| Age | Commit message (Expand) | Author |
|---|
| 1999-05-14 | A new scalable IPsec SA expiration model. | Niklas Hallqvist |
| 1999-05-12 | Obvious pasto | Niklas Hallqvist |
| 1999-05-12 | Follow local indentation style. | Hakan Olsson |
| 1999-05-12 | Fix problem with data corruption for retransmitted TCP packets | Hakan Olsson |
| 1999-05-11 | Remove cruft that wasted space en masse in the IPsec subsystem | Niklas Hallqvist |
| 1999-04-28 | zap the newhashinit hack. | Artur Grabowski |
| 1999-04-23 | dont accept packets with the destination address of a down interface; | Niels Provos |
| 1999-04-22 | Heh, this was definitely not tested. cpp sytax errors. | Niklas Hallqvist |
| 1999-04-21 | From Tom Henderson <tomh@cs.berkeley.edu>: | Niels Provos |
| 1999-04-20 | messup, learn to test *all* variants of compile options when | Niklas Hallqvist |
| 1999-04-20 | use open() with O_EXCL.. but also move to /var/run to avoid the 2nd-level /tm... | Theo de Raadt |
| 1999-04-20 | Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets. | Niklas Hallqvist |
| 1999-04-16 | fix ipf return-rst panic bug; beck | Theo de Raadt |
| 1999-04-12 | move encdebug to a useful place | Theo de Raadt |
| 1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist |
| 1999-04-09 | The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4) | Niklas Hallqvist |
| 1999-04-09 | Make the tdbi handling more robust, removes a panic case | Niklas Hallqvist |
| 1999-04-09 | Check for local address spoofing on encapsulated packets. | Angelos D. Keromytis |
| 1999-04-04 | fix tunnelling; provos | Theo de Raadt |
| 1999-03-27 | add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoing | Niels Provos |
| 1999-03-24 | Implement lifetime expiration notifications. Fix some typos. Remove statics. | Niklas Hallqvist |
| 1999-03-24 | Reworked udp_output() to minimize the number of if() statements needed to get | cmetz |
| 1999-03-24 | Removed inclusion of netinet6/in6.h. This was an artifact of when the core | cmetz |
| 1999-03-24 | Removed old NRL convention in6a_words virtual-field from struct in6_addr. | cmetz |
| 1999-03-24 | Replace 'in6a_words' (old NRL convention) with 's6_addr32' (new BSDI et al. | cmetz |
| 1999-03-13 | indent | Theo de Raadt |
| 1999-03-06 | Update IP pointer, when doing multiple transforms. | Angelos D. Keromytis |
| 1999-03-04 | be more careful with freeing TDBs | Theo de Raadt |
| 1999-03-04 | more paranoid maintenance | Theo de Raadt |
| 1999-02-25 | Prettier reporting, report number of flows in use per SA. | Angelos D. Keromytis |
| 1999-02-25 | Skipjack key bzero'ing case. | Angelos D. Keromytis |
| 1999-02-25 | Print more information in /kern/ipsec | Angelos D. Keromytis |
| 1999-02-25 | Bzero key information before free'ing it, just for paranoia's sake. | Angelos D. Keromytis |
| 1999-02-25 | Use M_XDATA for the key schedule, instead of M_TEMP. | Angelos D. Keromytis |
| 1999-02-25 | Clear the DF bit, so packets don't get dropped inside a tunnel. | Angelos D. Keromytis |
| 1999-02-25 | Be a bit more paranoid before free'ing memory. | Angelos D. Keromytis |
| 1999-02-25 | Move union sockaddr_union to ip_ipsp.h | Angelos D. Keromytis |
| 1999-02-24 | Update copyright; remove a few annoying debugging printfs. | Angelos D. Keromytis |
| 1999-02-24 | add skipjack support back | Theo de Raadt |
| 1999-02-24 | Remove encap.h include; saner debugging printfs; fix buglets; work with | Angelos D. Keromytis |
| 1999-02-24 | Added in.h definitions required by IPv6 Basic API and Advanced API specs, and | cmetz |
| 1999-02-23 | Forgot this. | Angelos D. Keromytis |
| 1999-02-23 | This one seems to work, at least in the direction Sparc->i386. | Angelos D. Keromytis |
| 1999-02-23 | Turns out the patch didn't fix the problem. Reverting to old code. | Angelos D. Keromytis |
| 1999-02-23 | Fix an endianness problem (not an issue in libc). | Angelos D. Keromytis |
| 1999-02-21 | split ipintr() to create new ipv4_input() for tunnels; NRL | Theo de Raadt |
| 1999-02-19 | fix definition of plen for ICMP (ping -s73 problem) | Kjell Wooding |
| 1999-02-19 | ipq locking | Theo de Raadt |
| 1999-02-19 | when checking for weak keys compare sizeof(des_cblock) bytes insetad of sizeo... | Artur Grabowski |
| 1999-02-17 | add fragment flood protection; configureable using sysctl ip.maxqueue | Theo de Raadt |
