summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
1999-02-25Prettier reporting, report number of flows in use per SA.Angelos D. Keromytis
1999-02-25Skipjack key bzero'ing case.Angelos D. Keromytis
1999-02-25Print more information in /kern/ipsecAngelos D. Keromytis
1999-02-25Bzero key information before free'ing it, just for paranoia's sake.Angelos D. Keromytis
1999-02-25Use M_XDATA for the key schedule, instead of M_TEMP.Angelos D. Keromytis
1999-02-25Clear the DF bit, so packets don't get dropped inside a tunnel.Angelos D. Keromytis
The real solution is probably to keep soft state; however, it's not entirely clear what a tunnel's properties with regards to fragmentation are (it may be considered a infinitely-large MTU pipe).
1999-02-25Be a bit more paranoid before free'ing memory.Angelos D. Keromytis
1999-02-25Move union sockaddr_union to ip_ipsp.hAngelos D. Keromytis
1999-02-24Update copyright; remove a few annoying debugging printfs.Angelos D. Keromytis
Btw, OpenBSD hit 25000 commits a couple commits ago.
1999-02-24add skipjack support backTheo de Raadt
1999-02-24Remove encap.h include; saner debugging printfs; fix buglets; work withAngelos D. Keromytis
pfkeyv2.
1999-02-24Added in.h definitions required by IPv6 Basic API and Advanced API specs, andcmetz
a few extras that are just plain useful. Note that I used u_intxx_t instead of the POSIX p1003.1g uintxx_t that those specs mandate, so as to not increase the number of outside symbol definitions that in.h depends on.
1999-02-23Forgot this.Angelos D. Keromytis
1999-02-23This one seems to work, at least in the direction Sparc->i386.Angelos D. Keromytis
Btw, for all the curious souls, I am in Canada at the moment (land of free commits).
1999-02-23Turns out the patch didn't fix the problem. Reverting to old code.Angelos D. Keromytis
1999-02-23Fix an endianness problem (not an issue in libc).Angelos D. Keromytis
1999-02-21split ipintr() to create new ipv4_input() for tunnels; NRLTheo de Raadt
1999-02-19fix definition of plen for ICMP (ping -s73 problem)Kjell Wooding
1999-02-19ipq lockingTheo de Raadt
1999-02-19when checking for weak keys compare sizeof(des_cblock) bytes insetad of ↵Artur Grabowski
sizeof(key) bytes
1999-02-17add fragment flood protection; configureable using sysctl ip.maxqueueTheo de Raadt
1999-02-17ipsec skipjack, based on free .fi code (some .gov type will test this for me)Theo de Raadt
1999-02-17indentTheo de Raadt
1999-02-17indent; remove local typesTheo de Raadt
1999-02-17inet6 indentTheo de Raadt
1999-02-16Fix a padding check bug in the experimental-padding. iliya@ericom.comAngelos D. Keromytis
1999-02-15when allocating sack blocks check for failing malloc(), if it failsNiels Provos
just ignore the sack block + fix misleading comment. tomh@CS.Berkeley.EDU
1999-02-12angelos cannot spell small wordsTheo de Raadt
1999-02-09correct rst handling should not consult ack field hereHugh Graham
1999-02-08init incr tcp iss from snd_nxt, not rcv_nxt; 4.4Theo de Raadt
1999-02-05ipf 3.2.10; work by kjellTheo de Raadt
1999-02-05indentTheo de Raadt
1999-02-05Clear mfchashtbl after deallocation (mycroft@netbsd)Angelos D. Keromytis
1999-02-04indentTheo de Raadt
1999-02-04report on no udp checksumTheo de Raadt
1999-02-04use u_int32_t and u_int64_t for stats variables, instead of quad/longTheo de Raadt
1999-02-01remove the correct KFREEDavid Leonard
1999-01-29remove multiple freeDavid Leonard
1999-01-27fix NEWRENO behaviour, the newreo code assumed that the send socket buffer hasNiels Provos
already been cleared of the acked data, though it was called before any sbdrop() call and always called tcp_output() with 0 index in the send socket buffer and thus causing data corruption. so do not set snd_una to th_ack.
1999-01-27reordered FIN segments caused early termination, bug introduced by ipv6 ↵Niklas Hallqvist
integration
1999-01-15IN_MULTICAST takes network order addressesNiklas Hallqvist
1999-01-11remove panic() calls, consistent error reportingTheo de Raadt
1999-01-11Use bzero instead of memset in the kernelNiklas Hallqvist
1999-01-11Make TCP_SACK compile with new netinetNiklas Hallqvist
1999-01-11panic prints a newline for you, don't do it in the panic stringTodd C. Miller
1999-01-11netinet merge of NRL stuff. some indent and shrinkage needed; NRL/cmetzTheo de Raadt
1999-01-11Remove duplicate code.Angelos D. Keromytis
1999-01-10merge INPROTO_* tablesTheo de Raadt
1999-01-08dont call ip_randomid() in htons().Niels Provos
1999-01-08do not use random bits when not necessary, remove 8-byte block dependenceTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 13:31:38 +0000