summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2000-05-04Bypass routes only worked for one packet, then they effectively became aNiklas Hallqvist
2000-05-01Update to ipfilter 3.3.13. This should be the last of the 3.3.x releases.Kjell Wooding
2000-04-28actually m_adj tries to drop tcp header part. it is better toJun-ichiro itojun Hagino
2000-04-27mbuf is freed by sbappend(), move the references to th up. found by art@Niels Provos
2000-04-27add TCP port 587 to default list of reserved ports not to allocate dynamicall...Todd C. Miller
2000-04-27avoid infinite loop in in{6,}_pcbnotify (can occurs on family mismatch)Jun-ichiro itojun Hagino
2000-04-26add ARCTYPE_INET6Jakob Schlyter
2000-04-25Avoid divide-by-zero; from FreeBSD PR/8990 and NetBSD PR/6541. Use the same fixAaron Campbell
2000-04-25when fixing up the header, copy from the right sized datatype (fixes IPsecJason Wright
2000-04-21NRL pcb issue; inp_{f,l}addr{,6} is a union so we need to be sure aboutJun-ichiro itojun Hagino
2000-04-19tdb_ref should be signed, this avoid a problem with flushing the TDBAngelos D. Keromytis
2000-04-18Remove the ethernet header from the mbuf before passing it on toAngelos D. Keromytis
2000-04-14make "option TCPDEBUG" kernel compile.Jun-ichiro itojun Hagino
2000-04-14for layer 3 protocols that does not support path MTU discoveryJun-ichiro itojun Hagino
2000-04-13When fragmenting a packet, inherit the multicast and broadcast flags so thatArtur Grabowski
2000-04-13#ifndef the definitions of IPSTATE_MAX and IPSTATE_SIZEKjell Wooding
2000-04-12bump ipf version (3.3.12a) to go with last commitKjell Wooding
2000-04-12FTP Proxy changes introduced in 3.3.12 were too agressive. Tone downKjell Wooding
2000-04-11Don't add an extra 20 bytes to ip_len, m_pkthdr.len is already updatedAngelos D. Keromytis
2000-04-10Oops on sanity logic.Angelos D. Keromytis
2000-04-09Pass ip_off and ip_len in the correct byte order to icmp_error(); thisAngelos D. Keromytis
2000-04-06only call get_random_bytes() once in m_pad()Theo de Raadt
2000-04-05Update to ipf 3.3.12. Most fixes relate to hardening ofKjell Wooding
2000-04-04Verbiage fix.Angelos D. Keromytis
2000-03-30Only allocate space for a copy of the authenticator if authenticationAngelos D. Keromytis
2000-03-30Set re_rt to NULL, so we don't double free.Angelos D. Keromytis
2000-03-29Be consistent about packet properties.Angelos D. Keromytis
2000-03-29Fix problem with TCP/UDP and ACLs.Angelos D. Keromytis
2000-03-29Minor cleanup.Angelos D. Keromytis
2000-03-29Note to self: test before committing.Angelos D. Keromytis
2000-03-29Conform to crypto framework changes for IVs.Angelos D. Keromytis
2000-03-28Allow authentication-only ESP (must have broken it in the previousAngelos D. Keromytis
2000-03-28Set the protocol family in the destination address of bypass flows.Angelos D. Keromytis
2000-03-27As I threatened a while ago, ingress IPsec ACL-checking is turned onAngelos D. Keromytis
2000-03-25Fix typo causing crash if ESP was used with only authentication orAngelos D. Keromytis
2000-03-22comment out ifconfig undo code. they are necessary to avoid memoryJun-ichiro itojun Hagino
2000-03-21Fix casting so it compiles on alphas (testing by janjaap@stack.nl,Angelos D. Keromytis
2000-03-21Fix function to comply with prototype. Kind of moot, as tcp signaturesAngelos D. Keromytis
2000-03-17remove multiple function declarations.Artur Grabowski
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
2000-03-13Import of Darren Reed's IPFilter 3.3.11. See sbin/ipf/HISTORY for detailedKjell Wooding
2000-03-12undo interface address addition, if in_ifinit fails.Jun-ichiro itojun Hagino
2000-03-10cleared wrong amount of memory in skipjack zerokey, causes bigtime crashesTheo de Raadt
2000-03-09change struct icmp6_filter member name: s/icmp6_filter/icmp6_filt/,Jun-ichiro itojun Hagino
2000-03-07add ETHERTYPE_8021QChris Cappuccio
2000-03-03remove WIDE's experimental ip reass code, mistakingly merged in partially.Jun-ichiro itojun Hagino
2000-02-29ensure tcp window size does not overflow (16bit unsigned after window scale).Jun-ichiro itojun Hagino
2000-02-28move crypto codeTheo de Raadt
2000-02-28upgrade node information query protocol support from 04 draft toJun-ichiro itojun Hagino
2000-02-28bring in recent KAME changes (only important and stable ones, as usual).Jun-ichiro itojun Hagino