Age | Commit message (Expand) | Author |
2001-05-30 | Update to match prototype. | Angelos D. Keromytis |
2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt |
2001-05-29 | Make sure packets that need crypto processing on the NIC don't escape | Angelos D. Keromytis |
2001-05-28 | Don't check IP_ENCAPSULATED. | Angelos D. Keromytis |
2001-05-27 | And clear the M_PKTHDR flag. | Angelos D. Keromytis |
2001-05-27 | Copy tags to first mbuf. | Angelos D. Keromytis |
2001-05-27 | Placeholders for the new socket options. | Angelos D. Keromytis |
2001-05-27 | Use the new IPsec tags. | Angelos D. Keromytis |
2001-05-20 | Record outgoing SA processing, do loop detection. | Angelos D. Keromytis |
2001-05-16 | No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok) | Hakan Olsson |
2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis |
2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis |
2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
2001-03-07 | More careful spl usage for the IPSEC case in ip_output(); from angelos@ | Aaron Campbell |
2000-12-03 | Fix fastroute-related panic, fixes PR 1541 (cas@trans-nt.com) | Angelos D. Keromytis |
2000-11-07 | initialize tdb pointer correctly, from Jean-Jacques.Bernard@hsc.fr | Niels Provos |
2000-10-25 | Do not null deref in the IPSEC+PMTU case; provos@ ok. Thanks to | Aaron Campbell |
2000-09-29 | Outgoing packets that hit IPsec will be IPF/IPNAT processed as well on | Angelos D. Keromytis |
2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |
2000-09-18 | Path MTU discovery based on NetBSD but with the decision to use the DF | Niels Provos |
2000-07-29 | Don't set the source IP address if doing multicast; this is a quick | Angelos D. Keromytis |
2000-06-21 | Fix gateway function; ok angelos@ | Oleg Safiullin |
2000-06-20 | Big oops on my previous commit, broke gateway function; patch from | Angelos D. Keromytis |
2000-06-18 | Oops on checking inp_tdb etc. (itojun@) | Angelos D. Keromytis |
2000-06-18 | sanity check: panic if AF_INET6 inpcb is passed to ip_output | Jun-ichiro itojun Hagino |
2000-06-18 | remove obsolete IP_DF handling from KAME tree (#if 0'ed all the time) | Jun-ichiro itojun Hagino |
2000-06-18 | for mcdonald-simple-ipsec-api get/setsockopt, variable size was mixed up. | Jun-ichiro itojun Hagino |
2000-06-17 | Change processing sequence: | Angelos D. Keromytis |
2000-06-01 | Use the cached entry for security requirements from the inp. | Angelos D. Keromytis |
2000-06-01 | Use ipsp_spd_lookup() in ip_output() | Angelos D. Keromytis |
2000-05-15 | parse IPv4 options more carefully. make boundary checks against every | Jun-ichiro itojun Hagino |
2000-05-04 | Bypass routes only worked for one packet, then they effectively became a | Niklas Hallqvist |
2000-04-13 | When fragmenting a packet, inherit the multicast and broadcast flags so that | Artur Grabowski |
2000-03-30 | Set re_rt to NULL, so we don't double free. | Angelos D. Keromytis |
2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis |
2000-01-11 | Correct sa_require handling. | Angelos D. Keromytis |
2000-01-11 | Use default values when requesting dynamic VPNs. | Angelos D. Keromytis |
2000-01-10 | No need for extern definition of pfkeyv2_acquire() | Angelos D. Keromytis |
2000-01-09 | Transport port is in network order... | Angelos D. Keromytis |
1999-12-25 | Move the IPsec packet-processing loop to a separate routine, so we can | Angelos D. Keromytis |
1999-12-21 | Initialize variable. | Angelos D. Keromytis |
1999-12-18 | Fix kernel panic involving multicast packet (patch different from the | Angelos D. Keromytis |
1999-12-10 | Add code to allow for IPv6 IPsec destinations in IPv4 IPsec flows (e.g., | Angelos D. Keromytis |
1999-12-08 | Fix debugging printf compilation. | Angelos D. Keromytis |
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino |
1999-12-06 | New ESP code that's v4 and v6 friendly. | Angelos D. Keromytis |
1999-12-04 | Address independence, IPv6 support, and the -local flag in ipsecadm is | Angelos D. Keromytis |
1999-11-04 | pfkeyv2 aquire should not happen when bypassing IPsec. Add missing splx(). | Hakan Olsson |
1999-10-29 | Get rid of unnecessary third argument in *_output routines of IPsec. | Angelos D. Keromytis |
1999-10-29 | Remove unused third argument from ipe4_output() | Angelos D. Keromytis |