summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
1997-10-02conditional error loggingTheo de Raadt
1997-10-01should report unsigned quantitiesTheo de Raadt
1997-10-01verify decryption by checking last padding bytesTheo de Raadt
1997-09-30same as for ip_esp_new.c, and indentTheo de Raadt
1997-09-30do the 3-DES key setup right, will ya?Theo de Raadt
1997-09-29brain dead sanity tests correctedTheo de Raadt
1997-09-28more \n in log()Theo de Raadt
1997-09-28log() needs a \nTheo de Raadt
1997-09-24New style self-describing padding in use.Angelos D. Keromytis
1997-09-24Cosmetic changes.Angelos D. Keromytis
1997-09-23AH changes, after interoperating at the ANX bakeoff.Angelos D. Keromytis
1997-09-07for broadcast/multicast packets, correct m_pkthdr.len on the way up to the ↵Theo de Raadt
socket; drochner@zelz26.zel.kfa-juelich.de
1997-08-26indentTheo de Raadt
1997-08-26indentTheo de Raadt
1997-08-26new esp: encryption, authentication and replay protection +Niels Provos
tiny bug fixes
1997-08-19Add DP_CLR() macroTodd C. Miller
1997-08-19Theo doesn't like extra kernel options, so don't allowTodd C. Miller
DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to be overridden from the kernel. It's not really too useful since there is a nice sysctl interface for this stuff.
1997-08-16Allow DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to beTodd C. Miller
overridden via kernel config file.
1997-08-16Just some more debugging info.Angelos D. Keromytis
1997-08-09The list of tcp/udp ports not to allocate dynamically is nowTodd C. Miller
a bitmask configurable via sysctl([38]). The default values have not changed. If one wants to change the list it should be done early on in /etc/rc.
1997-08-09SYN flood protection, by specifyingAngelos D. Keromytis
option TCPCOOKIE in the kernel config file. For very busy servers, consider raising the TCK_NFRIENDS value (it's currenly set to 16). Code originally from Matt Blaze and John Ioannidis.
1997-08-04No more crashes because of this bug (double m_freem(), essentially).Angelos D. Keromytis
1997-08-01when family is AF_UNSPEC,flipk
ether_shost fields no longer get set for us. initialize them ourselves.
1997-07-31some indentation stuffTheo de Raadt
1997-07-28make it compileNiels Provos
1997-07-28Make struct in_addr contain an in_addr_t since that's whatTodd C. Miller
in_addr_t is for (same basic type so we don't break anything).
1997-07-27expiration messages, fixes, updates, all sorts of thingsNiklas Hallqvist
1997-07-27hardcode list of ports to not randomly allocate; will add configuration laterTheo de Raadt
1997-07-24do not ignore IFF_NOARPTheo de Raadt
1997-07-24bail properly if malloc failsTheo de Raadt
1997-07-24network byte order for countersTheo de Raadt
1997-07-24cmd is a u_longTheo de Raadt
1997-07-24cmd is a u_longTheo de Raadt
1997-07-21make this compile until niklas fixes the boo-booTheo de Raadt
1997-07-18enablespi/disablespi in encap + print spi's in hostorderNiels Provos
1997-07-15flags for tunnels and replacing existing routes, sysctl! + tiny bug fixNiels Provos
1997-07-14global byte counters.Niels Provos
1997-07-14sysctl...Niels Provos
1997-07-14routes with zero spi can be used to avoid ipsec processingNiels Provos
1997-07-12fixed tiny bug in pad values and hmac inner hash lengths. should work now.Niels Provos
1997-07-11obsolete.Niels Provos
1997-07-11put old esp/ah and new esp/ah in different files.Niels Provos
generalised way of handling transforms.
1997-07-06unsigned calc should be signed; jdp@polstra.com; freebsd pr#3998Theo de Raadt
1997-07-02fix neglected _FLEN's + reserve_spi + output reserved spi's without alg.Niels Provos
correctly.
1997-07-02Move prototype for bindresvport(3) to <netiniet/in.h> as it isTodd C. Miller
not rpc-specific and other stuff uses it now.
1997-07-01major restructuringNiels Provos
1997-06-27udp icmp errors had ip_len 20 bytes too large; stevens p774; ↵Theo de Raadt
koji@math.human.nagoya-u.ac.jp
1997-06-25hard and soft limits for SPI's per absolute timer, relative since establish,Niels Provos
relative since first use timers, packet and byte counters. notify key mgmt on soft limits. key mgmt can now specify limits. new encap messages: EMT_RESERVESPI, EMT_ENABLESPI, EMT_DISABLESPI
1997-06-24use ntohs instead of NTOHS for countersNiels Provos
1997-06-24correct AH options hashing.Niels Provos