| Age | Commit message (Expand) | Author |
|---|
| 2001-05-13 | initial cut at /dev/crypto support. takes original mbuf "try, and discard | Theo de Raadt |
| 2001-05-12 | Less verbose; angelos@ ok | Aaron Campbell |
| 2001-05-12 | Move bzero() after test for correct allocation (jj@wabbitt.org) | Angelos D. Keromytis |
| 2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell |
| 2001-05-08 | Fix realloc possible leak; this is userland, not kernel; reported by | Federico G. Schwindt |
| 2001-05-08 | When `dup-to if:addr' clause is used, be sure to rewrite the dest addr | Federico G. Schwindt |
| 2001-05-08 | IPfilter 3.4.17; kjell@ deraadt@ ok. | Federico G. Schwindt |
| 2001-05-05 | Check that SAs also match on the credentials and the IDs. This means | Angelos D. Keromytis |
| 2001-05-01 | Fix tcp_signature_tdb_input decl; kernel compiles again if TCP_SIGNATURE | Federico G. Schwindt |
| 2001-05-01 | get rid of dtom(), okay itojun@ angelos@ mickey@ millert@ | Niels Provos |
| 2001-05-01 | Typo in comment. | Aaron Campbell |
| 2001-04-23 | Missing splx in error handling. | Artur Grabowski |
| 2001-04-22 | Fix spl handling in ipfilter ioctl interface. Work by aaron@ and me. | Grigoriy Orlov |
| 2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis |
| 2001-04-10 | allow host-to-host negotiations if no gateway has been specified. | Niels Provos |
| 2001-04-08 | Typo. __IP_FIL_H__ -> __IP_FRAG_H__ | smart |
| 2001-04-07 | Partial update to IPF 3.4.17; this fixes the *VERY* serious fragment | Federico G. Schwindt |
| 2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis |
| 2001-04-04 | do not check ip_mtudisc on IPv6 TCP. | Jun-ichiro itojun Hagino |
| 2001-03-30 | Protect the IF_XXX macros in the callback routines with splimp(). Doh! | Angelos D. Keromytis |
| 2001-03-28 | tdb_inp -> (tdb_inp_in, tdb_inp_out) | Angelos D. Keromytis |
| 2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis |
| 2001-03-27 | Fix a problem with how TDB timeouts were used in pfkeyv2. | Artur Grabowski |
| 2001-03-25 | Protect KFREES by splnet and rearrange pointers. This fix interrupt | Grigoriy Orlov |
| 2001-03-25 | A couple minor fixes to prevent use after free. Thanks to dawson and team for... | Constantine Sapuntzakis |
| 2001-03-23 | Fix slow mbuf leak. | Angelos D. Keromytis |
| 2001-03-18 | enable pmtu by default | Niels Provos |
| 2001-03-17 | Handle ftp services that don't ask for a password, only a username. | Bob Beck |
| 2001-03-15 | include <machine/cpu.h>, since schednetisr needs to do a splsoftnet | Brandon Creighton |
| 2001-03-15 | convert SA expirations to the new timeouts. | Michael Shalayeff |
| 2001-03-14 | provide a random start for tcp timestamps; niels@ ok | Michael Shalayeff |
| 2001-03-13 | Force a new search for an SA if the latched one is deleted. | Angelos D. Keromytis |
| 2001-03-07 | More careful spl usage for the IPSEC case in ip_output(); from angelos@ | Aaron Campbell |
| 2001-03-07 | Remove a bogus rtfree(); PR 1706 | brian |
| 2001-03-07 | Missing SPL_X(); deraadt@ ok | Aaron Campbell |
| 2001-03-06 | Move the test for bogus packet length in udp_output() closer to the top of | Aaron Campbell |
| 2001-03-04 | Store peer's credentials in TDB. | Angelos D. Keromytis |
| 2001-03-03 | on parse error of timestamp option, set parameter error offset correctly. | Jun-ichiro itojun Hagino |
| 2001-03-03 | drop packets with 127.0.0.0/8 in header field, if the packet is from outside. | Jun-ichiro itojun Hagino |
| 2001-02-28 | Pretty. | Angelos D. Keromytis |
| 2001-02-28 | Handle failures more gracefully. | Angelos D. Keromytis |
| 2001-02-28 | Keep the last packet sent or received that matched an SPD entry, and | Angelos D. Keromytis |
| 2001-02-28 | If net.inet.ipip.allow is set to 2, don't check for loopback address | Angelos D. Keromytis |
| 2001-02-27 | Remove superfluous printf in Angelos last commit | Niklas Hallqvist |
| 2001-02-20 | tighten IPv4 option header processing (we may want to do more). | Jun-ichiro itojun Hagino |
| 2001-02-16 | remove IPv6 case from udp_output. now we have separate udp6_output. | Jun-ichiro itojun Hagino |
| 2001-02-16 | pull in new pcb notification code from kame. better handling of scope address. | Jun-ichiro itojun Hagino |
| 2001-02-16 | amove in6_{embed,recover}scope prototypes to in6_var.h (kernel only). | Jun-ichiro itojun Hagino |
| 2001-02-16 | sync whitespace/comment with kame. to help merge tasks | Jun-ichiro itojun Hagino |
| 2001-02-12 | putting #error into an include file is totally wrong | Theo de Raadt |
