summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
1999-04-16fix ipf return-rst panic bug; beckTheo de Raadt
1999-04-12move encdebug to a useful placeTheo de Raadt
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
1999-04-09The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4)Niklas Hallqvist
1999-04-09Make the tdbi handling more robust, removes a panic caseNiklas Hallqvist
1999-04-09Check for local address spoofing on encapsulated packets.Angelos D. Keromytis
1999-04-04fix tunnelling; provosTheo de Raadt
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
1999-03-24Implement lifetime expiration notifications. Fix some typos. Remove statics.Niklas Hallqvist
1999-03-24Reworked udp_output() to minimize the number of if() statements needed to getcmetz
1999-03-24Removed inclusion of netinet6/in6.h. This was an artifact of when the corecmetz
1999-03-24Removed old NRL convention in6a_words virtual-field from struct in6_addr.cmetz
1999-03-24Replace 'in6a_words' (old NRL convention) with 's6_addr32' (new BSDI et al.cmetz
1999-03-13indentTheo de Raadt
1999-03-06Update IP pointer, when doing multiple transforms.Angelos D. Keromytis
1999-03-04be more careful with freeing TDBsTheo de Raadt
1999-03-04more paranoid maintenanceTheo de Raadt
1999-02-25Prettier reporting, report number of flows in use per SA.Angelos D. Keromytis
1999-02-25Skipjack key bzero'ing case.Angelos D. Keromytis
1999-02-25Print more information in /kern/ipsecAngelos D. Keromytis
1999-02-25Bzero key information before free'ing it, just for paranoia's sake.Angelos D. Keromytis
1999-02-25Use M_XDATA for the key schedule, instead of M_TEMP.Angelos D. Keromytis
1999-02-25Clear the DF bit, so packets don't get dropped inside a tunnel.Angelos D. Keromytis
1999-02-25Be a bit more paranoid before free'ing memory.Angelos D. Keromytis
1999-02-25Move union sockaddr_union to ip_ipsp.hAngelos D. Keromytis
1999-02-24Update copyright; remove a few annoying debugging printfs.Angelos D. Keromytis
1999-02-24add skipjack support backTheo de Raadt
1999-02-24Remove encap.h include; saner debugging printfs; fix buglets; work withAngelos D. Keromytis
1999-02-24Added in.h definitions required by IPv6 Basic API and Advanced API specs, andcmetz
1999-02-23Forgot this.Angelos D. Keromytis
1999-02-23This one seems to work, at least in the direction Sparc->i386.Angelos D. Keromytis
1999-02-23Turns out the patch didn't fix the problem. Reverting to old code.Angelos D. Keromytis
1999-02-23Fix an endianness problem (not an issue in libc).Angelos D. Keromytis
1999-02-21split ipintr() to create new ipv4_input() for tunnels; NRLTheo de Raadt
1999-02-19fix definition of plen for ICMP (ping -s73 problem)Kjell Wooding
1999-02-19ipq lockingTheo de Raadt
1999-02-19when checking for weak keys compare sizeof(des_cblock) bytes insetad of sizeo...Artur Grabowski
1999-02-17add fragment flood protection; configureable using sysctl ip.maxqueueTheo de Raadt
1999-02-17ipsec skipjack, based on free .fi code (some .gov type will test this for me)Theo de Raadt
1999-02-17indentTheo de Raadt
1999-02-17indent; remove local typesTheo de Raadt
1999-02-17inet6 indentTheo de Raadt
1999-02-16Fix a padding check bug in the experimental-padding. iliya@ericom.comAngelos D. Keromytis
1999-02-15when allocating sack blocks check for failing malloc(), if it failsNiels Provos
1999-02-12angelos cannot spell small wordsTheo de Raadt
1999-02-09correct rst handling should not consult ack field hereHugh Graham
1999-02-08init incr tcp iss from snd_nxt, not rcv_nxt; 4.4Theo de Raadt
1999-02-05ipf 3.2.10; work by kjellTheo de Raadt
1999-02-05indentTheo de Raadt
1999-02-05Clear mfchashtbl after deallocation (mycroft@netbsd)Angelos D. Keromytis