Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-11-29 | etherip_output() is called from in_gif.c, therefore is outside of #ifdef IPSEC | Jun-ichiro itojun Hagino | |
2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
ok dhartmei@, frantzen@ | |||
2001-11-24 | KNF | Theo de Raadt | |
2001-11-06 | send igmp v2 leave messages to allrouters address (PR#2164) | Jakob Schlyter | |
patch based on parts from NetBSD submitted by goeran@cdg.chalmers.se | |||
2001-11-06 | Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary. | Miod Vallat | |
(Look ma, I might have broken the tree) | |||
2001-11-02 | fix multicast loopback checksums; goeran@cdg.chalmers.se, ok angelos | Theo de Raadt | |
2001-10-03 | If the TDB doesn't have an attached src/dst ID, it can be used for any | Angelos D. Keromytis | |
type of traffic. | |||
2001-09-26 | bring back the old copyright notice | Theo de Raadt | |
2001-09-24 | Reset the error return value if the cached TDB matches the | Angelos D. Keromytis | |
policy. Pointed out by jdmcbride@iol.ie | |||
2001-09-18 | Avoid memory leak when disabling PMTU, rt_timer_queue_destroy() expects the | Aaron Campbell | |
caller to free the structure. | |||
2001-09-05 | use %ll instead of %q | Theo de Raadt | |
2001-09-04 | Make it compile without option BPF. | Angelos D. Keromytis | |
2001-08-26 | Uninitialized variable. | Niklas Hallqvist | |
2001-08-22 | IPCOMP policy stuff missed the last time round | Niklas Hallqvist | |
2001-08-21 | Don't check for BYPASS options in PCB on ip_output/ip6_output --- this | Angelos D. Keromytis | |
is already done in ip_spd_lookup() | |||
2001-08-21 | When the outgoing socket has BYPASS set, don't bother calling the | Angelos D. Keromytis | |
PCB-checking routine. | |||
2001-08-19 | More old timeouts removal, mainly affected unused/unmaintained code. | Miod Vallat | |
2001-08-19 | Pass the interface (if any) to ipip_input(), so it can be used in | Angelos D. Keromytis | |
BPF. Closes PR 2000. | |||
2001-08-15 | bcmp done wrong, detected at bakeoff. Hint: always use | Niklas Hallqvist | |
relational operators when using *cmp APIs in conditional expressions. | |||
2001-08-09 | Don't check the source address on the packet vs. the one on the SA, as | Angelos D. Keromytis | |
this prevents use of ESP in mobility; pointed out on the IETF mailing list by Francis Dupont. | |||
2001-08-08 | Remove IPCOMP option, it's now part of IPSEC option. You still need to | Jean-Jacques Bernard-Gundol | |
enable ipcomp via sysctl to use it. deraadt@ ok. | |||
2001-08-07 | enable ah & esp by default, now that we trust the code more | Theo de Raadt | |
2001-08-06 | Don't drop packets if we're using an ACQUIRE policy and some error | Angelos D. Keromytis | |
occurs while notifying key mgmt; also, always check for new TDBs for policies where the destination gateway is left unspecified (end-to-end IPsec case), to avoid asking for new SAs from key mgmt. | |||
2001-07-27 | variable name "gif" is way too generic - use "gif_softc". sync with kame | Jun-ichiro itojun Hagino | |
2001-07-27 | do not check in_dstaddr in rtinitflags() macro, otherwise | Jun-ichiro itojun Hagino | |
linklocal address manipulation codepath will choke. sync with kame | |||
2001-07-23 | improve IFA_ROUTE handling. do not lose connected route on primary | Jun-ichiro itojun Hagino | |
interface address removals. | |||
2001-07-21 | repair IPv6 TCP. th_sum has to be initialized to 0 on template. | Jun-ichiro itojun Hagino | |
(older code had "th_sum = 0" at the bottom of the function, which was removed during TCP hardware checksumming change) | |||
2001-07-18 | zero tcp checksum field before calculating new value. | Marco S Hyman | |
Fixes problem with bad checksums on keepalives OK provos@ | |||
2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
2001-07-17 | Use 64 bits integer for ipcomps_ibytes and ipcomps_obytes. 32 bits was | Jean-Jacques Bernard-Gundol | |
used and it gave strange results with netstat -s. Reported by art@ | |||
2001-07-16 | Move altq after pf; suggested by aaron@, kjc@ ok. | Federico G. Schwindt | |
2001-07-08 | Remove static from func decls | Niklas Hallqvist | |
2001-07-07 | fix comment to make life easier for my special friend darren. | Niels Provos | |
2001-07-06 | Don't use enc0 interface for IPComp. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-05 | IP6_EXTHDR_GET0 did not check m->m_len (noone was using this macro). | Jun-ichiro itojun Hagino | |
sync with kame | |||
2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-05 | IPComp. Just like for deflate earlier, it won't be compiled until everything | Jean-Jacques Bernard-Gundol | |
is in the tree | |||
2001-07-05 | Style | Angelos D. Keromytis | |
2001-07-05 | Typo. | Angelos D. Keromytis | |
2001-07-05 | Style | Angelos D. Keromytis | |
2001-07-05 | IPComp itself (include files). angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-04 | Make preprocessor happier, don't give it untasty tokens at end of input. | Marc Espie | |
Ok millert@ | |||
2001-07-04 | handle m->m_pkthdr.rcvif == NULL; temporarily ok deraadt@; pending itojun@ | Daniel Hartmeier | |
2001-07-04 | Explicitly list the new ICMP codes. | Angelos D. Keromytis | |
2001-07-04 | Update with codes, URL, RFCs, from jason@Ackley.NET, closes PR 1919 | Angelos D. Keromytis | |
2001-07-03 | Pointer arithmetic fixes work better when you get the casting right. | Angelos D. Keromytis | |
2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not ↵ | Daniel Hartmeier | |
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@ | |||
2001-06-29 | move pf_test check to happen after checksum calculation - without | Bob Beck | |
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@) | |||
2001-06-29 | saner checking in icmp_error; from NetBSD with work by dug and me. | Niels Provos | |
2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
okay dhartmei@, dugsong@ |