summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2001-05-16No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok)Hakan Olsson
2001-05-16Don't clobber ip_sum; ip_output always sets this to 0 before callingFederico G. Schwindt
2001-05-15Accept ARP packet coming from bridge interface without IP addressGrigoriy Orlov
2001-05-13initial cut at /dev/crypto support. takes original mbuf "try, and discardTheo de Raadt
2001-05-12Less verbose; angelos@ okAaron Campbell
2001-05-12Move bzero() after test for correct allocation (jj@wabbitt.org)Angelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-05-08Fix realloc possible leak; this is userland, not kernel; reported byFederico G. Schwindt
2001-05-08When `dup-to if:addr' clause is used, be sure to rewrite the dest addrFederico G. Schwindt
2001-05-08IPfilter 3.4.17; kjell@ deraadt@ ok.Federico G. Schwindt
2001-05-05Check that SAs also match on the credentials and the IDs. This meansAngelos D. Keromytis
2001-05-01Fix tcp_signature_tdb_input decl; kernel compiles again if TCP_SIGNATUREFederico G. Schwindt
2001-05-01get rid of dtom(), okay itojun@ angelos@ mickey@ millert@Niels Provos
2001-05-01Typo in comment.Aaron Campbell
2001-04-23Missing splx in error handling.Artur Grabowski
2001-04-22Fix spl handling in ipfilter ioctl interface. Work by aaron@ and me.Grigoriy Orlov
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
2001-04-10allow host-to-host negotiations if no gateway has been specified.Niels Provos
2001-04-08Typo. __IP_FIL_H__ -> __IP_FRAG_H__smart
2001-04-07Partial update to IPF 3.4.17; this fixes the *VERY* serious fragmentFederico G. Schwindt
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2001-04-04do not check ip_mtudisc on IPv6 TCP.Jun-ichiro itojun Hagino
2001-03-30Protect the IF_XXX macros in the callback routines with splimp(). Doh!Angelos D. Keromytis
2001-03-28tdb_inp -> (tdb_inp_in, tdb_inp_out)Angelos D. Keromytis
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
2001-03-27Fix a problem with how TDB timeouts were used in pfkeyv2.Artur Grabowski
2001-03-25Protect KFREES by splnet and rearrange pointers. This fix interruptGrigoriy Orlov
2001-03-25A couple minor fixes to prevent use after free. Thanks to dawson and team for...Constantine Sapuntzakis
2001-03-23Fix slow mbuf leak.Angelos D. Keromytis
2001-03-18enable pmtu by defaultNiels Provos
2001-03-17Handle ftp services that don't ask for a password, only a username.Bob Beck
2001-03-15include <machine/cpu.h>, since schednetisr needs to do a splsoftnetBrandon Creighton
2001-03-15convert SA expirations to the new timeouts.Michael Shalayeff
2001-03-14provide a random start for tcp timestamps; niels@ okMichael Shalayeff
2001-03-13Force a new search for an SA if the latched one is deleted.Angelos D. Keromytis
2001-03-07More careful spl usage for the IPSEC case in ip_output(); from angelos@Aaron Campbell
2001-03-07Remove a bogus rtfree(); PR 1706brian
2001-03-07Missing SPL_X(); deraadt@ okAaron Campbell
2001-03-06Move the test for bogus packet length in udp_output() closer to the top ofAaron Campbell
2001-03-04Store peer's credentials in TDB.Angelos D. Keromytis
2001-03-03on parse error of timestamp option, set parameter error offset correctly.Jun-ichiro itojun Hagino
2001-03-03drop packets with 127.0.0.0/8 in header field, if the packet is from outside.Jun-ichiro itojun Hagino
2001-02-28Pretty.Angelos D. Keromytis
2001-02-28Handle failures more gracefully.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
2001-02-28If net.inet.ipip.allow is set to 2, don't check for loopback addressAngelos D. Keromytis
2001-02-27Remove superfluous printf in Angelos last commitNiklas Hallqvist
2001-02-20tighten IPv4 option header processing (we may want to do more).Jun-ichiro itojun Hagino
2001-02-16remove IPv6 case from udp_output. now we have separate udp6_output.Jun-ichiro itojun Hagino
2001-02-16pull in new pcb notification code from kame. better handling of scope address.Jun-ichiro itojun Hagino