| Age | Commit message (Expand) | Author |
|---|
| 2017-05-18 | The function name ip4_input() is confusing as it also handles IPv6 | Alexander Bluhm |
| 2017-05-16 | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | Martin Pieuchot |
| 2017-04-06 | Replace bcopy with a simple assignment where both variables are | David Hill |
| 2017-01-20 | Kill recursive splsofnet()/splx() dances. | Martin Pieuchot |
| 2016-10-11 | Rename 'i' to 'hlen' for greater readability; ok millert, naddy | Mike Belopuhov |
| 2016-09-13 | avoid extensive mbuf allocation for IPsec by replacing m_inject(4) | Markus Friedl |
| 2016-02-28 | When IPsec UDP encapsulation is used for IPv6, the stack should | Mike Belopuhov |
| 2015-09-11 | Kill yet another argument to functions in IPv6. This time ip6_output's | Claudio Jeker |
| 2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | Theo de Raadt |
| 2015-06-11 | Move away from using hzto(9); OK dlg | Mike Belopuhov |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-04-21 | ip_output() using varargs always struck me as bizarre, esp since it's only | Henning Brauer |
| 2014-04-21 | we'll do fine without casting NULL to struct foo * / void * | Henning Brauer |
| 2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-08-03 | unbreak PMTU-discovery for AES-GCM; ok mikeb@ | Markus Friedl |
| 2013-04-10 | Remove various external variable declaration from sources files and | Martin Pieuchot |
| 2013-03-28 | code that calls timeout functions should include timeout.h | Ted Unangst |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2011-03-05 | The function pf_tag_packet() never fails. Remove a redundant check | Alexander Bluhm |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-01-10 | Fix two bugs in IPsec/HMAC-SHA2: | Markus Friedl |
| 2008-08-26 | we need to call pf_pkt_addr_changed here too. found by david | Henning Brauer |
| 2008-08-21 | Assign the ip and ip6 pointers in ipsp_process_packet() only if a | Alexander Bluhm |
| 2007-06-01 | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. | Henning Brauer |
| 2007-05-28 | double pf performance. | Henning Brauer |
| 2007-02-08 | - AH: when computing crypto checksum for output, massage source-routing | Jun-ichiro itojun Hagino |
| 2006-12-19 | TDBF_USEDTUNNEL flag manipulation was inside #ifdef INET. it applies | Jun-ichiro itojun Hagino |
| 2006-12-05 | do not install pmtu routes for transport mode SAs, as they do not | Markus Friedl |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2005-04-12 | handle PMTU for ipip SAs, too; ok hshoexer, cloder | Markus Friedl |
| 2004-09-24 | pmtu support for udpencap; ok hshoexer, ho | Markus Friedl |
| 2004-06-26 | Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok. | Hakan Olsson |
| 2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
| 2004-06-21 | don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@ | Markus Friedl |
| 2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl |
| 2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino |
| 2003-02-19 | add a counter for times ipcomp is skipped because the packet is below the | Jason Wright |
| 2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom |
| 2002-07-01 | Move mtod() after the m_pullup() --- noted by sam@errno.com (who seems | Angelos D. Keromytis |
| 2002-06-19 | Remove redundant address family check -- sam@errno.com | Angelos D. Keromytis |
| 2002-06-09 | whitespace | Jun-ichiro itojun Hagino |
| 2002-02-19 | IPsec is written ``IPsec'', not ``IPSec''. | Miod Vallat |
| 2001-12-06 | Use hzto() to handle overflow of (hz * timeout) cases --- when using | Angelos D. Keromytis |
| 2001-08-08 | Remove IPCOMP option, it's now part of IPSEC option. You still need to | Jean-Jacques Bernard-Gundol |
