequence:Angelos D. Keromytis
2000-06-01Use the cached entry for security requirements from the inp.Angelos D. Keromytis
2000-06-01Use ipsp_spd_lookup() in ip_output()Angelos D. Keromytis
2000-05-15parse IPv4 options more carefully. make boundary checks against everyJun-ichiro itojun Hagino
2000-05-04Bypass routes only worked for one packet, then they effectively became aNiklas Hallqvist
2000-04-13When fragmenting a packet, inherit the multicast and broadcast flags so thatArtur Grabowski
2000-03-30Set re_rt to NULL, so we don't double free.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-01-11Correct sa_require handling.Angelos D. Keromytis
2000-01-11Use default values when requesting dynamic VPNs.Angelos D. Keromytis
2000-01-10No need for extern definition of pfkeyv2_acquire()Angelos D. Keromytis
2000-01-09Transport port is in network order...Angelos D. Keromytis
1999-12-25Move the IPsec packet-processing loop to a separate routine, so we canAngelos D. Keromytis
1999-12-21Initialize variable.Angelos D. Keromytis
1999-12-18Fix kernel panic involving multicast packet (patch different from theAngelos D. Keromytis
1999-12-10Add code to allow for IPv6 IPsec destinations in IPv4 IPsec flows (e.g.,Angelos D. Keromytis
1999-12-08Fix debugging printf compilation.Angelos D. Keromytis
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
1999-12-06New ESP code that's v4 and v6 friendly.Angelos D. Keromytis
1999-12-04Address independence, IPv6 support, and the -local flag in ipsecadm isAngelos D. Keromytis
1999-11-04pfkeyv2 aquire should not happen when bypassing IPsec. Add missing splx().Hakan Olsson
1999-10-29Get rid of unnecessary third argument in *_output routines of IPsec.Angelos D. Keromytis
1999-10-29Remove unused third argument from ipe4_output()Angelos D. Keromytis