| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | add IPSEC_FILTERGIF suport for FAST_IPSEC | Sam Leffler | 2003-07-22 | 1 | -0/+7 |
| * | Map icmp time exceeded responses to EHOSTUNREACH rather than 0 (no error); | Mike Silbersack | 2003-06-17 | 1 | -1/+1 |
| * | When setting fragment queue pointers to NULL, or comparing them with | Robert Watson | 2003-06-06 | 1 | -3/+3 |
| * | Trim a call to mac_create_mbuf_from_mbuf() since m_tag meta-data | Robert Watson | 2003-05-06 | 1 | -5/+2 |
| * | IP_RECVTTL socket option. | Matthew N. Dodd | 2003-04-29 | 1 | -0/+6 |
| * | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | Dag-Erling Smørgrav | 2003-04-08 | 1 | -2/+1 |
| * | Back out support for RFC3514. | Matthew N. Dodd | 2003-04-02 | 1 | -14/+0 |
| * | Sync constant define with NetBSD. | Matthew N. Dodd | 2003-04-02 | 1 | -1/+1 |
| * | Implement support for RFC 3514 (The Security Flag in the IPv4 Header). | Matthew N. Dodd | 2003-04-01 | 1 | -0/+14 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -1/+4 |
| * | Update netisr handling; Each SWI now registers its queue, and all queue | Jonathan Lemon | 2003-03-04 | 1 | -21/+2 |
| * | Fix a condition so that ip reassembly queues are emptied immediately | Mike Silbersack | 2003-02-26 | 1 | -1/+1 |
| * | style(9): join lines. | Maxim Konovalov | 2003-02-25 | 1 | -4/+2 |
| * | Ip reassembly queue structure has ipq_nfrags now. Count a number of | Maxim Konovalov | 2003-02-25 | 1 | -7/+15 |
| * | Add a new config option IPSEC_FILTERGIF to control whether or not | Sam Leffler | 2003-02-23 | 1 | -0/+7 |
| * | Add the ability to limit the number of IP fragments allowed per packet, | Mike Silbersack | 2003-02-22 | 1 | -4/+28 |
| * | Back out M_* changes, per decision of the TRB. | Warner Losh | 2003-02-19 | 1 | -5/+5 |
| * | Move a comment and optimize the frag timeout code a slight bit. | Mike Silbersack | 2003-02-01 | 1 | -3/+3 |
| * | A few fixes to rev 1.221 | Mike Silbersack | 2003-01-28 | 1 | -9/+17 |
| * | Merge the best parts of maxfragpackets and maxnipq together. (Both | Mike Silbersack | 2003-01-26 | 1 | -13/+5 |
| * | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | Alfred Perlstein | 2003-01-21 | 1 | -5/+5 |
| * | Correct mbuf packet header propagation. Previously, packet headers | Sam Leffler | 2002-12-30 | 1 | -1/+10 |
| * | Move fw_one_pass from ip_fw2.c to ip_input.c so that neither | Luigi Rizzo | 2002-11-20 | 1 | -0/+1 |
| * | Add a sysctl to control the generation of source quench packets, | Mike Silbersack | 2002-11-19 | 1 | -2/+20 |
| * | Massive cleanup of the ip_mroute code. | Luigi Rizzo | 2002-11-15 | 1 | -3/+30 |
| * | Fix two instances of variant struct definitions in sys/netinet: | Poul-Henning Kamp | 2002-10-20 | 1 | -14/+13 |
| * | Get rid of checking for ip sec history. It is true that packets are not | Guido van Rooij | 2002-10-16 | 1 | -5/+0 |
| * | Tie new "Fast IPsec" code into the build. This involves the usual | Sam Leffler | 2002-10-16 | 1 | -2/+131 |
| * | Replace aux mbufs with packet tags: | Sam Leffler | 2002-10-16 | 1 | -7/+7 |
| * | Fix IPOPT_TS processing: do not overwrite IP address by timestamp. | Maxim Konovalov | 2002-10-10 | 1 | -0/+2 |
| * | Be consistent about "static" functions: if the function is marked | Poul-Henning Kamp | 2002-09-28 | 1 | -1/+1 |
| * | Use m_fixhdr() rather than roll our own. | Poul-Henning Kamp | 2002-09-18 | 1 | -6/+2 |
| * | Explicitly clear M_FRAG flag on a mbuf with the last fragment to unbreak | Maxim Konovalov | 2002-09-17 | 1 | -1/+2 |
| * | Fix handling of packets which matched an "ipfw fwd" rule on the input side. | Luigi Rizzo | 2002-08-03 | 1 | -0/+13 |
| * | When preserving the IP header in extra mbuf in the IP forwarding | Robert Watson | 2002-08-02 | 1 | -0/+7 |
| * | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -0/+17 |
| * | Warning fixes for 64 bits platforms. With this last fix, | Maxime Henrion | 2002-06-27 | 1 | -1/+1 |
| * | Move some global variables in more appropriate places. | Luigi Rizzo | 2002-06-23 | 1 | -3/+28 |
| * | fix bad indentation and whitespace resulting from cut&paste | Luigi Rizzo | 2002-06-23 | 1 | -7/+6 |
| * | Remove (almost all) global variables that were used to hold | Luigi Rizzo | 2002-06-22 | 1 | -123/+101 |
| * | Back out my lats commit of locking down a socket, it conflicts with hsu's work. | Seigo Tanimura | 2002-05-31 | 1 | -4/+1 |
| * | - Change the newly turned INVARIANTS #ifdef blocks (they were changed from | Andrew R. Reiter | 2002-05-21 | 1 | -4/+3 |
| * | - Turn a #ifdef DIAGNOSTIC to #ifdef INVARIANTS as the code from this line | Andrew R. Reiter | 2002-05-20 | 1 | -1/+1 |
| * | Lock down a socket, milestone 1. | Seigo Tanimura | 2002-05-20 | 1 | -1/+4 |
| * | s/demon/daemon/ | Dima Dorfman | 2002-05-12 | 1 | -1/+1 |
| * | Cleanup the interface to ip_fw_chk, two of the input arguments | Luigi Rizzo | 2002-05-09 | 1 | -12/+4 |
| * | Change callers of mtx_init() to pass in an appropriate lock type name. In | John Baldwin | 2002-04-04 | 1 | -1/+1 |
| * | Remove __P. | Alfred Perlstein | 2002-03-19 | 1 | -7/+7 |
| * | Enforce inbound IPsec SPD | Chris D. Faulhaber | 2002-02-26 | 1 | -1/+11 |
| * | o Move NTOHL() and associated macros into <sys/param.h>. These are | Mike Barcroft | 2002-02-18 | 1 | -8/+8 |
