summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2001-05-27Reset pkthdr on old mbuf head.Angelos D. Keromytis
2001-05-27And clear the M_PKTHDR flag.Angelos D. Keromytis
2001-05-27Copy tags to first mbuf.Angelos D. Keromytis
2001-05-27Placeholders for the new socket options.Angelos D. Keromytis
2001-05-27Add some IPsec-related IP-level socket options.Angelos D. Keromytis
2001-05-27Remove ipsp_copy_ident() prototype.Angelos D. Keromytis
2001-05-27ipsp_copy_ident() no longer needed.Angelos D. Keromytis
2001-05-27Also copy the authentication material to the new socket.Angelos D. Keromytis
2001-05-27Free IPsec authentication material on PCB tear down.Angelos D. Keromytis
2001-05-27Keep local authentication material on the PCB.Angelos D. Keromytis
2001-05-27Probably a good idea to pass the NULL to the correct function...Angelos D. Keromytis
2001-05-27If we are passed a packet tag, it's an IPSEC_IN_CRYPTO_DONE so convertAngelos D. Keromytis
it to IPSEC_IN_DONE, rather than adding a new one.
2001-05-27Pass a NULL packet tag for now to ipsp_common_input_cb().Angelos D. Keromytis
2001-05-27Change prototype of ipsp_common_input_cb() to also accept a packet tagAngelos D. Keromytis
as the last argument.
2001-05-27Forgot to convert this tag.Angelos D. Keromytis
2001-05-27Update pointers to IPsec-related PCB information when allocating newAngelos D. Keromytis
PCB; store information from the TDB to the PCB, if it's not initialized, so processed can eventually retrieve it.
2001-05-27Remove unnecessary XXX comment.Angelos D. Keromytis
2001-05-27Remove unnecessary comment.Angelos D. Keromytis
2001-05-27New tags.Angelos D. Keromytis
2001-05-27Use the new IPsec tags.Angelos D. Keromytis
2001-05-25recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket.Jun-ichiro itojun Hagino
it is to be friendly with postfix daemon-to-daemon communication (not 100% sure if which behavior is correct, specwise). patch similar to netbsd.
2001-05-24Check return values (tedu@heorot.stanford.edu)Angelos D. Keromytis
2001-05-22Add an IPSEC_NEEDED tag if SKIPCRYPTO is set in the TDBAngelos D. Keromytis
2001-05-22Simplify option printing. ok deraadt@Angelos D. Keromytis
2001-05-21SKIPCRYPTO flagAngelos D. Keromytis
2001-05-21Cosmetic.Angelos D. Keromytis
2001-05-21Use int16_t for the type and length of ipsec_ref objects.Angelos D. Keromytis
2001-05-21Use a reference-counted structure for IPsec IDs and credentials, so weAngelos D. Keromytis
can cheaply keep copies of them at the PCB. ok deraadt@
2001-05-20Remove varargs from ipv4_input; cmetz@ deraadt@ ok.Federico G. Schwindt
2001-05-20Use packet tags instead of tdbi.Angelos D. Keromytis
2001-05-20Record outgoing SA processing, do loop detection.Angelos D. Keromytis
2001-05-20Use packet tags to signal input IPsec processing to upper layer protocols.Angelos D. Keromytis
2001-05-17convert mbuf and cluster allocation to pool, mostly from NetBSDNiels Provos
okay art@ miod@
2001-05-16No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok)Hakan Olsson
2001-05-16Don't clobber ip_sum; ip_output always sets this to 0 before callingFederico G. Schwindt
in_cksum so it's not needed here; itojun@ ok. This makes the ip_sum available in ipfilter.
2001-05-15Accept ARP packet coming from bridge interface without IP addressGrigoriy Orlov
configured. But deny such a packet if it coming on "wrong" bridge. Reported and tested by form@ ho@, jason@ Ok.
2001-05-13initial cut at /dev/crypto support. takes original mbuf "try, and discardTheo de Raadt
if we fail" semantics and extends to two varients of data movement: mbuf, or an iovec style block.
2001-05-12Less verbose; angelos@ okAaron Campbell
2001-05-12Move bzero() after test for correct allocation (jj@wabbitt.org)Angelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-05-08Fix realloc possible leak; this is userland, not kernel; reported byFederico G. Schwindt
Ted U <grendel@heorot.stanford.edu>.
2001-05-08When `dup-to if:addr' clause is used, be sure to rewrite the dest addrFederico G. Schwindt
with the one supplied; fix by ericj@, darrenr notified.
2001-05-08IPfilter 3.4.17; kjell@ deraadt@ ok.Federico G. Schwindt
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
that flows with different source/destination ID requirements will cause different SAs to be established by IKE (or whatever other protocol). Also, use the new data types for allocated memory.
2001-05-01Fix tcp_signature_tdb_input decl; kernel compiles again if TCP_SIGNATUREFederico G. Schwindt
option is used. Note that this does not work.
2001-05-01get rid of dtom(), okay itojun@ angelos@ mickey@ millert@Niels Provos
2001-05-01Typo in comment.Aaron Campbell
2001-04-23Missing splx in error handling.Artur Grabowski
2001-04-22Fix spl handling in ipfilter ioctl interface. Work by aaron@ and me.Grigoriy Orlov
Problem was reported by DK <obsd@snti.com> as kernel panic loading ipa - "WARNING: SPL NOT LOWERED ON SYSCALL EXIT". deraadt@ ok.
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
information will be stored in the TDB. ok ho@ provos@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-12 21:44:59 +0000