| Age | Commit message (Expand) | Author |
|---|
| 2002-01-23 | disable pmtu for ipsec when the sysctl says so; bug report cjkim2000@yahoo.com | Niels Provos |
| 2001-12-06 | Use hzto() to handle overflow of (hz * timeout) cases --- when using | Angelos D. Keromytis |
| 2001-08-09 | Don't check the source address on the packet vs. the one on the SA, as | Angelos D. Keromytis |
| 2001-08-08 | Remove IPCOMP option, it's now part of IPSEC option. You still need to | Jean-Jacques Bernard-Gundol |
| 2001-08-07 | enable ah & esp by default, now that we trust the code more | Theo de Raadt |
| 2001-07-06 | Don't use enc0 interface for IPComp. angelos@ ok. | Jean-Jacques Bernard-Gundol |
| 2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol |
| 2001-06-26 | KNF | Angelos D. Keromytis |
| 2001-06-25 | Copyright. | Angelos D. Keromytis |
| 2001-06-24 | path mtu discovery for ipsec. on receiving a need fragment icmp match | Niels Provos |
| 2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt |
| 2001-06-19 | mop up after angelos | Theo de Raadt |
| 2001-06-08 | Trim include files. | Angelos D. Keromytis |
| 2001-06-05 | Add a few DPRINTF()'s | Angelos D. Keromytis |
| 2001-05-29 | Record last use time for SAs. | Angelos D. Keromytis |
| 2001-05-27 | If we are passed a packet tag, it's an IPSEC_IN_CRYPTO_DONE so convert | Angelos D. Keromytis |
| 2001-05-27 | Forgot to convert this tag. | Angelos D. Keromytis |
| 2001-05-20 | Use packet tags to signal input IPsec processing to upper layer protocols. | Angelos D. Keromytis |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell |
| 2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis |
| 2001-03-30 | Protect the IF_XXX macros in the callback routines with splimp(). Doh! | Angelos D. Keromytis |
| 2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
| 2001-03-15 | convert SA expirations to the new timeouts. | Michael Shalayeff |
| 2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis |
| 2000-09-17 | Drop dubious ESP/AH packets without crashing (thanks to dr@kyx.net and | Angelos D. Keromytis |
| 2000-07-11 | Correctly handle ip_off; angelos@ | Todd C. Miller |
| 2000-06-20 | do not play with rcvif, if the traffic is non-IPv4. | Jun-ichiro itojun Hagino |
| 2000-06-19 | correct header chasing code. take care of AH length. | Jun-ichiro itojun Hagino |
| 2000-06-18 | Arguments. | Angelos D. Keromytis |
| 2000-06-18 | Use ip6_sprintf() rather than the home-cooked inet6_ntoa4() | Angelos D. Keromytis |
| 2000-06-18 | IPv6 AH/ESP support, inbound side only. tested with KAME. | Jun-ichiro itojun Hagino |
| 2000-06-18 | Remove outdated comment. | Angelos D. Keromytis |
| 2000-03-29 | Be consistent about packet properties. | Angelos D. Keromytis |
| 2000-03-29 | Fix problem with TCP/UDP and ACLs. | Angelos D. Keromytis |
| 2000-03-29 | Minor cleanup. | Angelos D. Keromytis |
| 2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis |
| 2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino |
| 2000-01-27 | Merge "old" and "new" ESP and AH in two files (one for each). | Angelos D. Keromytis |
| 2000-01-25 | Ok, so setsoftnet is md. | Marc Espie |
| 2000-01-15 | Remove unnecessary definition. | Angelos D. Keromytis |
| 2000-01-15 | Add function prototype. | Angelos D. Keromytis |
| 2000-01-15 | Change function type to non-static. | Angelos D. Keromytis |
| 2000-01-10 | 1) Setup a silent TDB expiration for embryonic SAs. | Angelos D. Keromytis |
| 2000-01-10 | Fix tdbi setup for TCP and UDP packets. | Angelos D. Keromytis |
| 2000-01-10 | Typo. | Angelos D. Keromytis |
| 2000-01-10 | Quick-drop packets (before real processing) if ingress filtering is on | Angelos D. Keromytis |
| 2000-01-10 | Fix error message. | Angelos D. Keromytis |
| 2000-01-09 | Add ingress ACL for IPsec: after being processed, IPsec packets are | Angelos D. Keromytis |
| 2000-01-08 | Fix serious crash-and-burn bug I introduced with last revision. | Angelos D. Keromytis |
| 2000-01-03 | Chase down the IPv6 header chain to find the right place swap the Next | Angelos D. Keromytis |
