summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_input.c
AgeCommit message (Expand)Author
2000-09-17Drop dubious ESP/AH packets without crashing (thanks to dr@kyx.net andAngelos D. Keromytis
2000-07-11Correctly handle ip_off; angelos@Todd C. Miller
2000-06-20do not play with rcvif, if the traffic is non-IPv4.Jun-ichiro itojun Hagino
2000-06-19correct header chasing code. take care of AH length.Jun-ichiro itojun Hagino
2000-06-18Arguments.Angelos D. Keromytis
2000-06-18Use ip6_sprintf() rather than the home-cooked inet6_ntoa4()Angelos D. Keromytis
2000-06-18IPv6 AH/ESP support, inbound side only. tested with KAME.Jun-ichiro itojun Hagino
2000-06-18Remove outdated comment.Angelos D. Keromytis
2000-03-29Be consistent about packet properties.Angelos D. Keromytis
2000-03-29Fix problem with TCP/UDP and ACLs.Angelos D. Keromytis
2000-03-29Minor cleanup.Angelos D. Keromytis
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
2000-01-25Ok, so setsoftnet is md.Marc Espie
2000-01-15Remove unnecessary definition.Angelos D. Keromytis
2000-01-15Add function prototype.Angelos D. Keromytis
2000-01-15Change function type to non-static.Angelos D. Keromytis
2000-01-101) Setup a silent TDB expiration for embryonic SAs.Angelos D. Keromytis
2000-01-10Fix tdbi setup for TCP and UDP packets.Angelos D. Keromytis
2000-01-10Typo.Angelos D. Keromytis
2000-01-10Quick-drop packets (before real processing) if ingress filtering is onAngelos D. Keromytis
2000-01-10Fix error message.Angelos D. Keromytis
2000-01-09Add ingress ACL for IPsec: after being processed, IPsec packets areAngelos D. Keromytis
2000-01-08Fix serious crash-and-burn bug I introduced with last revision.Angelos D. Keromytis
2000-01-03Chase down the IPv6 header chain to find the right place swap the NextAngelos D. Keromytis
2000-01-02Move the requeueing logic from ipsec_input() to ah_input() andAngelos D. Keromytis
2000-01-02Change ipsec_input() to return error.Angelos D. Keromytis
1999-12-31fix IPv6 ipsec template lossage.Jun-ichiro itojun Hagino
1999-12-25Change some function prototypes, dont unnecessarily initialize someAngelos D. Keromytis
1999-12-09So I was lying...unify ESP and AH wrapper-input processing. The newAngelos D. Keromytis