| Commit message (Expand) | Author | Age | Files | Lines |
* | Correct mbuf packet header propagation. Previously, packet headers | sam | 2002-12-30 | 1 | -1/+10 |
* | Move fw_one_pass from ip_fw2.c to ip_input.c so that neither | luigi | 2002-11-20 | 1 | -0/+1 |
* | Add a sysctl to control the generation of source quench packets, | silby | 2002-11-19 | 1 | -2/+20 |
* | Massive cleanup of the ip_mroute code. | luigi | 2002-11-15 | 1 | -3/+30 |
* | Fix two instances of variant struct definitions in sys/netinet: | phk | 2002-10-20 | 1 | -14/+13 |
* | Get rid of checking for ip sec history. It is true that packets are not | guido | 2002-10-16 | 1 | -5/+0 |
* | Tie new "Fast IPsec" code into the build. This involves the usual | sam | 2002-10-16 | 1 | -2/+131 |
* | Replace aux mbufs with packet tags: | sam | 2002-10-16 | 1 | -7/+7 |
* | Fix IPOPT_TS processing: do not overwrite IP address by timestamp. | maxim | 2002-10-10 | 1 | -0/+2 |
* | Be consistent about "static" functions: if the function is marked | phk | 2002-09-28 | 1 | -1/+1 |
* | Use m_fixhdr() rather than roll our own. | phk | 2002-09-18 | 1 | -6/+2 |
* | Explicitly clear M_FRAG flag on a mbuf with the last fragment to unbreak | maxim | 2002-09-17 | 1 | -1/+2 |
* | Fix handling of packets which matched an "ipfw fwd" rule on the input side. | luigi | 2002-08-03 | 1 | -0/+13 |
* | When preserving the IP header in extra mbuf in the IP forwarding | rwatson | 2002-08-02 | 1 | -0/+7 |
* | Introduce support for Mandatory Access Control and extensible | rwatson | 2002-07-31 | 1 | -0/+17 |
* | Warning fixes for 64 bits platforms. With this last fix, | mux | 2002-06-27 | 1 | -1/+1 |
* | Move some global variables in more appropriate places. | luigi | 2002-06-23 | 1 | -3/+28 |
* | fix bad indentation and whitespace resulting from cut&paste | luigi | 2002-06-23 | 1 | -7/+6 |
* | Remove (almost all) global variables that were used to hold | luigi | 2002-06-22 | 1 | -123/+101 |
* | Back out my lats commit of locking down a socket, it conflicts with hsu's work. | tanimura | 2002-05-31 | 1 | -4/+1 |
* | - Change the newly turned INVARIANTS #ifdef blocks (they were changed from | arr | 2002-05-21 | 1 | -4/+3 |
* | - Turn a #ifdef DIAGNOSTIC to #ifdef INVARIANTS as the code from this line | arr | 2002-05-20 | 1 | -1/+1 |
* | Lock down a socket, milestone 1. | tanimura | 2002-05-20 | 1 | -1/+4 |
* | s/demon/daemon/ | dd | 2002-05-12 | 1 | -1/+1 |
* | Cleanup the interface to ip_fw_chk, two of the input arguments | luigi | 2002-05-09 | 1 | -12/+4 |
* | Change callers of mtx_init() to pass in an appropriate lock type name. In | jhb | 2002-04-04 | 1 | -1/+1 |
* | Remove __P. | alfred | 2002-03-19 | 1 | -7/+7 |
* | Enforce inbound IPsec SPD | jedgar | 2002-02-26 | 1 | -1/+11 |
* | o Move NTOHL() and associated macros into <sys/param.h>. These are | mike | 2002-02-18 | 1 | -8/+8 |
* | The ipfw(8) 'tee' action simply hasn't worked on incoming packets for | cjc | 2002-01-26 | 1 | -0/+3 |
* | Initialise the intrq_present fields at runtime, not link time. This allows | msmith | 2002-01-08 | 1 | -1/+1 |
* | Don't reveal a router in the IPSTEALTH mode through IP options. | yar | 2001-12-29 | 1 | -4/+41 |
* | Fix ipfw fwd so that it acts as the docs say | julian | 2001-12-28 | 1 | -5/+13 |
* | minor style and whitespace fixes. | jlemon | 2001-12-14 | 1 | -11/+12 |
* | - Make ip_rtaddr() global, and use it to look up the correct source | ru | 2001-11-30 | 1 | -16/+17 |
* | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | luigi | 2001-11-04 | 1 | -5/+4 |
* | Don't use the ip_timestamp structure to access timestamp options, as the | jlemon | 2001-10-25 | 1 | -29/+22 |
* | Make it so dummynet and bridge can be loaded as modules. | ps | 2001-10-05 | 1 | -16/+6 |
* | Add a hash table that contains the list of internet addresses, and use | jlemon | 2001-09-29 | 1 | -17/+30 |
* | Centralize satosin(), sintosa() and ifatoia() macros in <netinet/in.h> | jlemon | 2001-09-29 | 1 | -3/+1 |
* | Two main changes here: | luigi | 2001-09-27 | 1 | -2/+2 |
* | Make faith loadable, unloadable, and clonable. | brooks | 2001-09-25 | 1 | -7/+3 |
* | Wrap array accesses in macros, which also happen to be lvalues: | jlemon | 2001-09-06 | 1 | -2/+2 |
* | Patches from Keiichi SHIMA <keiichi@iij.ad.jp> | julian | 2001-09-03 | 1 | -9/+7 |
* | When net.inet.tcp.icmp_may_rst is enabled, report ECONNREFUSED not ENETRESET | jesper | 2001-08-27 | 1 | -1/+1 |
* | Add netstat(1) knob to reset net.inet.{ip|icmp|tcp|udp|igmp}.stats. | ru | 2001-06-23 | 1 | -1/+1 |
* | Sync with recent KAME. | ume | 2001-06-11 | 1 | -13/+53 |
* | Make the default value of net.inet.ip.maxfragpackets and | jesper | 2001-06-10 | 1 | -2/+3 |
* | Prevent denial of service using bogus fragmented IPv4 packets. | jesper | 2001-06-03 | 1 | -0/+31 |
* | Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. | kris | 2001-06-01 | 1 | -0/+3 |