Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-10-03 | If the TDB doesn't have an attached src/dst ID, it can be used for any | Angelos D. Keromytis | |
type of traffic. | |||
2001-09-26 | bring back the old copyright notice | Theo de Raadt | |
2001-09-24 | Reset the error return value if the cached TDB matches the | Angelos D. Keromytis | |
policy. Pointed out by jdmcbride@iol.ie | |||
2001-09-18 | Avoid memory leak when disabling PMTU, rt_timer_queue_destroy() expects the | Aaron Campbell | |
caller to free the structure. | |||
2001-09-05 | use %ll instead of %q | Theo de Raadt | |
2001-09-04 | Make it compile without option BPF. | Angelos D. Keromytis | |
2001-08-26 | Uninitialized variable. | Niklas Hallqvist | |
2001-08-22 | IPCOMP policy stuff missed the last time round | Niklas Hallqvist | |
2001-08-21 | Don't check for BYPASS options in PCB on ip_output/ip6_output --- this | Angelos D. Keromytis | |
is already done in ip_spd_lookup() | |||
2001-08-21 | When the outgoing socket has BYPASS set, don't bother calling the | Angelos D. Keromytis | |
PCB-checking routine. | |||
2001-08-19 | More old timeouts removal, mainly affected unused/unmaintained code. | Miod Vallat | |
2001-08-19 | Pass the interface (if any) to ipip_input(), so it can be used in | Angelos D. Keromytis | |
BPF. Closes PR 2000. | |||
2001-08-15 | bcmp done wrong, detected at bakeoff. Hint: always use | Niklas Hallqvist | |
relational operators when using *cmp APIs in conditional expressions. | |||
2001-08-09 | Don't check the source address on the packet vs. the one on the SA, as | Angelos D. Keromytis | |
this prevents use of ESP in mobility; pointed out on the IETF mailing list by Francis Dupont. | |||
2001-08-08 | Remove IPCOMP option, it's now part of IPSEC option. You still need to | Jean-Jacques Bernard-Gundol | |
enable ipcomp via sysctl to use it. deraadt@ ok. | |||
2001-08-07 | enable ah & esp by default, now that we trust the code more | Theo de Raadt | |
2001-08-06 | Don't drop packets if we're using an ACQUIRE policy and some error | Angelos D. Keromytis | |
occurs while notifying key mgmt; also, always check for new TDBs for policies where the destination gateway is left unspecified (end-to-end IPsec case), to avoid asking for new SAs from key mgmt. | |||
2001-07-27 | variable name "gif" is way too generic - use "gif_softc". sync with kame | Jun-ichiro itojun Hagino | |
2001-07-27 | do not check in_dstaddr in rtinitflags() macro, otherwise | Jun-ichiro itojun Hagino | |
linklocal address manipulation codepath will choke. sync with kame | |||
2001-07-23 | improve IFA_ROUTE handling. do not lose connected route on primary | Jun-ichiro itojun Hagino | |
interface address removals. | |||
2001-07-21 | repair IPv6 TCP. th_sum has to be initialized to 0 on template. | Jun-ichiro itojun Hagino | |
(older code had "th_sum = 0" at the bottom of the function, which was removed during TCP hardware checksumming change) | |||
2001-07-18 | zero tcp checksum field before calculating new value. | Marco S Hyman | |
Fixes problem with bad checksums on keepalives OK provos@ | |||
2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
2001-07-17 | Use 64 bits integer for ipcomps_ibytes and ipcomps_obytes. 32 bits was | Jean-Jacques Bernard-Gundol | |
used and it gave strange results with netstat -s. Reported by art@ | |||
2001-07-16 | Move altq after pf; suggested by aaron@, kjc@ ok. | Federico G. Schwindt | |
2001-07-08 | Remove static from func decls | Niklas Hallqvist | |
2001-07-07 | fix comment to make life easier for my special friend darren. | Niels Provos | |
2001-07-06 | Don't use enc0 interface for IPComp. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-05 | IP6_EXTHDR_GET0 did not check m->m_len (noone was using this macro). | Jun-ichiro itojun Hagino | |
sync with kame | |||
2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-05 | IPComp. Just like for deflate earlier, it won't be compiled until everything | Jean-Jacques Bernard-Gundol | |
is in the tree | |||
2001-07-05 | Style | Angelos D. Keromytis | |
2001-07-05 | Typo. | Angelos D. Keromytis | |
2001-07-05 | Style | Angelos D. Keromytis | |
2001-07-05 | IPComp itself (include files). angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-04 | Make preprocessor happier, don't give it untasty tokens at end of input. | Marc Espie | |
Ok millert@ | |||
2001-07-04 | handle m->m_pkthdr.rcvif == NULL; temporarily ok deraadt@; pending itojun@ | Daniel Hartmeier | |
2001-07-04 | Explicitly list the new ICMP codes. | Angelos D. Keromytis | |
2001-07-04 | Update with codes, URL, RFCs, from jason@Ackley.NET, closes PR 1919 | Angelos D. Keromytis | |
2001-07-03 | Pointer arithmetic fixes work better when you get the casting right. | Angelos D. Keromytis | |
2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not ↵ | Daniel Hartmeier | |
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@ | |||
2001-06-29 | move pf_test check to happen after checksum calculation - without | Bob Beck | |
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@) | |||
2001-06-29 | saner checking in icmp_error; from NetBSD with work by dug and me. | Niels Provos | |
2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
okay dhartmei@, dugsong@ | |||
2001-06-27 | introduce the ALTQ queue macros into sys/net files. | Kenjiro Cho | |
the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt | |||
2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
2001-06-27 | Use TAILQ_FOREACH() instead of hand-crafted for loops. | Angelos D. Keromytis | |
2001-06-27 | When determining whether there's a pending acquire wrt a policy, look | Angelos D. Keromytis | |
at the acquires associated with the policy only. | |||
2001-06-27 | Attach IPsec acquire state to policy entries, and relevant cleanups. | Angelos D. Keromytis | |
2001-06-27 | Also link acquire state to the relevant IPsec policy. | Angelos D. Keromytis | |