| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Enforce inbound IPsec SPD | Chris D. Faulhaber | 2002-02-26 | 1 | -1/+11 |
| * | o Move NTOHL() and associated macros into <sys/param.h>. These are | Mike Barcroft | 2002-02-18 | 1 | -8/+8 |
| * | The ipfw(8) 'tee' action simply hasn't worked on incoming packets for | Crist J. Clark | 2002-01-26 | 1 | -0/+3 |
| * | Initialise the intrq_present fields at runtime, not link time. This allows | Mike Smith | 2002-01-08 | 1 | -1/+1 |
| * | Don't reveal a router in the IPSTEALTH mode through IP options. | Yaroslav Tykhiy | 2001-12-29 | 1 | -4/+41 |
| * | Fix ipfw fwd so that it acts as the docs say | Julian Elischer | 2001-12-28 | 1 | -5/+13 |
| * | minor style and whitespace fixes. | Jonathan Lemon | 2001-12-14 | 1 | -11/+12 |
| * | - Make ip_rtaddr() global, and use it to look up the correct source | Ruslan Ermilov | 2001-11-30 | 1 | -16/+17 |
| * | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | Luigi Rizzo | 2001-11-04 | 1 | -5/+4 |
| * | Don't use the ip_timestamp structure to access timestamp options, as the | Jonathan Lemon | 2001-10-25 | 1 | -29/+22 |
| * | Make it so dummynet and bridge can be loaded as modules. | Paul Saab | 2001-10-05 | 1 | -16/+6 |
| * | Add a hash table that contains the list of internet addresses, and use | Jonathan Lemon | 2001-09-29 | 1 | -17/+30 |
| * | Centralize satosin(), sintosa() and ifatoia() macros in <netinet/in.h> | Jonathan Lemon | 2001-09-29 | 1 | -3/+1 |
| * | Two main changes here: | Luigi Rizzo | 2001-09-27 | 1 | -2/+2 |
| * | Make faith loadable, unloadable, and clonable. | Brooks Davis | 2001-09-25 | 1 | -7/+3 |
| * | Wrap array accesses in macros, which also happen to be lvalues: | Jonathan Lemon | 2001-09-06 | 1 | -2/+2 |
| * | Patches from Keiichi SHIMA <keiichi@iij.ad.jp> | Julian Elischer | 2001-09-03 | 1 | -9/+7 |
| * | When net.inet.tcp.icmp_may_rst is enabled, report ECONNREFUSED not ENETRESET | Jesper Skriver | 2001-08-27 | 1 | -1/+1 |
| * | Add netstat(1) knob to reset net.inet.{ip|icmp|tcp|udp|igmp}.stats. | Ruslan Ermilov | 2001-06-23 | 1 | -1/+1 |
| * | Sync with recent KAME. | Hajimu UMEMOTO | 2001-06-11 | 1 | -13/+53 |
| * | Make the default value of net.inet.ip.maxfragpackets and | Jesper Skriver | 2001-06-10 | 1 | -2/+3 |
| * | Prevent denial of service using bogus fragmented IPv4 packets. | Jesper Skriver | 2001-06-03 | 1 | -0/+31 |
| * | Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. | Kris Kennaway | 2001-06-01 | 1 | -0/+3 |
| * | Back out jesper's 2001/05/31 14:58:11 PDT commit. It does not compile. | David E. O'Brien | 2001-06-01 | 1 | -31/+0 |
| * | Prevent denial of service using bogus fragmented IPv4 packets. | Jesper Skriver | 2001-05-31 | 1 | -0/+31 |
| * | Invalidate cached forwarding route (ipforward_rt) whenever a new route | Ruslan Ermilov | 2001-03-19 | 1 | -1/+1 |
| * | Make sure the cached forwarding route (ipforward_rt) is still up before | Ruslan Ermilov | 2001-03-18 | 1 | -19/+7 |
| * | <sys/queue.h> makeover. | Poul-Henning Kamp | 2001-03-16 | 1 | -33/+34 |
| * | It was possible for ip_forward() to supply to icmp_error() | Ian Dowse | 2001-03-08 | 1 | -7/+14 |
| * | Modify the comments to more closely resemble the English language. | Don Lewis | 2001-03-05 | 1 | -5/+4 |
| * | Move the loopback net check closer to the beginning of ip_input() so that | Don Lewis | 2001-03-05 | 1 | -14/+26 |
| * | Disable interface checking for packets subject to "ipfw fwd". | Don Lewis | 2001-03-04 | 1 | -3/+4 |
| * | Disable interface checking when IP forwarding is engaged so that packets | Don Lewis | 2001-03-04 | 1 | -10/+45 |
| * | Add a new sysctl net.inet.ip.check_interface, which will verify that | Jonathan Lemon | 2001-03-02 | 1 | -1/+5 |
| * | When iterating over our list of interface addresses in order to determine | Jonathan Lemon | 2001-02-27 | 1 | -14/+18 |
| * | Allow ICMP unreachables which map into PRC_UNREACH_ADMIN_PROHIB to | Jonathan Lemon | 2001-02-23 | 1 | -1/+1 |
| * | Backout change in 1.153, as it violate rfc1122 section 3.2.1.3. | Jesper Skriver | 2001-02-21 | 1 | -12/+1 |
| * | Send a ICMP unreachable instead of dropping the packet silent, if we | Jesper Skriver | 2001-02-20 | 1 | -1/+12 |
| * | Another round of the <sys/queue.h> FOREACH transmogriffer. | Poul-Henning Kamp | 2001-02-04 | 1 | -2/+1 |
| * | Mechanical change to use <sys/queue.h> macro API instead of | Poul-Henning Kamp | 2001-02-04 | 1 | -1/+1 |
| * | MFS: bridge/ipfw/dummynet fixes (bridge.c will be committed separately) | Luigi Rizzo | 2001-02-02 | 1 | -2/+13 |
| * | Lock down the network interface queues. The queue mutex must be obtained | Jonathan Lemon | 2000-11-25 | 1 | -4/+2 |
| * | Wrong checksum used for certain reassembled IP packets before diverting. | Ruslan Ermilov | 2000-11-01 | 1 | -1/+4 |
| * | Convert all users of fldoff() to offsetof(). fldoff() is bad | Poul-Henning Kamp | 2000-10-27 | 1 | -2/+0 |
| * | RFC 791 says that IP_RF bit should always be zero, but nothing | Ruslan Ermilov | 2000-10-26 | 1 | -52/+29 |
| * | Wrong header length used for certain reassembled IP packets. | Ruslan Ermilov | 2000-10-26 | 1 | -2/+2 |
| * | Augment the 'ifaddr' structure with a 'struct if_data' to keep | Josef Karthauser | 2000-10-19 | 1 | -1/+6 |
| * | Backout my wrong attempt to fix the compilation warning in ip_input.c | Ruslan Ermilov | 2000-10-12 | 1 | -1/+1 |
| * | Fix the compilation warning. | Ruslan Ermilov | 2000-10-12 | 1 | -1/+1 |
| * | m_cat() can free its second argument, so collect the checksum information | Jonathan Lemon | 2000-09-14 | 1 | -1/+1 |
