summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2001-06-25damn greeks desperate for commits...Bob Beck
2001-06-25KNFAngelos D. Keromytis
2001-06-25If a PENDING_TDB tag is attached but no TDB is found, drop the packet.Angelos D. Keromytis
2001-06-25Build without IPSEC.Artur Grabowski
2001-06-25Check the length of the tag (diagnostic)Angelos D. Keromytis
2001-06-25Apply pending TDBs (as indicated by tags). This will be used to handleAngelos D. Keromytis
the case of both the socket and system-wide IPsec policy specifying TDBs to be applied to the same packet.
2001-06-25Copyright.Angelos D. Keromytis
2001-06-25Don't double-clear M_PKTHDR/tags.Angelos D. Keromytis
2001-06-25Defer output checksumming until ip_output() or hardware.Angelos D. Keromytis
2001-06-25Remove unnecessary temporary variable.Angelos D. Keromytis
2001-06-25Always defer output TCP checksumming until ip_output() (or hardware,Angelos D. Keromytis
if it exists). Cuts down on code a bit, and we don't need to look at the routing entry at TCP. Based on NetBSD. UDP case to follow.
2001-06-25put pf before ipsec processing. return error code and free mbuf chainNiels Provos
2001-06-25Use in_cksum_phdr() rather than in_cksum() -- from NetBSDAngelos D. Keromytis
2001-06-24More descriptive panic messages, sync with NetBSDAngelos D. Keromytis
2001-06-24make it compile w/o pfMichael Shalayeff
2001-06-24Import in_cksum_phdr() and in_cksum_addword() from NetBSD.Angelos D. Keromytis
2001-06-24Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum.Angelos D. Keromytis
2001-06-24Import in_delayed_cksum() and convert to using it; also, don't doAngelos D. Keromytis
TCP/UDP HW checksumming if doing IP fragmentation. From NetBSD
2001-06-24print mtu of tdb if discoveredNiels Provos
2001-06-24Remove printfs, fix comment typos.Angelos D. Keromytis
2001-06-24Save tdb_remote_auth on the PCB on latching; also save information onAngelos D. Keromytis
UDP PCB's if the socket is connected.
2001-06-24Also reset input cached TDB.Angelos D. Keromytis
2001-06-24ResetAngelos D. Keromytis
2001-06-24use new timeouts for spd expirations (hmm cvs did not pick up the file); ho@ okMichael Shalayeff
2001-06-24use new timeouts for spd expirations; ho@ okMichael Shalayeff
2001-06-24Print TDBF_USEDTUNNEL in ipsp_kern()Angelos D. Keromytis
2001-06-24Initial import of pf, an all-new ipf-compatable packet filter.Kjell Wooding
Insane amounts of work done my dhartmei. Great work!
2001-06-24take mtu from routing tableNiels Provos
2001-06-24check if ipsec processing increases packet size above allowable mtu.Niels Provos
store correct mtu in routing table.
2001-06-24path mtu discovery for ipsec. on receiving a need fragment icmp matchNiels Provos
against active tdb and store the ipsec header size corrected mtu
2001-06-24remove whitespaceNiels Provos
2001-06-23Put some constants together and calculate max/min mtu based on those;Federico G. Schwindt
jason@ ok. This should be moved to net, tho, it's not inet specific.
2001-06-23Add comment on why checksum deferral is not useful in tcp_respond()Angelos D. Keromytis
2001-06-23Clear the checksum flags after verification. Also, don't countAngelos D. Keromytis
checksum errors as hardware checksum packets as well.
2001-06-23Count input packets hardware-checksummed.Angelos D. Keromytis
2001-06-23merge crypto/crypto{dev,}.h to crypto/cryptodev.h, to avoid name conflicts ↵Theo de Raadt
inside OpenSSL codebase
2001-06-23Remove unneeded ip_id convertions.Federico G. Schwindt
Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment.
2001-06-23Likewise, only use outgoing TCP/UDP hardware checksumming if theAngelos D. Keromytis
interface is not in bridge mode.
2001-06-23Only use IP checksumming if the output interface is not in bridgeAngelos D. Keromytis
mode. We can't deal with that well.
2001-06-23m_copyback(), not m_copydata()Angelos D. Keromytis
2001-06-23Software-compute TCP/UDP checksum if we are going to do IPsec or if theAngelos D. Keromytis
output interface does not support hardware checksumming.
2001-06-23Typo.Angelos D. Keromytis
2001-06-23Prototype for in4_cksum()Angelos D. Keromytis
2001-06-23Placeholder, reminder to fix TCP/UDP checksumming right before doing IPsec.Angelos D. Keromytis
2001-06-23Keep stats on TCP/UDP hardware checksumming.Angelos D. Keromytis
2001-06-23Count input/output hardware-checksummed IP packets.Angelos D. Keromytis
2001-06-23Hardware checksumming stats.Angelos D. Keromytis
2001-06-23TCP/UDP hardware checksumming. Untested, since txp dies when it triesAngelos D. Keromytis
to compute the checksums. Still, it shouldn't affect anything.
2001-06-23Having to update queue(3) for DLIST_* is a major PITA; thus, just useAngelos D. Keromytis
SLIST and be done with it.
2001-06-23Use DLIST for tags.Angelos D. Keromytis