| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2000-04-19 | tdb_ref should be signed, this avoid a problem with flushing the TDB | Angelos D. Keromytis | |
| table causing repeated allocations of bypass TDBs. | |||
| 2000-04-18 | Remove the ethernet header from the mbuf before passing it on to | Angelos D. Keromytis | |
| bridge_input() | |||
| 2000-04-14 | make "option TCPDEBUG" kernel compile. | Jun-ichiro itojun Hagino | |
| PR1186 from "Robert Mooney" <rjmooney@atl.mediaone.net>. (printf format change is not bringed in - i'm unsure about it) | |||
| 2000-04-14 | for layer 3 protocols that does not support path MTU discovery | Jun-ichiro itojun Hagino | |
| (I mean, IPv4) do not try to use rmx_mtu on routing table. this symptom was introduced by rmx_mtu initialization (necessary for IPv6 path MTU discovery) in net/route.c. now prior behavior is recovered. From: Hugh Graham <hugh@openbsd.org> there are several question about mssdflt semantics, though: Question 1: with the current code, mssdflt does not override rmx_mtu value (mssdflt overrides interface mtu only). should we override rmx_mtu by mssdflt as well? Question 2: with the current code, mssdflt overrides mss computed from if mtu, only when the destination is IPv4 non-local. is it safe enough? we may want to use mssdflt, whenever we are uncertain. mss = if mtu - hdrsiz; if (IPv4 non-local destination) mss = min(mss, mssdflt); | |||
| 2000-04-13 | When fragmenting a packet, inherit the multicast and broadcast flags so that | Artur Grabowski | |
| the link layer can choose the right address. | |||
| 2000-04-13 | #ifndef the definitions of IPSTATE_MAX and IPSTATE_SIZE | Kjell Wooding | |
| This allows the redefinition of these constants in mk.conf, for example. mep@netset.net | |||
| 2000-04-12 | bump ipf version (3.3.12a) to go with last commit | Kjell Wooding | |
| 2000-04-12 | FTP Proxy changes introduced in 3.3.12 were too agressive. Tone down | Kjell Wooding | |
| a bit. posted to ipf list by darrenr@pobox.com | |||
| 2000-04-11 | Don't add an extra 20 bytes to ip_len, m_pkthdr.len is already updated | Angelos D. Keromytis | |
| by M_PREPEND. | |||
| 2000-04-10 | Oops on sanity logic. | Angelos D. Keromytis | |
| 2000-04-09 | Pass ip_off and ip_len in the correct byte order to icmp_error(); this | Angelos D. Keromytis | |
| should fix the crash problems with isic, reported last week. | |||
| 2000-04-06 | only call get_random_bytes() once in m_pad() | Theo de Raadt | |
| 2000-04-05 | Update to ipf 3.3.12. Most fixes relate to hardening of | Kjell Wooding | |
| in-kernel ftp proxy. See sbin/ipf/HISTORY for details. | |||
| 2000-04-04 | Verbiage fix. | Angelos D. Keromytis | |
| 2000-03-30 | Only allocate space for a copy of the authenticator if authentication | Angelos D. Keromytis | |
| is in use. | |||
| 2000-03-30 | Set re_rt to NULL, so we don't double free. | Angelos D. Keromytis | |
| 2000-03-29 | Be consistent about packet properties. | Angelos D. Keromytis | |
| 2000-03-29 | Fix problem with TCP/UDP and ACLs. | Angelos D. Keromytis | |
| 2000-03-29 | Minor cleanup. | Angelos D. Keromytis | |
| 2000-03-29 | Note to self: test before committing. | Angelos D. Keromytis | |
| 2000-03-29 | Conform to crypto framework changes for IVs. | Angelos D. Keromytis | |
| 2000-03-28 | Allow authentication-only ESP (must have broken it in the previous | Angelos D. Keromytis | |
| round of commits). | |||
| 2000-03-28 | Set the protocol family in the destination address of bypass flows. | Angelos D. Keromytis | |
| 2000-03-27 | As I threatened a while ago, ingress IPsec ACL-checking is turned on | Angelos D. Keromytis | |
| by default. Read the ipsecadm(8) man page for more details on how to specify ingress filters with manual keying. isakmpd has been doing this for a while now. | |||
| 2000-03-25 | Fix typo causing crash if ESP was used with only authentication or | Angelos D. Keromytis | |
| encryption (not both). Problem noted by jason@openbsd.org | |||
| 2000-03-22 | comment out ifconfig undo code. they are necessary to avoid memory | Jun-ichiro itojun Hagino | |
| leakage, however, was too strict that they disallow multiple address from same prefix to be assigned (when rtinit returns EEXIST). we'll need to improve it. | |||
| 2000-03-21 | Fix casting so it compiles on alphas (testing by janjaap@stack.nl, | Angelos D. Keromytis | |
| closing pr #1150) | |||
| 2000-03-21 | Fix function to comply with prototype. Kind of moot, as tcp signatures | Angelos D. Keromytis | |
| don't work yet anyhow, so there's no point compiling them in. | |||
| 2000-03-17 | remove multiple function declarations. | Artur Grabowski | |
| 2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis | |
| idea is to support various cryptographic hardware accelerators (which may be (detachable) cards, secondary/tertiary/etc processors, software crypto, etc). Supports session migration between crypto devices. What it doesn't (yet) support: - multiple instances of the same algorithm used in the same session - use of multiple crypto drivers in the same session - asymmetric crypto No support for a userland device yet. IPsec code path modified to allow for asynchronous cryptography (callbacks used in both input and output processing). Some unrelated code simplification done in the process (especially for AH). Development of this code kindly supported by Network Security Technologies (NSTI). The code was writen mostly in Greece, and is being committed from Montreal. | |||
| 2000-03-13 | Import of Darren Reed's IPFilter 3.3.11. See sbin/ipf/HISTORY for detailed | Kjell Wooding | |
| changelog. Documentation changes are now way behind. Volunteers? | |||
| 2000-03-12 | undo interface address addition, if in_ifinit fails. | Jun-ichiro itojun Hagino | |
| 2000-03-10 | cleared wrong amount of memory in skipjack zerokey, causes bigtime crashes | Theo de Raadt | |
| 2000-03-09 | change struct icmp6_filter member name: s/icmp6_filter/icmp6_filt/, | Jun-ichiro itojun Hagino | |
| to be compliant with RFC2292. From: Francis Dupont | |||
| 2000-03-07 | add ETHERTYPE_8021Q | Chris Cappuccio | |
| 2000-03-03 | remove WIDE's experimental ip reass code, mistakingly merged in partially. | Jun-ichiro itojun Hagino | |
| NetBSD PR: 9412 Fix from: ho@crt.se | |||
| 2000-02-29 | ensure tcp window size does not overflow (16bit unsigned after window scale). | Jun-ichiro itojun Hagino | |
| FreeBSD PR: 16914 | |||
| 2000-02-28 | move crypto code | Theo de Raadt | |
| 2000-02-28 | upgrade node information query protocol support from 04 draft to | Jun-ichiro itojun Hagino | |
| draft-ietf-ipngwg-icmp-name-lookups-05.txt. NOTE: 04 and 05 has no interoperability, in terms of "ping6 -a". | |||
| 2000-02-28 | bring in recent KAME changes (only important and stable ones, as usual). | Jun-ichiro itojun Hagino | |
| - remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case) | |||
| 2000-02-24 | hide IP6_EXTHDR_CHECK from the userland. | Jun-ichiro itojun Hagino | |
| 2000-02-21 | TCP SACK fixes via Tom Henderson (tomh@cs.berkeley.edu): | Niels Provos | |
| - tcp_sack_adjust() was completely rewritten, since it was erroneously referencing receiver side sequence numbers and comparing with sender side sequence numbers (thanks to Arun Desai (adesai@cisco.com) who discovered the problem) - in tcp_output(), moved assignment of sendalot=0 to the piece of code immediately following the search for sack-eligible retransmissions (bug identified by Arun Desai). - tcp_input() was not clearing t_dupacks if fewer than three dupacks arrived between acks of new data. (bug identified by Gaurav Banga (gaurav@netapp.com)) | |||
| 2000-02-18 | Get rid of printf message from ipf enable, as per theo's request. | Kjell Wooding | |
| 2000-02-18 | fix alignment problem in ancillary data (alpha). | Jun-ichiro itojun Hagino | |
| only ipv6 tools (which touches ancillary data) are affected. From: =?iso-8859-1?Q?G=F6ran_Bengtson?= <goeran@cdg.chalmers.se> | |||
| 2000-02-16 | Import IPFilter 3.3.9. Primarily, bugfixes since 3.3.8. See sbin/ipf/HISTORY | Kjell Wooding | |
| for details. | |||
| 2000-02-10 | add PPPoE Discovery- and Session-Stage ETHERTYPEs | Jason Wright | |
| 2000-02-09 | improve RFC2553/2292 conformance. netinet6/{ip6,icmp6,in6}.h should not | Jun-ichiro itojun Hagino | |
| be included. neitnet6/{ip6,icmp6}.h includes #error statements only - i'll remove them couple of days later. | |||
| 2000-02-09 | don't need netinet6/in6.h | Jun-ichiro itojun Hagino | |
| 2000-02-07 | s/DIAGNOSTIC/DEBUG/ | Jun-ichiro itojun Hagino | |
| 2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |