| Age | Commit message (Expand) | Author |
|---|
| 2009-12-15 | Ensure that the interface is not null before trying to access its flags. | Joel Sing |
| 2009-12-11 | Two cases of IPSEC getsockopt() returning two bytes of uninitialialized | Theo de Raadt |
| 2009-12-07 | do not forward and drop packets with M_MCAST flag set in ip_forward() | Joerg Goltermann |
| 2009-11-27 | Add setrdomain() and getrdomain() system calls. Committing now to | Philip Guenthe |
| 2009-11-21 | Add a way to bind the tunnel endpoint of a gif/gre interface into a | Claudio Jeker |
| 2009-11-20 | NULL dereference in IPV6_PORTRANGE and IP_IPSEC_*, found by Clement LECIGNE, | Philip Guenthe |
| 2009-11-19 | avoid overflow since protos > IPPROTO_MAX exist. From FreeBSD with | Otto Moerbeek |
| 2009-11-13 | Extend the protosw pr_ctlinput function to include the rdomain. This is | Claudio Jeker |
| 2009-11-13 | Packets generated by ip_fragment() need to inherit the rdomain from the | Claudio Jeker |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-10-28 | *NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL, | Theo de Raadt |
| 2009-10-25 | Get rid of unused macro `la_timer'. | Michael Knudsen |
| 2009-10-17 | Allow us to accept gratuitous ARP requests in cases where the | Marco Pfatschbacher |
| 2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
| 2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-08 | I had not enough oks to commit this diff. | Michele Marchetto |
| 2009-09-08 | Add support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-08-23 | revert the icmp error diff again (r1.167-1.169) | David Krause |
| 2009-08-20 | fix indentation | Alexander Bluhm |
| 2009-08-12 | don't confuse chars with strings; ok oga@ | Martynas Venckus |
| 2009-08-10 | 7 years of | Henning Brauer |
| 2009-08-10 | we need to null mcopy, gotos bite. theo and i both missed them, theo ok | Henning Brauer |
| 2009-08-10 | fix previous: | Henning Brauer |
| 2009-08-10 | this is basically a fixed version of r1.165, avoid m_copym of each and every | Henning Brauer |
| 2009-08-10 | sockets created via a listening socket lose the rdomain and fail to work | Claudio Jeker |
| 2009-08-09 | once again ipsec tries to be clever and plays fast, this time by | Henning Brauer |
| 2009-08-01 | timeout_add -> timeout_add_msec | Bret Lambert |
| 2009-07-28 | revert the avoidance of the mbuf copy for the icmp errors (r1.165) | David Gwynne |
| 2009-07-27 | Define the common DiffServ Codepoints so pf(4) can use them. | Claudio Jeker |
| 2009-07-26 | no need to cast the return value of m_freem() to void | Thordur I. Bjornsson |
| 2009-07-24 | for every packet we forwarded, we copied the first 68 bytes of it in case | David Gwynne |
| 2009-07-13 | Get rid of the token bucket filter. | Michele Marchetto |
| 2009-07-09 | Use MAXTTL instead of the hardcoded value. | Michele Marchetto |
| 2009-06-17 | Correctly handle the carp demote counter in all input cases. | Marco Pfatschbacher |
| 2009-06-09 | By default, don't accept IPv4 ICMP redirects. This behaviour can be | Stuart Henderson |
| 2009-06-08 | remove stray * from comment, probably a rewrapping artefact | Stuart Henderson |
| 2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
| 2009-06-04 | the decision on wether a packet is to be delivered locally or forwarded | Henning Brauer |
| 2009-06-03 | add the basic infrastructure to take advantage of TCP and UDP receive | Christian Weisgerber |
| 2009-06-02 | Shuffle function declarations a bit; ipsp_kern doesn't actually exist, | Bret Lambert |
| 2009-06-02 | do the pf_pkt_addr_changed(m) magic just like gif etc | Henning Brauer |
| 2009-06-02 | satosin was already defined in in.h, no need to redefine it here | Bret Lambert |
| 2009-06-02 | 0 -> NULL | Bret Lambert |
| 2009-06-02 | Fix an off-by-one in the ddb-only debugging function tdb_hashstats. | Owain Ainsworth |
| 2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
| 2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2009-01-30 | When don't-fragment packets need to get fragemnted some code tries to | Claudio Jeker |
| 2009-01-29 | Always zero the IP checksum field for packets and packet fragments | Christian Weisgerber |
| 2009-01-27 | In IPsec acquire mode, if the flow was configured for the "any" | Alexander Bluhm |
