Age | Commit message (Collapse) | Author | |
---|---|---|---|
1999-12-15 | never go into persist mode if there are still segments to be retransmitted. | Niels Provos | |
set retransmit timer again if it was cleared, that can happen in SACK when there are no elligble SACK holes to be retransmitted and the receiver window is full. | |||
1999-12-15 | do not overwrite traffic class portion when filling in IPv6 version field. | Jun-ichiro itojun Hagino | |
1999-12-15 | don't check INET too much, it will make trouble with lkm compilation. | Jun-ichiro itojun Hagino | |
1999-12-15 | Import of Darren Reed's IPFilter 3.3.4, including OpenBSD patches. | Kjell Wooding | |
Many, many enhancements and improvements, including new in-kernel proxies, enhancements to logging, and many bugfixes. Note: Man pages have not yet been re-converted to mdoc. | |||
1999-12-14 | sack.end may not be > tp->snd_max but can be equal. | Niels Provos | |
1999-12-14 | New ipfilter files. Preparing for merge of ipfilter 3.3.4. | Kjell Wooding | |
1999-12-13 | remove extra checks for #define INET (merged mistakingly from kame). | Jun-ichiro itojun Hagino | |
this is harmful against some of lkm compilation. | |||
1999-12-12 | make it easier to synchronize INP_xx flags and IN6P_xx flags. | Jun-ichiro itojun Hagino | |
1999-12-12 | fix IPv6 advanced API (RFC2292) for udp socket. | Jun-ichiro itojun Hagino | |
TODO: ditto for raw and tcp socket | |||
1999-12-10 | sync DIAGNOSTIC code with reality. we always get cluster mbuf so | Jun-ichiro itojun Hagino | |
max_linkhdr + hdrlen <= MCLBYTES is safe. | |||
1999-12-10 | Add code to allow for IPv6 IPsec destinations in IPv4 IPsec flows (e.g., | Angelos D. Keromytis | |
packets from 10.0.0.1 going to 11.0.0.1 should be ESP encrypted to host 1:2:3:4:5:6:7:8). ip6_output() needs to be modified to honor IP_RAWOUTPUT (or some such) and IP_ENCAPSULATED, to not prepend an IPv6 header to the packet, and to not do IPsec processing respectively. | |||
1999-12-09 | Use otos rather than writing directly to ip_tos in the IPv4 header | Angelos D. Keromytis | |
(bitfields can be a pain). | |||
1999-12-09 | Fix comment typos. | Angelos D. Keromytis | |
1999-12-09 | Move variable decls into the appropriate #ifdefs so GENERIC compiles... | Jason Downs | |
1999-12-09 | So I was lying...unify ESP and AH wrapper-input processing. The new | Angelos D. Keromytis | |
file contains a common routine for massaging the packet, doing peripheral checks, update statistics, etc. common for both AH/ESP, both IPv4/IPv6. Also wrapper routines for AH/ESP-v4/v6, and the sysctl routines from ip_ah.c/ip_esp.c | |||
1999-12-09 | Ok, no more IPsec for OpenBSD...I've had enough with it. | Angelos D. Keromytis | |
1999-12-09 | Add v4/v6 wrapper routine definitions. | Angelos D. Keromytis | |
1999-12-09 | Couple of paranoid ifdefs... | Angelos D. Keromytis | |
1999-12-09 | ip4e_output() can now generate any combination of IP{4,6}-in-IP{4,6} | Angelos D. Keromytis | |
tunnels. | |||
1999-12-09 | Unspecified tunnel endpoint use statistic. | Angelos D. Keromytis | |
1999-12-09 | Protocol family mismatch counter. | Angelos D. Keromytis | |
1999-12-09 | Be more careful with IPv4 multicast (make sure it's IPv4), and remove | Angelos D. Keromytis | |
unnecessary include files. | |||
1999-12-09 | ip4_input() can now handle either of IP-in-IP or IP-in-IPv6 | Angelos D. Keromytis | |
encapsulation. Eventually, this routine will be made to deal with all 4 combinations of IP/IPv6 encapsulation. gif interface support should be added here too (itojun :-), when the packet has not been received over an IPsec tunnel. ECN handling should also be done. | |||
1999-12-09 | We can't use the gif interface input routine for IPIP/IP6IP | Angelos D. Keromytis | |
encapsulation. | |||
1999-12-09 | IPv6 support should now be complete (well, we need the right hooks in | Angelos D. Keromytis | |
ip6_input()) | |||
1999-12-09 | Minor cleanup | Angelos D. Keromytis | |
1999-12-09 | Add prototype for esp6_input() wrapper to ESP input processing routine. | Angelos D. Keromytis | |
1999-12-08 | Fix debugging printf compilation. | Angelos D. Keromytis | |
1999-12-08 | Identation. | Angelos D. Keromytis | |
1999-12-08 | Type in sizeofs | Angelos D. Keromytis | |
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino | |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). | |||
1999-12-08 | IPv6 header handling, improve IPv4 option handling support. | Angelos D. Keromytis | |
1999-12-08 | comment out call to inet_ntoa6() as we don't have the code yet. | Jun-ichiro itojun Hagino | |
1999-12-08 | fix field name (ip6_hdr->ip6_src). use IN6_ARE_ADDR_EQUAL for comparison. | Jun-ichiro itojun Hagino | |
1999-12-08 | AH finished, a couple of cosmetic changes in ESP. | Angelos D. Keromytis | |
1999-12-07 | Forgot a printf... | Angelos D. Keromytis | |
1999-12-07 | New ah_new_input(), protocol-independent processing (still lacking | Angelos D. Keromytis | |
IPv6-specific protocol header processing). | |||
1999-12-07 | Missing "else"... | Angelos D. Keromytis | |
1999-12-06 | Keep statistics in default case as well. | Angelos D. Keromytis | |
1999-12-06 | Oops, typo. | Angelos D. Keromytis | |
1999-12-06 | Some preliminiries to AH revamping (similar to ESP)... | Angelos D. Keromytis | |
1999-12-06 | Don't do m_adj() if it's not really needed (minor optimization, | Angelos D. Keromytis | |
doesn't correctness) | |||
1999-12-06 | Simplify include files. | Angelos D. Keromytis | |
1999-12-06 | New ESP code that's v4 and v6 friendly. | Angelos D. Keromytis | |
1999-12-06 | Add another statistic | Angelos D. Keromytis | |
1999-12-05 | Fix an INET6 dependency (niklas@) | Angelos D. Keromytis | |
1999-12-04 | Address independence, IPv6 support, and the -local flag in ipsecadm is | Angelos D. Keromytis | |
no longer needed. | |||
1999-12-02 | typo; gbayley@ausmac.net | Theo de Raadt | |
1999-11-29 | Make sure M_BCAST is set for IP broadcasts, even if the packet came in as | Hakan Olsson | |
an ethernet unicast. (cmetz@, niklas@ ok.) | |||
1999-11-22 | fix ip_output() missing arg; itojun@itojun.org | Theo de Raadt | |