summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
1999-07-18use proper CTheo de Raadt
1999-07-17revert tcp_input.c to before 07/01/1999 - this seems to solve the mysteriousNiels Provos
1999-07-17A good hashing function for IPsec SAs that should remove the risksNiklas Hallqvist
1999-07-15Protect better against rehashing make the kernel run out of resourcesNiklas Hallqvist
1999-07-15From angelos@, edits by me, demand keying for PF_KEYNiklas Hallqvist
1999-07-13correct non-STDC caseTheo de Raadt
1999-07-06ipsec_in_use could get out of sync. (Also niklas@. angelos@ ok)Hakan Olsson
1999-07-06Added support for TCP MD5 option (RFC 2385).cmetz
1999-07-06Fixed compilation problems when INET6 is enabled.cmetz
1999-07-06Removed bogus ifdef/define lines that resulted from an over-aggressive M-x.cmetz
1999-07-05remove bogus entry from if_enc address list; and rename enc_softc to encifTheo de Raadt
1999-07-03indentTheo de Raadt
1999-07-02rename SADB_foo_X_bar to SADB_X_foo_barTheo de Raadt
1999-07-02Fixed a #ifdef defined()... typo that turned into a compilation failure.cmetz
1999-07-02Significant cleanups in the way TCP is made to handle multiple networkcmetz
1999-06-30remove final low-level crypto knowledge from base ipsec codeTheo de Raadt
1999-06-18split out transforms; some debugging done but there may still be bugs inTheo de Raadt
1999-06-15handle multicast packets inside ipf too; darrenTheo de Raadt
1999-06-11removed TCPCOOKIE support.pattonme
1999-06-07I do not believe thisTheo de Raadt
1999-06-07return a ICMP_UNREACH_PROTOCOL for protocols we do not support; discussion wi...Theo de Raadt
1999-06-07Fix use of uninitialized TDB hash table in tdb_delete(), introducedAngelos D. Keromytis
1999-06-06Ident.Angelos D. Keromytis
1999-06-06avoid a future problem inside an #ifdef notyetTheo de Raadt
1999-06-04forgot to zero sunionNiels Provos
1999-05-24instead of dropping out of window SYNs, send an ACK and drop afterwards.Niels Provos
1999-05-23SA hash table resizingNiklas Hallqvist
1999-05-20Fix a bug where the ordered expiration list could get out of order. AddNiklas Hallqvist
1999-05-16Don't judge locally generated tunnel packets as spoof attempts. indent.Niklas Hallqvist
1999-05-16spltdb introduced, protection for tdb lists and related structures, soNiklas Hallqvist
1999-05-16Add support for static ARP entries that cannot be overwritten.Hakan Olsson
1999-05-14A new scalable IPsec SA expiration model.Niklas Hallqvist
1999-05-12Obvious pastoNiklas Hallqvist
1999-05-12Follow local indentation style.Hakan Olsson
1999-05-12Fix problem with data corruption for retransmitted TCP packetsHakan Olsson
1999-05-11Remove cruft that wasted space en masse in the IPsec subsystemNiklas Hallqvist
1999-04-28zap the newhashinit hack.Artur Grabowski
1999-04-23dont accept packets with the destination address of a down interface;Niels Provos
1999-04-22Heh, this was definitely not tested. cpp sytax errors.Niklas Hallqvist
1999-04-21From Tom Henderson <tomh@cs.berkeley.edu>:Niels Provos
1999-04-20messup, learn to test *all* variants of compile options whenNiklas Hallqvist
1999-04-20use open() with O_EXCL.. but also move to /var/run to avoid the 2nd-level /tm...Theo de Raadt
1999-04-20Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets.Niklas Hallqvist
1999-04-16fix ipf return-rst panic bug; beckTheo de Raadt
1999-04-12move encdebug to a useful placeTheo de Raadt
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
1999-04-09The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4)Niklas Hallqvist
1999-04-09Make the tdbi handling more robust, removes a panic caseNiklas Hallqvist
1999-04-09Check for local address spoofing on encapsulated packets.Angelos D. Keromytis
1999-04-04fix tunnelling; provosTheo de Raadt