Age | Commit message (Expand) | Author |
2008-10-22 | #if INET => #ifdef INET | Marco Pfatschbacher |
2008-10-22 | filter ipv6 ipsec packets on enc0 (in and out), similar to ipv4; | Markus Friedl |
2008-10-16 | Kill M_HASFCS, it is not used in OpenBSD. If a ethernet chip returns the | Claudio Jeker |
2008-10-13 | disable the pcb linking for udp for the moment since there is some weird | Henning Brauer |
2008-10-10 | back out previous change. Another panic, not as frequent, and | David Hill |
2008-10-10 | Comment out statekey code to stop 'panic: soreceive 3', which | David Hill |
2008-09-28 | Ansify function declarations for gif(4). | Joel Sing |
2008-09-28 | Clear the PF state key before an IP packet exits a gif(4) tunnel, in order | Joel Sing |
2008-09-16 | remove another dead store. | Charles Longeau |
2008-09-15 | remove dead stores and newly created unused variables. | Charles Longeau |
2008-09-10 | Convert timeout_add() calls using multiples of hz to timeout_add_sec() | Bret Lambert |
2008-09-10 | icmp_reflect reuses mbufs. call pf_pkt_addr_changed to clear the state | Henning Brauer |
2008-09-09 | The pf state to pcb linking code change didn't account for the | Marco Pfatschbacher |
2008-09-03 | do not set the pkthdr mbuf state key pointer to the state key saved in the | Henning Brauer |
2008-09-03 | Prevent a possible overflow when the sum of all demotion counters | Marco Pfatschbacher |
2008-08-26 | we need to call pf_pkt_addr_changed here too. found by david | Henning Brauer |
2008-08-26 | call pf_pkt_addr_changed instead of manually clearing the pf state key ptr | Henning Brauer |
2008-08-21 | Assign the ip and ip6 pointers in ipsp_process_packet() only if a | Alexander Bluhm |
2008-07-29 | when detaching pcbs, also free the v6 output options so that we do not | Theo de Raadt |
2008-07-24 | ipsec is glued into the stack in a very weird way, violating all kinds | Henning Brauer |
2008-07-22 | Assign the struct size to sin6_len instead of sin6_family. | Alexander Bluhm |
2008-07-16 | link udp pcbs to pf states, same as done for tcp already | Henning Brauer |
2008-07-10 | add X11 ports to default TCP baddynamic list | Damien Miller |
2008-07-09 | expand the net.inet.(tcp|udp).baddynamic dynamic source port | Damien Miller |
2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
2008-06-28 | no EOL between tcpsig and sack headers; ok jsing, frantzen | Markus Friedl |
2008-06-26 | First pass at removing clauses 3 and 4 from NetBSD licenses. | Ray Lai |
2008-06-14 | make easier to read, found during a bug hunt earlier | Todd T. Fries |
2008-06-14 | Include "faith.h" in order to get NFAITH. Also clean up NFAITH conditionals | Joel Sing |
2008-06-14 | add carppeer; an option to specify a different multicast address or | Reyk Floeter |
2008-06-14 | ANSIfy function definitions. | Joel Sing |
2008-06-14 | Include "pf.h" so we get NPF. | Joel Sing |
2008-06-13 | Do not log carp state transitions from or to INIT by default. | Marco Pfatschbacher |
2008-06-12 | Remove some crazy #if mess. | Joel Sing |
2008-06-12 | ANSIfy function definitions. | Joel Sing |
2008-06-12 | Fix type difference between function prototype and implementation. | Joel Sing |
2008-06-11 | 0 -> PR_NOWAIT (which is defined as 0) in pool_get | Bret Lambert |
2008-06-11 | fix an old typo that prevented outer ipv6 headers from being corrected, | Can Erkin Acar |
2008-06-10 | encapsulating v4 in v6 IPSec should not be so fun, | Todd T. Fries |
2008-06-09 | rename arc4random_bytes => arc4random_buf to match libc's nicer name; | Damien Miller |
2008-06-08 | When adding PMTU related routes to the table inherit the priority form the | Claudio Jeker |
2008-06-08 | alloc ipq's for fragment reassembly from a pool instead of using | Thordur I. Bjornsson |
2008-06-06 | we must not hardcode the route priority in arplookup, it does not | Henning Brauer |
2008-06-04 | adderss -> address | Miod Vallat |
2008-05-24 | Remove {tcp/udp}6_usrreq(); Since the normal ones now | Thordur I. Bjornsson |
2008-05-23 | Deal with the situation when TCP nfs mounts timeout and processes | Thordur I. Bjornsson |
2008-05-19 | Unbreak builds for kernels that have atm interfaces. Found the hard way by | Claudio Jeker |
2008-05-15 | divert for ipv6; ok henning, pyr | Markus Friedl |
2008-05-11 | Try harder to avoid corrupting the mbuf pool. Stuff any mbuf chain in | Kenneth R Westerback |
2008-05-09 | more rtrequest() to rtrequest1() replacement. | Claudio Jeker |