Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-06-09 | whitespace | Jun-ichiro itojun Hagino | |
2002-06-09 | support published arp entries again. PR 2635 (confirmed by submitter). | Jun-ichiro itojun Hagino | |
2002-06-09 | typo | Jun-ichiro itojun Hagino | |
2002-06-09 | force FDDI link MTU be FDDI IPv4 MTU. PR 2714. jason ok | Jun-ichiro itojun Hagino | |
2002-06-09 | Comment out currently-unused code (it's there for the ethernet-ipsec | Angelos D. Keromytis | |
cards, none of which we support at the moment). | |||
2002-06-09 | fix the use of "cuz" in the tree; these are all in comments | Jason Peel | |
noticed by aaron@, recommended by deraadt@ | |||
2002-06-09 | Set/clear M_AUTH_AH. | Angelos D. Keromytis | |
2002-06-08 | Break up icmp_error() so we can have the icmp error mbuf returned | jasoni | |
instead of it being sent to ip_output(). | |||
2002-06-08 | sync with latest KAME in6_ifaddr/prefix/default router manipulation. | Jun-ichiro itojun Hagino | |
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up. | |||
2002-06-08 | correctness | Chris Cappuccio | |
2002-06-07 | kill register; ok with itojun | jasoni | |
2002-06-07 | use TAILQ_FOREACH macro; ok angelos | jasoni | |
2002-06-07 | Use LIST macros instead of accessing field members directly; jason@ ok | Aaron Campbell | |
2002-06-07 | avoid is_ipv6 construct. a step towards IPv4-less kernel | Jun-ichiro itojun Hagino | |
2002-06-07 | no need for IPv4 mapped addr support | Jun-ichiro itojun Hagino | |
2002-06-07 | missing bzero! - now linklocal tcp works correctly | Jun-ichiro itojun Hagino | |
2002-06-04 | spaces to tabs, remove trailing whitespace | jasoni | |
2002-05-31 | respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos ok | Jun-ichiro itojun Hagino | |
2002-05-31 | Socket-specific IPsec policy. | Angelos D. Keromytis | |
2002-05-31 | Per-socket policies and authentication. Finally. | Angelos D. Keromytis | |
2002-05-31 | Socket-related IPsec sockoptions --- cleanups etc. | Angelos D. Keromytis | |
2002-05-31 | Move some common code to separate routines; also, fix the problem of | Angelos D. Keromytis | |
using the same SA for different traffic classes. Now, different SAs will be renegotiated as needed. XXX It's a sub-optimal (but correct) solution, as it looks for an exact match -- it should be checking for subset/subnet. One of these days... | |||
2002-05-31 | New fields in policy and TDB. | Angelos D. Keromytis | |
2002-05-31 | Keep an policy attached to each socket (that needs it), and cleanup as | Angelos D. Keromytis | |
needed on socket tear-down. | |||
2002-05-31 | Fix a DoS attack whereby an attacker could cause the replay counter to | Angelos D. Keromytis | |
advance with unauthenticated packets, thereby causing valid packets to be discarded as replays. This has been sitting in my tree for a while, and I've forgotten who it was that pointed out the problem. | |||
2002-05-30 | minor KNF. nuke obsolete IFF_LINK0 support completely | Jun-ichiro itojun Hagino | |
2002-05-29 | attach nd_ifinfo structure to if_afdata. | Jun-ichiro itojun Hagino | |
split IPv6 MTU (advertised by RA) from real link MTU. sync with kame | |||
2002-05-29 | move per-interface ip6/icmp6 stat to ifnet->if_afdata. sync w/kame | Jun-ichiro itojun Hagino | |
2002-05-28 | kill register; ok deraadt@ | jasoni | |
2002-05-28 | Factor out IP fragmentation code into its own function so it can be | jasoni | |
reused. - ok jason@, dhartmei@ | |||
2002-05-26 | remove extra spaces, tabs, and semicolon. | Federico G. Schwindt | |
2002-05-24 | add net.inet.icmp.tstamprepl sysctl for timestamp control; jason@ackley.net | Theo de Raadt | |
2002-05-16 | bring in ECN support from KAME. | Kenjiro Cho | |
it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@ | |||
2002-05-07 | move ether_crc32_le to if_ethersubr.c. Add ether_crc32_be | Nathan Binkert | |
2002-04-24 | Update IPsec-related comments. | Angelos D. Keromytis | |
2002-04-24 | Add hooks to struct ifnet that allow to register callbacks that will be | Daniel Hartmeier | |
notified of interface address changes. ok provos@, angelos@ | |||
2002-04-03 | Don't process WCCPv1-style GRE packets, unless allowed (via sysctl | Angelos D. Keromytis | |
variable); GRE processing must also be allowed. From joeycoleman@acm.org, ok deraadt@ niklas@ | |||
2002-04-01 | cleanup in_broadcast. don't consider /32 addrs as broadcast. | Jun-ichiro itojun Hagino | |
2002-03-27 | suppress "duplicate IP" message when booting machines with no initial IP. | Ian Darwin | |
2002-03-24 | m_freem(NULL) bad style, ok jason@ | Niklas Hallqvist | |
2002-03-24 | WCCP support (trivial hack, it's not the complete protocol, but it'll | Angelos D. Keromytis | |
accept packets from Cisco boxes) --- from joeycoleman@acm.org | |||
2002-03-19 | drop TCP connections to broadcast address. | Jun-ichiro itojun Hagino | |
From: "Crist J. Clark" <cjclark@alum.mit.edu> | |||
2002-03-15 | Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do things | Todd C. Miller | |
the ANSI way. | |||
2002-03-14 | Final __P removal plus some cosmetic fixups | Todd C. Miller | |
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-03-09 | check tiflags instead of th as th might point to freed memory; pointed out | Niels Provos | |
by wayne@stallion.oz.au; also whack register. | |||
2002-03-08 | use timeout(9) to schedule TCP timers. this avoid traversing all | Niels Provos | |
tcp connections during tcp_slowtimo. apdapted from thorpej@netbsd.org | |||
2002-03-02 | disable immediate ack on TH_PUSH. make behaviour sysctl tuneable. | Niels Provos | |
from netbsd; also fix a bug where setting TF_ACKNOW didn't actually result in an ack. | |||
2002-03-01 | remove tcp_fasttimo and convert delayed acks to the timeout(9) API instead. | Niels Provos | |
adapated from netbsd. okay angelos@ | |||
2002-03-01 | sync with KAME | Kenjiro Cho | |
move the function prototype of altq_etherclassify() from netinet/if_ether.h to altq/if_altq.h. |