| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2004-08-10 | replace in_pcbnotify with in_pcbhashlookup and avoid looping over | Markus Friedl | |
| all connections; ok dhartmei, canacar, mcbride | |||
| 2004-06-14 | spelling | Ryan Thomas McBride | |
| 2004-04-14 | with IPv6, udp checksum is mandatory. henning ok | Jun-ichiro itojun Hagino | |
| 2004-03-21 | fix udp checksum verification if ip options are present; | Markus Friedl | |
| report from Pyun via dhartmei@; ok mcbride@, dhartmei@ | |||
| 2004-02-17 | switch to sysctl_int_arr(); ok henning, deraadt | Markus Friedl | |
| 2004-01-07 | in_pcbnotify() now returns number of matches. | Markus Friedl | |
| 2003-12-21 | use CIRCLEQ* for pcb's; ok deraadt, henning, mcbride, with help from canacar | Markus Friedl | |
| 2003-12-10 | de-register. deraadt ok | Jun-ichiro itojun Hagino | |
| 2003-12-08 | Mbuf tag tcp and udp packets which are translated to localhost, and | Ryan Thomas McBride | |
| use the the presence of this tag to reverse the match order in in{6}_pcblookup_listen(). Some daemons (such as portmap) do a double bind, binding to both * and localhost in order to differentiate local from non-local connections, and potentially granting more privilege to local ones. This change ensures that redirected connections to localhost do not appear local to such a daemon. Bulk of changes from dhartmei@, some changes markus@ ok dhartmei@ deraadt@ | |||
| 2003-12-02 | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | Markus Friedl | |
| ok deraadt@ | |||
| 2003-11-04 | add in(6)_pcblookup_listen() and replace all calls to in_pcblookup() | Markus Friedl | |
| with either in(6)_pcbhashlookup() or in(6)_pcblookup_listen(); in_pcblookup is now only used by bind(2); speeds up pcb lookup for listening sockets; from Claudio Jeker | |||
| 2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino | |
| (please test, especially PF portion) | |||
| 2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
| rescinded 22 July 1999. Proofed by myself and Theo. | |||
| 2003-05-30 | missing #ifdef INET6. fries found it | Jun-ichiro itojun Hagino | |
| 2003-05-29 | use m_pulldown instead of m_pullup2. enable support for IPv6 jumbogram. | Jun-ichiro itojun Hagino | |
| markus & art ok | |||
| 2003-05-12 | Nuke a whole bunch of commons; ok tedu (still more to come *sigh*) | Jason Wright | |
| 2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom | |
| NULL to full 64 bits on a 64 bit address system. Soultion is to add a (void *) cast before NULL. This makes a 64 bit MIPS kernel work and will probably help future 64 bit ports as well. OK from art@ | |||
| 2002-08-19 | be consistent with other KAME source, use "ip6" for ip6_hdr, not "ipv6". | Jun-ichiro itojun Hagino | |
| 2002-06-28 | undo recent changes; they still crash for people (dhclient this time). | Theo de Raadt | |
| This is a bullshit process. Test your shit before you toss it into the tree. | |||
| 2002-06-26 | Check for associated socket. | Angelos D. Keromytis | |
| 2002-06-26 | A bit more paranoid. | Angelos D. Keromytis | |
| 2002-06-25 | Ifdef the function proto as well. | Angelos D. Keromytis | |
| 2002-06-25 | Make udp_input() a bit more readable by farming out the IPsec input | Angelos D. Keromytis | |
| policy checking to a separate routine. Also, add missing checks for multicast sockets, pointed out by sam@errno.com | |||
| 2002-06-20 | minor indent cleanup while reading code | Theo de Raadt | |
| 2002-06-09 | whitespace | Jun-ichiro itojun Hagino | |
| 2002-05-31 | Socket-specific IPsec policy. | Angelos D. Keromytis | |
| 2002-03-15 | Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do things | Todd C. Miller | |
| the ANSI way. | |||
| 2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
| 2001-06-25 | Defer output checksumming until ip_output() or hardware. | Angelos D. Keromytis | |
| 2001-06-25 | Use in_cksum_phdr() rather than in_cksum() -- from NetBSD | Angelos D. Keromytis | |
| 2001-06-24 | Remove printfs, fix comment typos. | Angelos D. Keromytis | |
| 2001-06-24 | Save tdb_remote_auth on the PCB on latching; also save information on | Angelos D. Keromytis | |
| UDP PCB's if the socket is connected. | |||
| 2001-06-23 | Clear the checksum flags after verification. Also, don't count | Angelos D. Keromytis | |
| checksum errors as hardware checksum packets as well. | |||
| 2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt | |
| Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment. | |||
| 2001-06-23 | Likewise, only use outgoing TCP/UDP hardware checksumming if the | Angelos D. Keromytis | |
| interface is not in bridge mode. | |||
| 2001-06-23 | Keep stats on TCP/UDP hardware checksumming. | Angelos D. Keromytis | |
| 2001-06-23 | TCP/UDP hardware checksumming. Untested, since txp dies when it tries | Angelos D. Keromytis | |
| to compute the checksums. Still, it shouldn't affect anything. | |||
| 2001-06-23 | Initialize only if no hardware checksumming. | Angelos D. Keromytis | |
| 2001-06-23 | TCP, UDP, IPv4 input hardware checksumming processing; also IPv4 | Angelos D. Keromytis | |
| output hardware checksumming. Not tested yet, but should be done tonight. Remain to be solved: interactions with bridge, TCP/UDP output checksumming, interactions of TCP/UDP checksumming with routing changes. | |||
| 2001-06-19 | mop up after angelos | Theo de Raadt | |
| 2001-06-08 | Cut down on include files. | Angelos D. Keromytis | |
| 2001-06-05 | repair copyright notices for NRL & cmetz; cmetz | Theo de Raadt | |
| 2001-05-27 | Remove unnecessary comment. | Angelos D. Keromytis | |
| 2001-05-27 | Use the new IPsec tags. | Angelos D. Keromytis | |
| 2001-05-20 | Use packet tags instead of tdbi. | Angelos D. Keromytis | |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell | |
| 2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis | |
| security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs. | |||
| 2001-03-06 | Move the test for bogus packet length in udp_output() closer to the top of | Aaron Campbell | |
| the function. Previously it was possible for us to get stuck in splsoftnet() under certain situations. Bug reported by hunter@dg.net.ua, fix by me ok'd by deraadt@, provos@, angelos@. | |||
| 2001-02-16 | remove IPv6 case from udp_output. now we have separate udp6_output. | Jun-ichiro itojun Hagino | |
| 2001-02-16 | pull in new pcb notification code from kame. better handling of scope address. | Jun-ichiro itojun Hagino | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |