Age | Commit message (Expand) | Author |
2015-05-07 | Include the timestamp TCP option in keep alive packets as well. | Mike Belopuhov |
2015-04-30 | Merge two identical if() statements in ipsp_acquire_sa(). The | Todd C. Miller |
2015-04-28 | Make sure to overwrite sdl_type after calling ether_ifattach(). | Martin Pieuchot |
2015-04-22 | Add the necessary glue to keep carp(4) working while other pseudo-drivers | Martin Pieuchot |
2015-04-22 | Init rt to NULL in arpresolve(). Not a problem in practice | Jonathan Gray |
2015-04-21 | Revert previous. Packets going through carp_input() but not destinated | Martin Pieuchot |
2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
2015-04-17 | Remove unused ipsp_parse_headers that was supposed to parse packets | Mike Belopuhov |
2015-04-17 | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | Mike Belopuhov |
2015-04-16 | ipa_inp_next is unused; via mikeb@ | Markus Friedl |
2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
2015-04-15 | Add the necessary glue to keep carp(4) working while other pseudo-drivers | Martin Pieuchot |
2015-04-15 | Use ether_ifattach() and ether_ifdetach() when cloning/destroying an | Martin Pieuchot |
2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
2015-04-13 | Make filter argument to ipsp_aux_match optional like the rest of them. | Mike Belopuhov |
2015-04-13 | Perform IPsec bypass check on a socket before performing TDB lookups. | Mike Belopuhov |
2015-04-13 | Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpi | Mike Belopuhov |
2015-04-13 | Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpi | Mike Belopuhov |
2015-04-10 | replace the use of ifqueues for most input queues serviced by netisr | David Gwynne |
2015-04-10 | replace the guts of tdb_hash with SipHash24 | David Gwynne |
2015-04-07 | Do not pass an `ifp' argument to interface input handlers since it | Martin Pieuchot |
2015-03-26 | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | Mike Belopuhov |
2015-03-24 | Convert hand-rolled mbuf list used to store packets until ARP | Martin Pieuchot |
2015-03-18 | "handle" wccp2 packets if net.inet.gre.wccp is set to 2 by truncating | Ryan Thomas McBride |
2015-03-14 | Check for the size of the supposed destination address when constructing | Martin Pieuchot |
2015-03-14 | Remove some includes include-what-you-use claims don't | Jonathan Gray |
2015-03-04 | Do not check if the interface index matches the scope when all we want | Martin Pieuchot |
2015-03-04 | Explicitly fallback to a carp IP address if the parent does not have any | Martin Pieuchot |
2015-02-11 | Do not store the key and the gateway of a route entry in the same chunk | Martin Pieuchot |
2015-02-11 | Until carp(4) is converted to call ether_ifattach() and ether_ifdetach(), | Martin Pieuchot |
2015-02-10 | bzero -> memset and unify sizeof() usage (no space). | Claudio Jeker |
2015-02-10 | Nuke sin_zero before passing it on down into the ifa_ifwithaddr() that | Claudio Jeker |
2015-02-09 | Implement 2 sysctl to retrieve the multicast forwarding cache (mfc) and the | Claudio Jeker |
2015-02-08 | Count dropped SYN packets on the tcpstat. They are dropped due to the | YASUOKA Masahiko |
2015-02-08 | Just use sysctl_rdstruct() to read out some structs. Only difference | Claudio Jeker |
2015-02-08 | De-static to make ddb hangman harder. OK phessler, henning | Claudio Jeker |
2015-02-07 | mechanical conversion of this code to using siphash instead of some xors. | David Gwynne |
2015-02-07 | Print a different error message if the route entry supposed to contain | Martin Pieuchot |
2015-02-05 | Convert various rtrequest1(RTM_DELETE,...) calls to rtdeletemsg(9). | Martin Pieuchot |
2015-01-28 | Revert rtdeletemsg conversion. It was not ok'd, I misunderstood bluhm@'s | Martin Pieuchot |
2015-01-26 | Call rtdeletemsg(9) instead of rerolling its code. As a bonus you'll | Martin Pieuchot |
2015-01-26 | Do not always try to rtfree(9) route entries inside rtdeletemsg(9). | Martin Pieuchot |
2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
2015-01-21 | To satisfy kernel grovellers and bad (but document) sysctl | Theo de Raadt |
2015-01-21 | Remove the code to automagically find a "carpdev". | Martin Pieuchot |
2015-01-19 | mikeb points out that 'struct ipsec_policy' can also be hidden by _KERNEL | Theo de Raadt |
2015-01-19 | First step of hiding many kernel-only parts of <netinet/ip_ipsp.h> | Theo de Raadt |
2015-01-13 | Only notify userland about resolved ARP entries if the Ethernet address | Martin Pieuchot |
2015-01-12 | Kill the global list of IPv4 addresses. | Martin Pieuchot |