| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Move fw_one_pass from ip_fw2.c to ip_input.c so that neither | Luigi Rizzo | 2002-11-20 | 1 | -0/+1 |
| * | Add a sysctl to control the generation of source quench packets, | Mike Silbersack | 2002-11-19 | 1 | -2/+20 |
| * | Massive cleanup of the ip_mroute code. | Luigi Rizzo | 2002-11-15 | 1 | -3/+30 |
| * | Fix two instances of variant struct definitions in sys/netinet: | Poul-Henning Kamp | 2002-10-20 | 1 | -14/+13 |
| * | Get rid of checking for ip sec history. It is true that packets are not | Guido van Rooij | 2002-10-16 | 1 | -5/+0 |
| * | Tie new "Fast IPsec" code into the build. This involves the usual | Sam Leffler | 2002-10-16 | 1 | -2/+131 |
| * | Replace aux mbufs with packet tags: | Sam Leffler | 2002-10-16 | 1 | -7/+7 |
| * | Fix IPOPT_TS processing: do not overwrite IP address by timestamp. | Maxim Konovalov | 2002-10-10 | 1 | -0/+2 |
| * | Be consistent about "static" functions: if the function is marked | Poul-Henning Kamp | 2002-09-28 | 1 | -1/+1 |
| * | Use m_fixhdr() rather than roll our own. | Poul-Henning Kamp | 2002-09-18 | 1 | -6/+2 |
| * | Explicitly clear M_FRAG flag on a mbuf with the last fragment to unbreak | Maxim Konovalov | 2002-09-17 | 1 | -1/+2 |
| * | Fix handling of packets which matched an "ipfw fwd" rule on the input side. | Luigi Rizzo | 2002-08-03 | 1 | -0/+13 |
| * | When preserving the IP header in extra mbuf in the IP forwarding | Robert Watson | 2002-08-02 | 1 | -0/+7 |
| * | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -0/+17 |
| * | Warning fixes for 64 bits platforms. With this last fix, | Maxime Henrion | 2002-06-27 | 1 | -1/+1 |
| * | Move some global variables in more appropriate places. | Luigi Rizzo | 2002-06-23 | 1 | -3/+28 |
| * | fix bad indentation and whitespace resulting from cut&paste | Luigi Rizzo | 2002-06-23 | 1 | -7/+6 |
| * | Remove (almost all) global variables that were used to hold | Luigi Rizzo | 2002-06-22 | 1 | -123/+101 |
| * | Back out my lats commit of locking down a socket, it conflicts with hsu's work. | Seigo Tanimura | 2002-05-31 | 1 | -4/+1 |
| * | - Change the newly turned INVARIANTS #ifdef blocks (they were changed from | Andrew R. Reiter | 2002-05-21 | 1 | -4/+3 |
| * | - Turn a #ifdef DIAGNOSTIC to #ifdef INVARIANTS as the code from this line | Andrew R. Reiter | 2002-05-20 | 1 | -1/+1 |
| * | Lock down a socket, milestone 1. | Seigo Tanimura | 2002-05-20 | 1 | -1/+4 |
| * | s/demon/daemon/ | Dima Dorfman | 2002-05-12 | 1 | -1/+1 |
| * | Cleanup the interface to ip_fw_chk, two of the input arguments | Luigi Rizzo | 2002-05-09 | 1 | -12/+4 |
| * | Change callers of mtx_init() to pass in an appropriate lock type name. In | John Baldwin | 2002-04-04 | 1 | -1/+1 |
| * | Remove __P. | Alfred Perlstein | 2002-03-19 | 1 | -7/+7 |
| * | Enforce inbound IPsec SPD | Chris D. Faulhaber | 2002-02-26 | 1 | -1/+11 |
| * | o Move NTOHL() and associated macros into <sys/param.h>. These are | Mike Barcroft | 2002-02-18 | 1 | -8/+8 |
| * | The ipfw(8) 'tee' action simply hasn't worked on incoming packets for | Crist J. Clark | 2002-01-26 | 1 | -0/+3 |
| * | Initialise the intrq_present fields at runtime, not link time. This allows | Mike Smith | 2002-01-08 | 1 | -1/+1 |
| * | Don't reveal a router in the IPSTEALTH mode through IP options. | Yaroslav Tykhiy | 2001-12-29 | 1 | -4/+41 |
| * | Fix ipfw fwd so that it acts as the docs say | Julian Elischer | 2001-12-28 | 1 | -5/+13 |
| * | minor style and whitespace fixes. | Jonathan Lemon | 2001-12-14 | 1 | -11/+12 |
| * | - Make ip_rtaddr() global, and use it to look up the correct source | Ruslan Ermilov | 2001-11-30 | 1 | -16/+17 |
| * | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | Luigi Rizzo | 2001-11-04 | 1 | -5/+4 |
| * | Don't use the ip_timestamp structure to access timestamp options, as the | Jonathan Lemon | 2001-10-25 | 1 | -29/+22 |
| * | Make it so dummynet and bridge can be loaded as modules. | Paul Saab | 2001-10-05 | 1 | -16/+6 |
| * | Add a hash table that contains the list of internet addresses, and use | Jonathan Lemon | 2001-09-29 | 1 | -17/+30 |
| * | Centralize satosin(), sintosa() and ifatoia() macros in <netinet/in.h> | Jonathan Lemon | 2001-09-29 | 1 | -3/+1 |
| * | Two main changes here: | Luigi Rizzo | 2001-09-27 | 1 | -2/+2 |
| * | Make faith loadable, unloadable, and clonable. | Brooks Davis | 2001-09-25 | 1 | -7/+3 |
| * | Wrap array accesses in macros, which also happen to be lvalues: | Jonathan Lemon | 2001-09-06 | 1 | -2/+2 |
| * | Patches from Keiichi SHIMA <keiichi@iij.ad.jp> | Julian Elischer | 2001-09-03 | 1 | -9/+7 |
| * | When net.inet.tcp.icmp_may_rst is enabled, report ECONNREFUSED not ENETRESET | Jesper Skriver | 2001-08-27 | 1 | -1/+1 |
| * | Add netstat(1) knob to reset net.inet.{ip|icmp|tcp|udp|igmp}.stats. | Ruslan Ermilov | 2001-06-23 | 1 | -1/+1 |
| * | Sync with recent KAME. | Hajimu UMEMOTO | 2001-06-11 | 1 | -13/+53 |
| * | Make the default value of net.inet.ip.maxfragpackets and | Jesper Skriver | 2001-06-10 | 1 | -2/+3 |
| * | Prevent denial of service using bogus fragmented IPv4 packets. | Jesper Skriver | 2001-06-03 | 1 | -0/+31 |
| * | Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. | Kris Kennaway | 2001-06-01 | 1 | -0/+3 |
| * | Back out jesper's 2001/05/31 14:58:11 PDT commit. It does not compile. | David E. O'Brien | 2001-06-01 | 1 | -31/+0 |
