summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
1998-07-03wrong endian conversion caused vif stats to be wrong; jonny@jonny.eng.brTheo de Raadt
1998-06-30remove unnecessary assignmentNiels Provos
1998-06-27delete extra KFREE(); d@openbsd.orgTheo de Raadt
1998-06-27indentTheo de Raadt
1998-06-27indentTheo de Raadt
1998-06-27Disallow TCP connect() to multicast addresses; cmetz@inner.netAngelos D. Keromytis
1998-06-26indentTheo de Raadt
1998-06-11indentTheo de Raadt
1998-06-11fix a mbuf chain corruption which happened when m_pullup was called on anNiels Provos
mbuf in the middle of the chain and had to MGET a new one.
1998-06-10make the packets which were successfully processed by IPSec available toNiels Provos
bpf via the enc0 interface, using linktype DLT_ENC.
1998-06-10wasteland quality control cleanupTheo de Raadt
1998-06-10New TCPCTL_IDENT sysctl for identd without kmem insanity.Bob Beck
1998-06-03request only auth in notify when vpn ipsec route is found with a differentNiels Provos
security protocol than IPPROTO_ESP.
1998-06-03cleanup debug printfsNiels Provos
1998-06-02nbytes - ofs should never be less than 0 (Oops on me)janjaap
1998-05-27for icmpbmcastecho, block all of themTheo de Raadt
1998-05-24allow SAs with non-specified source addressNiels Provos
1998-05-24allow the use of blowfish and cast encryption with implicit ivNiels Provos
1998-05-24avoid source address spoofing for mutual hostile hosts which have SAs toNiels Provos
us, reported by Craig Metz <cmetz@inner.net>.
1998-05-24add support for Virtual Private Networks (VPN).Niels Provos
1998-05-22Set the outter IP header's ttl, not the inner.Angelos D. Keromytis
1998-05-19Wall for non-IPSEC caseTheo de Raadt
1998-05-18first step to the setsockopt/getsockopt interface as described inNiels Provos
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy.
1998-05-17fix tdb_delete() when using SPI chains.Niels Provos
1998-05-05check for invalid padding length, reported by Dan McDonald (Sun Microsystems)Niels Provos
<danmcd@eng.sun.com>
1998-04-25close PR 459David Leonard
1998-03-27Fix bug (I introduced) with aliases and in_broadcast().Angelos D. Keromytis
1998-03-23Also digest the leftovers.janjaap
1998-03-20for SIOCGIF{NETMASK,DSTADDR,BRDADDR} calls match address to if aliases entriesTheo de Raadt
so that correct information is returned (previously information about the primary address was returned). If the address cannot be found on the interface, return information about the primary (for OSIOC* compatibility). work by angelos and myself.
1998-03-19This should fix some problems with the aliases.Angelos D. Keromytis
1998-03-18adapt function arguments to get the expected prototype.Niels Provos
1998-03-18Fix tunnel mode input processing (use ip4_input instead of ipe4_input),Niels Provos
fix some old code leftovers in ah_new_input (adjust to variable hash length), avoid double ip encapsulation in tunnel mode. Problems reportd by Petr Novak <petr@internet.cz>.
1998-03-18Add FreeBSD patch (check for SYN packets arriving at a socket inAngelos D. Keromytis
LISTEN state with source address/port == destination address/port).
1998-03-07improve performance by avoiding unnecessary copies.Niels Provos
1998-03-04don't print "IP Filter: initialized"dgregor
1998-03-02improve blowfish performance.Niels Provos
1998-02-28Another shot at disallowing TCP connections to 255.255.255.255,Angelos D. Keromytis
0.0.0.0 and any local broadcast addresses. Tested.
1998-02-25patch could not have been tested. panics machine on bootTheo de Raadt
1998-02-25please indent as the file is currently indentedTheo de Raadt
1998-02-25Pay attention.Angelos D. Keromytis
1998-02-25Disallow TCP connects to 255.255.255.255 or local broadcast addresses.Angelos D. Keromytis
1998-02-22Changes made for GCC 2.8 -Wall pleasuresNiklas Hallqvist
1998-02-17$OpenBSD$dgregor
1998-02-14wildcard ifaces; finally, after HE said it's okMichael Shalayeff
1998-02-14add seperate so_euid & so_ruid to struct socket, so that identd is still ↵Theo de Raadt
fast.. Sigh. I will change this again later
1998-02-11make IPPORT_USERRESERVED a nice fat number -> random ports look really funky.Theo de Raadt
1998-02-03bail out for sourcerouted packets earlier, also do not forwardTheo de Raadt
sourcerouted packets ever if ipforwarding is off; tqbf@secnet.com
1998-02-03bad types; wileyc@sekiya.twics.co.jpTheo de Raadt
1998-02-01undo wildcard loopback stuff; it was not checked by other developersTheo de Raadt
1998-02-01support wildcard loopbacks. that is, setting up lo1 like:Michael Shalayeff
ifconfig lo1 inet 192.168.1.1 netmask 255.255.255.0 link1 would force it to act like all the addresses from net 192.168.1 were added to the interface. todo: man lo