summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_output.c
AgeCommit message (Expand)Author
2000-06-21Fix gateway function; ok angelos@Oleg Safiullin
2000-06-20Big oops on my previous commit, broke gateway function; patch fromAngelos D. Keromytis
2000-06-18Oops on checking inp_tdb etc. (itojun@)Angelos D. Keromytis
2000-06-18sanity check: panic if AF_INET6 inpcb is passed to ip_outputJun-ichiro itojun Hagino
2000-06-18remove obsolete IP_DF handling from KAME tree (#if 0'ed all the time)Jun-ichiro itojun Hagino
2000-06-18for mcdonald-simple-ipsec-api get/setsockopt, variable size was mixed up.Jun-ichiro itojun Hagino
2000-06-17Change processing sequence:Angelos D. Keromytis
2000-06-01Use the cached entry for security requirements from the inp.Angelos D. Keromytis
2000-06-01Use ipsp_spd_lookup() in ip_output()Angelos D. Keromytis
2000-05-15parse IPv4 options more carefully. make boundary checks against everyJun-ichiro itojun Hagino
2000-05-04Bypass routes only worked for one packet, then they effectively became aNiklas Hallqvist
2000-04-13When fragmenting a packet, inherit the multicast and broadcast flags so thatArtur Grabowski
2000-03-30Set re_rt to NULL, so we don't double free.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-01-11Correct sa_require handling.Angelos D. Keromytis
2000-01-11Use default values when requesting dynamic VPNs.Angelos D. Keromytis
2000-01-10No need for extern definition of pfkeyv2_acquire()Angelos D. Keromytis
2000-01-09Transport port is in network order...Angelos D. Keromytis
1999-12-25Move the IPsec packet-processing loop to a separate routine, so we canAngelos D. Keromytis
1999-12-21Initialize variable.Angelos D. Keromytis
1999-12-18Fix kernel panic involving multicast packet (patch different from theAngelos D. Keromytis
1999-12-10Add code to allow for IPv6 IPsec destinations in IPv4 IPsec flows (e.g.,Angelos D. Keromytis
1999-12-08Fix debugging printf compilation.Angelos D. Keromytis
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
1999-12-06New ESP code that's v4 and v6 friendly.Angelos D. Keromytis
1999-12-04Address independence, IPv6 support, and the -local flag in ipsecadm isAngelos D. Keromytis
1999-11-04pfkeyv2 aquire should not happen when bypassing IPsec. Add missing splx().Hakan Olsson
1999-10-29Get rid of unnecessary third argument in *_output routines of IPsec.Angelos D. Keromytis
1999-10-29Remove unused third argument from ipe4_output()Angelos D. Keromytis
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-06-15handle multicast packets inside ipf too; darrenTheo de Raadt
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist
1999-05-14A new scalable IPsec SA expiration model.Niklas Hallqvist
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
1999-03-24Implement lifetime expiration notifications. Fix some typos. Remove statics.Niklas Hallqvist
1999-03-06Update IP pointer, when doing multiple transforms.Angelos D. Keromytis
1999-02-24Update copyright; remove a few annoying debugging printfs.Angelos D. Keromytis
1999-02-24Remove encap.h include; saner debugging printfs; fix buglets; work withAngelos D. Keromytis
1999-01-11Remove duplicate code.Angelos D. Keromytis
1999-01-08dont call ip_randomid() in htons().Niels Provos
1998-12-26make ip_id random but ensure that ids dont repeat for some period.Niels Provos
1998-08-02cleanup ipsec error handlingNiels Provos
1998-08-01more careful error handling, some simplification and beautification.Niels Provos
1998-07-29Proper handling of IP in IP and checksumming.Angelos D. Keromytis
1998-07-29Don't do checksumming unless we're doing IP-in-IP.Angelos D. Keromytis
1998-06-30remove unnecessary assignmentNiels Provos
1998-06-03request only auth in notify when vpn ipsec route is found with a differentNiels Provos
1998-05-24allow SAs with non-specified source addressNiels Provos
1998-05-24add support for Virtual Private Networks (VPN).Niels Provos