| Age | Commit message (Expand) | Author |
|---|
| 2016-09-02 | Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add | Vincent Gross |
| 2015-09-10 | It is time to put inet6 on a diet. Use the flensing knife and cut out | Claudio Jeker |
| 2015-09-09 | Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats. | Martin Pieuchot |
| 2015-06-16 | Store a unique ID, an interface index, rather than a pointer to the | Martin Pieuchot |
| 2015-06-11 | Move away from using hzto(9); OK dlg | Mike Belopuhov |
| 2015-05-13 | test mbuf pointers against NULL not 0 | Jonathan Gray |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
| 2015-04-10 | replace the use of ifqueues for most input queues serviced by netisr | David Gwynne |
| 2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
| 2014-11-20 | Yet more #include de-duplication. | Kenneth R Westerback |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-09 | bpf code surgery / shuffling / simplification. | Henning Brauer |
| 2014-04-14 | "struct pkthdr" holds a routing table ID, not a routing domain one. | Martin Pieuchot |
| 2014-01-09 | bzero/bcmp -> memset/memcmp. ok matthew | Ted Unangst |
| 2013-11-11 | Replace most of our formating functions to convert IPv4/6 addresses from | Martin Pieuchot |
| 2013-10-23 | Remove the number of in_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
| 2013-06-01 | Fix typo backswards -> backwards. | Alexander Bluhm |
| 2013-04-24 | Instead of having various extern declarations for protocol variables, | Martin Pieuchot |
| 2013-04-11 | Remove the extern keyword from function declarations, document | Martin Pieuchot |
| 2013-04-10 | Remove various external variable declaration from sources files and | Martin Pieuchot |
| 2013-03-31 | Do not transfer diverted packets into IPsec processing. They should | Alexander Bluhm |
| 2013-03-28 | code that calls timeout functions should include timeout.h | Ted Unangst |
| 2013-03-28 | no need for a lot of code to include proc.h | Ted Unangst |
| 2012-09-26 | add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys) | Markus Friedl |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2011-12-22 | Fix RFC reference section | sperreault |
| 2011-12-21 | Compute mandatory UDP checksum for IPv6 packets | sperreault |
| 2011-12-19 | Fix checksum of UDP/TCP packets following RFC 3948. This is required for | YASUOKA Masahiko |
| 2011-04-26 | In ipsec_common_input() the packet can be either IPv4 or IPv6. So | Alexander Bluhm |
| 2011-04-06 | uncompress a packet with an IPcomp header only once; this prevents | Markus Friedl |
| 2011-04-03 | don't rely on implict net/route.h inclusion via pf, claudio ok | Henning Brauer |
| 2011-03-05 | The function pf_tag_packet() never fails. Remove a redundant check | Alexander Bluhm |
| 2010-12-21 | don't leak short packets; ok mikeb@ | Markus Friedl |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-07-01 | Allow to specify an alternative enc(4) interface for an SA. All | Reyk Floeter |
| 2010-06-29 | Replace enc(4) with a new implementation as a cloner device. We still | Reyk Floeter |
| 2010-04-20 | remove proc.h include from uvm_map.h. This has far reaching effects, as | Ted Unangst |
| 2010-01-02 | uninitalized protocol version for ipv6; from mickey; ok claudio | Markus Friedl |
| 2009-11-13 | Extend the protosw pr_ctlinput function to include the rdomain. This is | Claudio Jeker |
| 2009-08-09 | once again ipsec tries to be clever and plays fast, this time by | Henning Brauer |
| 2008-10-22 | #if INET => #ifdef INET | Marco Pfatschbacher |
| 2008-10-22 | filter ipv6 ipsec packets on enc0 (in and out), similar to ipv4; | Markus Friedl |
| 2008-08-26 | call pf_pkt_addr_changed instead of manually clearing the pf state key ptr | Henning Brauer |
| 2008-07-24 | ipsec is glued into the stack in a very weird way, violating all kinds | Henning Brauer |
| 2008-06-14 | make easier to read, found during a bug hunt earlier | Todd T. Fries |
