summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
1998-02-03bail out for sourcerouted packets earlier, also do not forwardTheo de Raadt
sourcerouted packets ever if ipforwarding is off; tqbf@secnet.com
1998-02-03bad types; wileyc@sekiya.twics.co.jpTheo de Raadt
1998-02-01undo wildcard loopback stuff; it was not checked by other developersTheo de Raadt
1998-02-01support wildcard loopbacks. that is, setting up lo1 like:Michael Shalayeff
ifconfig lo1 inet 192.168.1.1 netmask 255.255.255.0 link1 would force it to act like all the addresses from net 192.168.1 were added to the interface. todo: man lo
1998-01-26IPF 3.2.3dgregor
1998-01-24sysctl for def sizes for tcp/udp send/recv queuesMichael Shalayeff
1998-01-21rcvif not needed.Niels Provos
1998-01-20s/(cast)0/NYLL/gMichael Shalayeff
1998-01-06so_linger is in secondsTheo de Raadt
1998-01-06net.inet.icmp.bmcastecho: do not smurf to smurfing broadcast packetsTheo de Raadt
1998-01-03ignore PRU_SHUTDOWN if socket is already shutdownTheo de Raadt
1997-12-03Prevent IPF and NAT configuration changes when securelevel > 1.kstailey
1997-11-30Move in_addr_t and in_port_t to <sys/types.h> and add sa_family_tTodd C. Miller
and suseconds_t types for XPG4.2.
1997-11-30hmm. If out of ports, return EADDRNOTAVAILTheo de Raadt
1997-11-24add ripemd-160 as authentication function.Niels Provos
1997-11-24Add missing (implied) int to a variable declaration; thorpejTheo de Raadt
1997-11-18fix 3DES, style changesTheo de Raadt
1997-11-18make old style padding default again.Niels Provos
1997-11-15fix memory management errorsTheo de Raadt
1997-11-12correct RST validity checking; fc@parkone.ci.oakland.ca.usTheo de Raadt
1997-11-12indentTheo de Raadt
1997-11-08grammar; bane@mournblade.NETural.comTheo de Raadt
1997-11-07$OpenBSD$Niklas Hallqvist
1997-11-04make it easier to add additional transforms. add blowfish and castNiels Provos
encryption. some more info for kernfs/ipsec.
1997-10-02conditional error loggingTheo de Raadt
1997-10-01should report unsigned quantitiesTheo de Raadt
1997-10-01verify decryption by checking last padding bytesTheo de Raadt
1997-09-30same as for ip_esp_new.c, and indentTheo de Raadt
1997-09-30do the 3-DES key setup right, will ya?Theo de Raadt
1997-09-29brain dead sanity tests correctedTheo de Raadt
1997-09-28more \n in log()Theo de Raadt
1997-09-28log() needs a \nTheo de Raadt
1997-09-24New style self-describing padding in use.Angelos D. Keromytis
1997-09-24Cosmetic changes.Angelos D. Keromytis
1997-09-23AH changes, after interoperating at the ANX bakeoff.Angelos D. Keromytis
1997-09-07for broadcast/multicast packets, correct m_pkthdr.len on the way up to the ↵Theo de Raadt
socket; drochner@zelz26.zel.kfa-juelich.de
1997-08-26indentTheo de Raadt
1997-08-26indentTheo de Raadt
1997-08-26new esp: encryption, authentication and replay protection +Niels Provos
tiny bug fixes
1997-08-19Add DP_CLR() macroTodd C. Miller
1997-08-19Theo doesn't like extra kernel options, so don't allowTodd C. Miller
DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to be overridden from the kernel. It's not really too useful since there is a nice sysctl interface for this stuff.
1997-08-16Allow DEFBADDYNAMICPORTS_TCP and DEFBADDYNAMICPORTS_UDP to beTodd C. Miller
overridden via kernel config file.
1997-08-16Just some more debugging info.Angelos D. Keromytis
1997-08-09The list of tcp/udp ports not to allocate dynamically is nowTodd C. Miller
a bitmask configurable via sysctl([38]). The default values have not changed. If one wants to change the list it should be done early on in /etc/rc.
1997-08-09SYN flood protection, by specifyingAngelos D. Keromytis
option TCPCOOKIE in the kernel config file. For very busy servers, consider raising the TCK_NFRIENDS value (it's currenly set to 16). Code originally from Matt Blaze and John Ioannidis.
1997-08-04No more crashes because of this bug (double m_freem(), essentially).Angelos D. Keromytis
1997-08-01when family is AF_UNSPEC,flipk
ether_shost fields no longer get set for us. initialize them ourselves.
1997-07-31some indentation stuffTheo de Raadt
1997-07-28make it compileNiels Provos
1997-07-28Make struct in_addr contain an in_addr_t since that's whatTodd C. Miller
in_addr_t is for (same basic type so we don't break anything).