summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
2001-06-26Use the ACQUIRE sequence number to "wake up" acquire state kept andAngelos D. Keromytis
2001-06-26ifdef out some currently unused codeAngelos D. Keromytis
2001-06-26Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec acquires too.Angelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26no longer pass around **mTheo de Raadt
2001-06-26Appease gcc by not using void pointers in arithmetic operations.Aaron Campbell
2001-06-26Restore inclusion of <sys/systm.h>.Aaron Campbell
2001-06-26KNFAngelos D. Keromytis
2001-06-26More KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-25damn greeks desperate for commits...Bob Beck
2001-06-25KNFAngelos D. Keromytis
2001-06-25If a PENDING_TDB tag is attached but no TDB is found, drop the packet.Angelos D. Keromytis
2001-06-25Build without IPSEC.Artur Grabowski
2001-06-25Check the length of the tag (diagnostic)Angelos D. Keromytis
2001-06-25Apply pending TDBs (as indicated by tags). This will be used to handleAngelos D. Keromytis
2001-06-25Copyright.Angelos D. Keromytis
2001-06-25Don't double-clear M_PKTHDR/tags.Angelos D. Keromytis
2001-06-25Defer output checksumming until ip_output() or hardware.Angelos D. Keromytis
2001-06-25Remove unnecessary temporary variable.Angelos D. Keromytis
2001-06-25Always defer output TCP checksumming until ip_output() (or hardware,Angelos D. Keromytis
2001-06-25put pf before ipsec processing. return error code and free mbuf chainNiels Provos
2001-06-25Use in_cksum_phdr() rather than in_cksum() -- from NetBSDAngelos D. Keromytis
2001-06-24More descriptive panic messages, sync with NetBSDAngelos D. Keromytis
2001-06-24make it compile w/o pfMichael Shalayeff
2001-06-24Import in_cksum_phdr() and in_cksum_addword() from NetBSD.Angelos D. Keromytis
2001-06-24Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum.Angelos D. Keromytis
2001-06-24Import in_delayed_cksum() and convert to using it; also, don't doAngelos D. Keromytis
2001-06-24print mtu of tdb if discoveredNiels Provos
2001-06-24Remove printfs, fix comment typos.Angelos D. Keromytis
2001-06-24Save tdb_remote_auth on the PCB on latching; also save information onAngelos D. Keromytis
2001-06-24Also reset input cached TDB.Angelos D. Keromytis
2001-06-24ResetAngelos D. Keromytis
2001-06-24use new timeouts for spd expirations (hmm cvs did not pick up the file); ho@ okMichael Shalayeff
2001-06-24use new timeouts for spd expirations; ho@ okMichael Shalayeff
2001-06-24Print TDBF_USEDTUNNEL in ipsp_kern()Angelos D. Keromytis
2001-06-24Initial import of pf, an all-new ipf-compatable packet filter.Kjell Wooding
2001-06-24take mtu from routing tableNiels Provos
2001-06-24check if ipsec processing increases packet size above allowable mtu.Niels Provos
2001-06-24path mtu discovery for ipsec. on receiving a need fragment icmp matchNiels Provos
2001-06-24remove whitespaceNiels Provos
2001-06-23Put some constants together and calculate max/min mtu based on those;Federico G. Schwindt
2001-06-23Add comment on why checksum deferral is not useful in tcp_respond()Angelos D. Keromytis
2001-06-23Clear the checksum flags after verification. Also, don't countAngelos D. Keromytis
2001-06-23Count input packets hardware-checksummed.Angelos D. Keromytis
2001-06-23merge crypto/crypto{dev,}.h to crypto/cryptodev.h, to avoid name conflicts in...Theo de Raadt