Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-06-25 | damn greeks desperate for commits... | Bob Beck | |
2001-06-25 | KNF | Angelos D. Keromytis | |
2001-06-25 | If a PENDING_TDB tag is attached but no TDB is found, drop the packet. | Angelos D. Keromytis | |
2001-06-25 | Build without IPSEC. | Artur Grabowski | |
2001-06-25 | Check the length of the tag (diagnostic) | Angelos D. Keromytis | |
2001-06-25 | Apply pending TDBs (as indicated by tags). This will be used to handle | Angelos D. Keromytis | |
the case of both the socket and system-wide IPsec policy specifying TDBs to be applied to the same packet. | |||
2001-06-25 | Copyright. | Angelos D. Keromytis | |
2001-06-25 | Don't double-clear M_PKTHDR/tags. | Angelos D. Keromytis | |
2001-06-25 | Defer output checksumming until ip_output() or hardware. | Angelos D. Keromytis | |
2001-06-25 | Remove unnecessary temporary variable. | Angelos D. Keromytis | |
2001-06-25 | Always defer output TCP checksumming until ip_output() (or hardware, | Angelos D. Keromytis | |
if it exists). Cuts down on code a bit, and we don't need to look at the routing entry at TCP. Based on NetBSD. UDP case to follow. | |||
2001-06-25 | put pf before ipsec processing. return error code and free mbuf chain | Niels Provos | |
2001-06-25 | Use in_cksum_phdr() rather than in_cksum() -- from NetBSD | Angelos D. Keromytis | |
2001-06-24 | More descriptive panic messages, sync with NetBSD | Angelos D. Keromytis | |
2001-06-24 | make it compile w/o pf | Michael Shalayeff | |
2001-06-24 | Import in_cksum_phdr() and in_cksum_addword() from NetBSD. | Angelos D. Keromytis | |
2001-06-24 | Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum. | Angelos D. Keromytis | |
2001-06-24 | Import in_delayed_cksum() and convert to using it; also, don't do | Angelos D. Keromytis | |
TCP/UDP HW checksumming if doing IP fragmentation. From NetBSD | |||
2001-06-24 | print mtu of tdb if discovered | Niels Provos | |
2001-06-24 | Remove printfs, fix comment typos. | Angelos D. Keromytis | |
2001-06-24 | Save tdb_remote_auth on the PCB on latching; also save information on | Angelos D. Keromytis | |
UDP PCB's if the socket is connected. | |||
2001-06-24 | Also reset input cached TDB. | Angelos D. Keromytis | |
2001-06-24 | Reset | Angelos D. Keromytis | |
2001-06-24 | use new timeouts for spd expirations (hmm cvs did not pick up the file); ho@ ok | Michael Shalayeff | |
2001-06-24 | use new timeouts for spd expirations; ho@ ok | Michael Shalayeff | |
2001-06-24 | Print TDBF_USEDTUNNEL in ipsp_kern() | Angelos D. Keromytis | |
2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding | |
Insane amounts of work done my dhartmei. Great work! | |||
2001-06-24 | take mtu from routing table | Niels Provos | |
2001-06-24 | check if ipsec processing increases packet size above allowable mtu. | Niels Provos | |
store correct mtu in routing table. | |||
2001-06-24 | path mtu discovery for ipsec. on receiving a need fragment icmp match | Niels Provos | |
against active tdb and store the ipsec header size corrected mtu | |||
2001-06-24 | remove whitespace | Niels Provos | |
2001-06-23 | Put some constants together and calculate max/min mtu based on those; | Federico G. Schwindt | |
jason@ ok. This should be moved to net, tho, it's not inet specific. | |||
2001-06-23 | Add comment on why checksum deferral is not useful in tcp_respond() | Angelos D. Keromytis | |
2001-06-23 | Clear the checksum flags after verification. Also, don't count | Angelos D. Keromytis | |
checksum errors as hardware checksum packets as well. | |||
2001-06-23 | Count input packets hardware-checksummed. | Angelos D. Keromytis | |
2001-06-23 | merge crypto/crypto{dev,}.h to crypto/cryptodev.h, to avoid name conflicts ↵ | Theo de Raadt | |
inside OpenSSL codebase | |||
2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt | |
Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment. | |||
2001-06-23 | Likewise, only use outgoing TCP/UDP hardware checksumming if the | Angelos D. Keromytis | |
interface is not in bridge mode. | |||
2001-06-23 | Only use IP checksumming if the output interface is not in bridge | Angelos D. Keromytis | |
mode. We can't deal with that well. | |||
2001-06-23 | m_copyback(), not m_copydata() | Angelos D. Keromytis | |
2001-06-23 | Software-compute TCP/UDP checksum if we are going to do IPsec or if the | Angelos D. Keromytis | |
output interface does not support hardware checksumming. | |||
2001-06-23 | Typo. | Angelos D. Keromytis | |
2001-06-23 | Prototype for in4_cksum() | Angelos D. Keromytis | |
2001-06-23 | Placeholder, reminder to fix TCP/UDP checksumming right before doing IPsec. | Angelos D. Keromytis | |
2001-06-23 | Keep stats on TCP/UDP hardware checksumming. | Angelos D. Keromytis | |
2001-06-23 | Count input/output hardware-checksummed IP packets. | Angelos D. Keromytis | |
2001-06-23 | Hardware checksumming stats. | Angelos D. Keromytis | |
2001-06-23 | TCP/UDP hardware checksumming. Untested, since txp dies when it tries | Angelos D. Keromytis | |
to compute the checksums. Still, it shouldn't affect anything. | |||
2001-06-23 | Having to update queue(3) for DLIST_* is a major PITA; thus, just use | Angelos D. Keromytis | |
SLIST and be done with it. | |||
2001-06-23 | Use DLIST for tags. | Angelos D. Keromytis | |