summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-08-15bcmp done wrong, detected at bakeoff. Hint: always useNiklas Hallqvist
2001-08-09Don't check the source address on the packet vs. the one on the SA, asAngelos D. Keromytis
2001-08-08Remove IPCOMP option, it's now part of IPSEC option. You still need toJean-Jacques Bernard-Gundol
2001-08-07enable ah & esp by default, now that we trust the code moreTheo de Raadt
2001-08-06Don't drop packets if we're using an ACQUIRE policy and some errorAngelos D. Keromytis
2001-07-27variable name "gif" is way too generic - use "gif_softc". sync with kameJun-ichiro itojun Hagino
2001-07-27do not check in_dstaddr in rtinitflags() macro, otherwiseJun-ichiro itojun Hagino
2001-07-23improve IFA_ROUTE handling. do not lose connected route on primaryJun-ichiro itojun Hagino
2001-07-21repair IPv6 TCP. th_sum has to be initialized to 0 on template.Jun-ichiro itojun Hagino
2001-07-18zero tcp checksum field before calculating new value.Marco S Hyman
2001-07-17split ip normalization out into a separate file, okay dhartmei@Niels Provos
2001-07-17Use 64 bits integer for ipcomps_ibytes and ipcomps_obytes. 32 bits wasJean-Jacques Bernard-Gundol
2001-07-16Move altq after pf; suggested by aaron@, kjc@ ok.Federico G. Schwindt
2001-07-08Remove static from func declsNiklas Hallqvist
2001-07-07fix comment to make life easier for my special friend darren.Niels Provos
2001-07-06Don't use enc0 interface for IPComp. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IP6_EXTHDR_GET0 did not check m->m_len (noone was using this macro).Jun-ichiro itojun Hagino
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IPComp. Just like for deflate earlier, it won't be compiled until everythingJean-Jacques Bernard-Gundol
2001-07-05StyleAngelos D. Keromytis
2001-07-05Typo.Angelos D. Keromytis
2001-07-05StyleAngelos D. Keromytis
2001-07-05IPComp itself (include files). angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-04Make preprocessor happier, don't give it untasty tokens at end of input.Marc Espie
2001-07-04handle m->m_pkthdr.rcvif == NULL; temporarily ok deraadt@; pending itojun@Daniel Hartmeier
2001-07-04Explicitly list the new ICMP codes.Angelos D. Keromytis
2001-07-04Update with codes, URL, RFCs, from jason@Ackley.NET, closes PR 1919Angelos D. Keromytis
2001-07-03Pointer arithmetic fixes work better when you get the casting right.Angelos D. Keromytis
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not filtere...Daniel Hartmeier
2001-06-29move pf_test check to happen after checksum calculation - withoutBob Beck
2001-06-29saner checking in icmp_error; from NetBSD with work by dug and me.Niels Provos
2001-06-28first stab at packet normalization. includes full ip reassembly.Niels Provos
2001-06-27introduce the ALTQ queue macros into sys/net files.Kenjiro Cho
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
2001-06-27Use TAILQ_FOREACH() instead of hand-crafted for loops.Angelos D. Keromytis
2001-06-27When determining whether there's a pending acquire wrt a policy, lookAngelos D. Keromytis
2001-06-27Attach IPsec acquire state to policy entries, and relevant cleanups.Angelos D. Keromytis
2001-06-27Also link acquire state to the relevant IPsec policy.Angelos D. Keromytis
2001-06-27Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, dependingAngelos D. Keromytis
2001-06-27Add length to pkthdr.len directly.Angelos D. Keromytis
2001-06-27Minor nits.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Use the ACQUIRE sequence number to "wake up" acquire state kept andAngelos D. Keromytis
2001-06-26ifdef out some currently unused codeAngelos D. Keromytis
2001-06-26Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec acquires too.Angelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26no longer pass around **mTheo de Raadt
2001-06-26Appease gcc by not using void pointers in arithmetic operations.Aaron Campbell