summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2004-04-28carp stats cleanup:Ryan Thomas McBride
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
2004-04-27Require NULL oldp when dropping a connection.Otto Moerbeek
2004-04-26change tcpdrop to require newp instead of oldp; suggested by ottoMarkus Friedl
2004-04-26- allow the user to force the TCP mss below the fail-safe 216 with a lowMike Frantzen
2004-04-26hide nonstandard struct from userlandJun-ichiro itojun Hagino
2004-04-26minor cleanupsTheo de Raadt
2004-04-25add TCPCTL_DROP; ok deraadt, cedric, grange, ...Markus Friedl
2004-04-25radix tree with multipath support. from kame. deraadt okJun-ichiro itojun Hagino
2004-04-20add tcps_rcvacktooold; ok deraadtMarkus Friedl
2004-04-18pass esp/ah/ipcmp to rawip if processing is disabled with sysctl;Markus Friedl
2004-04-15Unbreak INET6less kernels.Alexander Yurchenko
2004-04-15allow TCP packet with IPv4 option (we have been dropping these).Jun-ichiro itojun Hagino
2004-04-14syn_cache_get: send RST instead of RST+ACK in response to ACK; ok deraadtMarkus Friedl
2004-04-14simpler ipsp_aux_match() API; ok henning, hshoexerMarkus Friedl
2004-04-14with IPv6, udp checksum is mandatory. henning okJun-ichiro itojun Hagino
2004-04-12remove duplicate if. from pedro martelletto, ok markus@Ted Unangst
2004-04-12factor out dropafterack_ratelim code, use ratelimitMarkus Friedl
2004-04-04on in-window SYN, send back rate-limited ACK; ok dhartmei frantzen markusTheo de Raadt
2004-03-31in gettdbbysrcdst(), allow matching with either src or dst beeing a wildcardHenning Brauer
2004-03-28memory leak fix; from pat, via tedu, ok dhartmeiTheo de Raadt
2004-03-26don't use mbuf after free; ok mcbride, deraadt, cloderMarkus Friedl
2004-03-26Also raise advskew to 240 while we wait for pfsync to get it's bulk update.Ryan Thomas McBride
2004-03-24Correct size in error message. From mickey@Ryan Thomas McBride
2004-03-24Disable net.inet.carp.log by default.Ryan Thomas McBride
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride
2004-03-22spelling; jjy2+@pitt.eduTheo de Raadt
2004-03-21fix udp checksum verification if ip options are present;Markus Friedl
2004-03-20Unbreak routing change handling for state changes; count addresses differentlyRyan Thomas McBride
2004-03-18Allow the state to be changed explicitly via the ioctl.Ryan Thomas McBride
2004-03-17typo in comment (fragment->segment); ok itojun@Markus Friedl
2004-03-15strncpy -> strlcpy. ok markus@ "(this is even unused crap, i think)"Ted Unangst
2004-03-12Fix rtentry leak in in_losing(). The rtentry needs to be freed in anycase.Claudio Jeker
2004-03-10Don't permit a negative index. Pointed out by Patrick Latifi.Ryan Thomas McBride
2004-03-05Only send route add or delete messages if it's the first identicalRyan Thomas McBride
2004-03-02limit total number of queued out-of-order packets to NMBCLUSTERS/2; ok mcbrideMarkus Friedl
2004-02-27implement tcp_drain() similar to ip_drain(); ok mcbride@Markus Friedl
2004-02-27API change; counter for upcoming tcp_drain(); ok deraadtMarkus Friedl
2004-02-17switch to sysctl_int_arr(); ok henning, deraadtMarkus Friedl
2004-02-16don't allocate a cluster if the header fits into a mbuf;Markus Friedl
2004-02-15check TDBF_INVALID for TCP MD5 SA lookups; ok mcbride, henningMarkus Friedl
2004-02-15switch to sysctl_int_arr(); ok itojun, henning, miod, deraadtMarkus Friedl
2004-02-13typo, lenght -> lengthBrad Smith
2004-02-11make mss signed; avoids large mss if ifp==NULL; ok itojun@Markus Friedl
2004-02-10plug mbuf leak (ip_fragment() always free mbuf on error). tested by cedric,Jun-ichiro itojun Hagino
2004-02-10check TF_SIGNATURE when calculating the mss; add TCPOLEN_SIGLEN andMarkus Friedl
2004-02-05take RFC2460 section 5 last paragraph into consideration when we compute MSSJun-ichiro itojun Hagino
2004-01-31rename tcp sockopt TCP_SIGNATURE_ENABLE to TCP_MD5SIGHenning Brauer
2004-01-31!sack_disable -> sack_enable; ok deraadt@Markus Friedl
2004-01-30add support for getsockopt(..., TCP_SIGNATURE_ENABLEHenning Brauer