Age | Commit message (Collapse) | Author | |
---|---|---|---|
1997-10-02 | conditional error logging | Theo de Raadt | |
1997-10-01 | should report unsigned quantities | Theo de Raadt | |
1997-10-01 | verify decryption by checking last padding bytes | Theo de Raadt | |
1997-09-30 | same as for ip_esp_new.c, and indent | Theo de Raadt | |
1997-09-30 | do the 3-DES key setup right, will ya? | Theo de Raadt | |
1997-09-29 | brain dead sanity tests corrected | Theo de Raadt | |
1997-09-28 | more \n in log() | Theo de Raadt | |
1997-09-28 | log() needs a \n | Theo de Raadt | |
1997-09-24 | New style self-describing padding in use. | Angelos D. Keromytis | |
1997-09-24 | Cosmetic changes. | Angelos D. Keromytis | |
1997-09-23 | AH changes, after interoperating at the ANX bakeoff. | Angelos D. Keromytis | |
1997-09-07 | for broadcast/multicast packets, correct m_pkthdr.len on the way up to the ↵ | Theo de Raadt | |
socket; drochner@zelz26.zel.kfa-juelich.de | |||
1997-08-26 | indent | Theo de Raadt | |
1997-08-26 | indent | Theo de Raadt | |
1997-08-26 | new esp: encryption, authentication and replay protection + | Niels Provos | |
tiny bug fixes | |||
1997-08-19 | Add DP_CLR() macro | Todd C. Miller | |
1997-08-19 | Theo doesn't like extra kernel options, so don't allow | Todd C. Miller | |
DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to be overridden from the kernel. It's not really too useful since there is a nice sysctl interface for this stuff. | |||
1997-08-16 | Allow DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to be | Todd C. Miller | |
overridden via kernel config file. | |||
1997-08-16 | Just some more debugging info. | Angelos D. Keromytis | |
1997-08-09 | The list of tcp/udp ports not to allocate dynamically is now | Todd C. Miller | |
a bitmask configurable via sysctl([38]). The default values have not changed. If one wants to change the list it should be done early on in /etc/rc. | |||
1997-08-09 | SYN flood protection, by specifying | Angelos D. Keromytis | |
option TCPCOOKIE in the kernel config file. For very busy servers, consider raising the TCK_NFRIENDS value (it's currenly set to 16). Code originally from Matt Blaze and John Ioannidis. | |||
1997-08-04 | No more crashes because of this bug (double m_freem(), essentially). | Angelos D. Keromytis | |
1997-08-01 | when family is AF_UNSPEC, | flipk | |
ether_shost fields no longer get set for us. initialize them ourselves. | |||
1997-07-31 | some indentation stuff | Theo de Raadt | |
1997-07-28 | make it compile | Niels Provos | |
1997-07-28 | Make struct in_addr contain an in_addr_t since that's what | Todd C. Miller | |
in_addr_t is for (same basic type so we don't break anything). | |||
1997-07-27 | expiration messages, fixes, updates, all sorts of things | Niklas Hallqvist | |
1997-07-27 | hardcode list of ports to not randomly allocate; will add configuration later | Theo de Raadt | |
1997-07-24 | do not ignore IFF_NOARP | Theo de Raadt | |
1997-07-24 | bail properly if malloc fails | Theo de Raadt | |
1997-07-24 | network byte order for counters | Theo de Raadt | |
1997-07-24 | cmd is a u_long | Theo de Raadt | |
1997-07-24 | cmd is a u_long | Theo de Raadt | |
1997-07-21 | make this compile until niklas fixes the boo-boo | Theo de Raadt | |
1997-07-18 | enablespi/disablespi in encap + print spi's in hostorder | Niels Provos | |
1997-07-15 | flags for tunnels and replacing existing routes, sysctl! + tiny bug fix | Niels Provos | |
1997-07-14 | global byte counters. | Niels Provos | |
1997-07-14 | sysctl... | Niels Provos | |
1997-07-14 | routes with zero spi can be used to avoid ipsec processing | Niels Provos | |
1997-07-12 | fixed tiny bug in pad values and hmac inner hash lengths. should work now. | Niels Provos | |
1997-07-11 | obsolete. | Niels Provos | |
1997-07-11 | put old esp/ah and new esp/ah in different files. | Niels Provos | |
generalised way of handling transforms. | |||
1997-07-06 | unsigned calc should be signed; jdp@polstra.com; freebsd pr#3998 | Theo de Raadt | |
1997-07-02 | fix neglected _FLEN's + reserve_spi + output reserved spi's without alg. | Niels Provos | |
correctly. | |||
1997-07-02 | Move prototype for bindresvport(3) to <netiniet/in.h> as it is | Todd C. Miller | |
not rpc-specific and other stuff uses it now. | |||
1997-07-01 | major restructuring | Niels Provos | |
1997-06-27 | udp icmp errors had ip_len 20 bytes too large; stevens p774; ↵ | Theo de Raadt | |
koji@math.human.nagoya-u.ac.jp | |||
1997-06-25 | hard and soft limits for SPI's per absolute timer, relative since establish, | Niels Provos | |
relative since first use timers, packet and byte counters. notify key mgmt on soft limits. key mgmt can now specify limits. new encap messages: EMT_RESERVESPI, EMT_ENABLESPI, EMT_DISABLESPI | |||
1997-06-24 | use ntohs instead of NTOHS for counters | Niels Provos | |
1997-06-24 | correct AH options hashing. | Niels Provos | |