Age | Commit message (Expand) | Author |
2020-04-29 | remove some trailing whitespace. no functional change. | David Gwynne |
2020-04-23 | Add support for autmatically moving traffic between rdomains on ipsec(4) | tobhe |
2020-04-12 | Stop processing packets under non-exclusive (read) netlock. | Martin Pieuchot |
2020-03-15 | Guard SIOCDELMULTI if_ioctl calls with KERNEL_LOCK() where the call is | Visa Hankala |
2020-03-06 | Fix uninitialized use of variable 'len'. | tobhe |
2020-01-26 | add define for IPTOS_DSCP_LE; "low effort" DSCP codepoint standardised | Damien Miller |
2019-12-23 | rdr-to with loopback destination should work even though | Alexandr Nedvedicky |
2019-12-10 | Make bundled IPcomp/ESP policies work with IPSEC_LEVEL_REQUIRE. | tobhe |
2019-12-09 | always pull in if_types.h, to unbreak ramdisks | Theo de Raadt |
2019-12-08 | Make sure packet destination address matches interface address, | Alexandr Nedvedicky |
2019-12-06 | Checking the IPsec policy is expensive. Check only when IPsec is used. | tobhe |
2019-12-01 | Don't require a valid sa_len for a bunch of IPv4 "get" ioctls | Jeremie Courreges-Anglas |
2019-11-29 | Change the default security level for incoming IPsec flows from | tobhe |
2019-11-28 | Although ifconfig(8) checks it already, enforce contiguous inet | Alexander Bluhm |
2019-11-13 | Add DoT 853 to DEFBADDYNAMICPORTS_TCP. This port will be increasingly | Theo de Raadt |
2019-11-11 | Prevent underflows in tp->snd_wnd if the remote side ACKs more than | Alexander Bluhm |
2019-11-08 | void being too clever about setting/clearing ifpromisc on the parent. | David Gwynne |
2019-11-08 | convert interface address change hooks to tasks and a task_list. | David Gwynne |
2019-11-07 | Do propper kernel input validation for in_control() ioctl(2) | Alexander Bluhm |
2019-11-07 | Avoid NULL dereference in arpinvalidate() and nd6_invalidate() by | Kenneth R Westerback |
2019-11-07 | turn the linkstate hooks into a task list, like the detach hooks. | David Gwynne |
2019-11-06 | replace the hooks used with if_detachhooks with a task list. | David Gwynne |
2019-11-04 | remove mobileip(4) | David Gwynne |
2019-10-25 | make whitespace in the IPPROTO defines consistent. no functional change. | David Gwynne |
2019-10-25 | +#define IPPROTO_UDPLITE 136, as per RFC 3828 and the IANA allocation | David Gwynne |
2019-10-23 | Kernel is missing propper input validation when configuring addresses. | Alexander Bluhm |
2019-10-17 | in6_setsockaddr and in6_setpeeraddr can't fail, so let them return void. | David Gwynne |
2019-10-16 | tsleep(9) -> tsleep_nsec(9) | Martin Pieuchot |
2019-10-07 | ip_ether.c is empty, and now unlinked from the build. | David Gwynne |
2019-10-04 | gif shouldn't include netinet/ip_ether.h, cos gif doesnt do etherip. | David Gwynne |
2019-10-04 | get rid of prototypes for mplsip_input and mplsip_output. they don't exist. | David Gwynne |
2019-09-30 | remove the "copy function" argument to bpf_mtap_hdr. | David Gwynne |
2019-09-02 | Fix a route use after free in multicast route. Move the rt_mcast_del() | Alexander Bluhm |
2019-08-06 | When we needed the kernel lock for local IP packet delivery, mpi@ | Alexander Bluhm |
2019-07-25 | Add IFXF_AUTOCONF4 to if_xflags to match IFXF_AUTOCONF6. Let | Kenneth R Westerback |
2019-07-17 | Introduce ETHER_IS_BROADCAST/ANYADDR/EQ() and use them where appropriate. | Martin Pieuchot |
2019-07-15 | Initialize struct inpcb pool not on demand, but during initialization. | Alexander Bluhm |
2019-07-12 | Count the number of TCP SACK options that were dropped due to the | Alexander Bluhm |
2019-07-10 | Received SACK options are managed by a linked list at the TCP socket. | Alexander Bluhm |
2019-07-08 | free(9) sizes for M_RTABLE. | Martin Pieuchot |
2019-07-05 | add ac_trunkport to arpcom so trunks can coordinate owning an interface | David Gwynne |
2019-06-21 | Prevent recursions by not deleting entries inside rtable_walk(9). | Martin Pieuchot |
2019-06-13 | In arp_rtrequest and nd6_rtrequest return early if the RTF_MPLS flag is | Claudio Jeker |
2019-06-13 | Copy the user provided sockaddr into a normalized sockaddr in rtrequest() | Claudio Jeker |
2019-06-10 | use m_microtime instead of microtime for SO_TIMESTAMP socketopt handling | David Gwynne |
2019-06-10 | Use mallocarray(9) & put some free(9) sizes for M_IPMOPTS allocations. | Martin Pieuchot |
2019-06-04 | Add missing NULL check for the protocol control block (pcb) pointer in | anton |
2019-05-11 | unbreak the build without IPSEC. | Sebastian Benoit |
2019-04-28 | Removes the KERNEL_LOCK() from bridge(4)'s output fast-path. | Martin Pieuchot |
2019-04-23 | a first cut at converting some virtual ethernet interfaces to if_vinput | David Gwynne |