| Commit message (Expand) | Author | Age | Files | Lines |
* | Add netstat(1) knob to reset net.inet.{ip|icmp|tcp|udp|igmp}.stats. | ru | 2001-06-23 | 1 | -1/+1 |
* | Sync with recent KAME. | ume | 2001-06-11 | 1 | -13/+53 |
* | Make the default value of net.inet.ip.maxfragpackets and | jesper | 2001-06-10 | 1 | -2/+3 |
* | Prevent denial of service using bogus fragmented IPv4 packets. | jesper | 2001-06-03 | 1 | -0/+31 |
* | Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. | kris | 2001-06-01 | 1 | -0/+3 |
* | Back out jesper's 2001/05/31 14:58:11 PDT commit. It does not compile. | obrien | 2001-06-01 | 1 | -31/+0 |
* | Prevent denial of service using bogus fragmented IPv4 packets. | jesper | 2001-05-31 | 1 | -0/+31 |
* | Invalidate cached forwarding route (ipforward_rt) whenever a new route | ru | 2001-03-19 | 1 | -1/+1 |
* | Make sure the cached forwarding route (ipforward_rt) is still up before | ru | 2001-03-18 | 1 | -19/+7 |
* | <sys/queue.h> makeover. | phk | 2001-03-16 | 1 | -33/+34 |
* | It was possible for ip_forward() to supply to icmp_error() | iedowse | 2001-03-08 | 1 | -7/+14 |
* | Modify the comments to more closely resemble the English language. | truckman | 2001-03-05 | 1 | -5/+4 |
* | Move the loopback net check closer to the beginning of ip_input() so that | truckman | 2001-03-05 | 1 | -14/+26 |
* | Disable interface checking for packets subject to "ipfw fwd". | truckman | 2001-03-04 | 1 | -3/+4 |
* | Disable interface checking when IP forwarding is engaged so that packets | truckman | 2001-03-04 | 1 | -10/+45 |
* | Add a new sysctl net.inet.ip.check_interface, which will verify that | jlemon | 2001-03-02 | 1 | -1/+5 |
* | When iterating over our list of interface addresses in order to determine | jlemon | 2001-02-27 | 1 | -14/+18 |
* | Allow ICMP unreachables which map into PRC_UNREACH_ADMIN_PROHIB to | jlemon | 2001-02-23 | 1 | -1/+1 |
* | Backout change in 1.153, as it violate rfc1122 section 3.2.1.3. | jesper | 2001-02-21 | 1 | -12/+1 |
* | Send a ICMP unreachable instead of dropping the packet silent, if we | jesper | 2001-02-20 | 1 | -1/+12 |
* | Another round of the <sys/queue.h> FOREACH transmogriffer. | phk | 2001-02-04 | 1 | -2/+1 |
* | Mechanical change to use <sys/queue.h> macro API instead of | phk | 2001-02-04 | 1 | -1/+1 |
* | MFS: bridge/ipfw/dummynet fixes (bridge.c will be committed separately) | luigi | 2001-02-02 | 1 | -2/+13 |
* | Lock down the network interface queues. The queue mutex must be obtained | jlemon | 2000-11-25 | 1 | -4/+2 |
* | Wrong checksum used for certain reassembled IP packets before diverting. | ru | 2000-11-01 | 1 | -1/+4 |
* | Convert all users of fldoff() to offsetof(). fldoff() is bad | phk | 2000-10-27 | 1 | -2/+0 |
* | RFC 791 says that IP_RF bit should always be zero, but nothing | ru | 2000-10-26 | 1 | -52/+29 |
* | Wrong header length used for certain reassembled IP packets. | ru | 2000-10-26 | 1 | -2/+2 |
* | Augment the 'ifaddr' structure with a 'struct if_data' to keep | joe | 2000-10-19 | 1 | -1/+6 |
* | Backout my wrong attempt to fix the compilation warning in ip_input.c | ru | 2000-10-12 | 1 | -1/+1 |
* | Fix the compilation warning. | ru | 2000-10-12 | 1 | -1/+1 |
* | m_cat() can free its second argument, so collect the checksum information | jlemon | 2000-09-14 | 1 | -1/+1 |
* | Follow BSD/OS and NetBSD, keep the ip_id field in network order all the time. | ru | 2000-09-14 | 1 | -4/+0 |
* | Fixed broken ICMP error generation, unified conversion of IP header | ru | 2000-09-01 | 1 | -9/+12 |
* | Nonexistent <sys/pfil.h> -> <net/pfil.h> | ache | 2000-07-31 | 1 | -1/+1 |
* | activate pfil_hooks and covert ipfilter to use it | darrenr | 2000-07-31 | 1 | -10/+28 |
* | sync with kame tree as of july00. tons of bug fixes/improvements. | itojun | 2000-07-04 | 1 | -5/+0 |
* | Add boundary checks against IP options. | jlemon | 2000-06-02 | 1 | -1/+5 |
* | Cast sizeof() calls to be of type (int) when they appear in a signed | jlemon | 2000-05-17 | 1 | -3/+4 |
* | Do not call icmp_error() if ipfirewall(4) denied packet. | ru | 2000-05-15 | 1 | -0/+4 |
* | correct more out-of-bounds memory access, if cnt == 1 and optlen > 1. | itojun | 2000-05-10 | 1 | -0/+4 |
* | Add support for offloading IP/TCP/UDP checksums to NIC hardware which | jlemon | 2000-03-27 | 1 | -3/+14 |
* | Remove option IPFILTER_KLD. In case you wanted to kldload ipfilter, | guido | 2000-02-23 | 1 | -4/+0 |
* | Clean up some loose ends in the network code, including the X.25 and ISO | peter | 2000-02-13 | 1 | -2/+2 |
* | Move definition of fw_enable from ip_fw.c to ip_input.c | luigi | 2000-02-10 | 1 | -0/+1 |
* | Support the net.inet.ip.fw.enable variable, part of | luigi | 2000-02-10 | 1 | -1/+1 |
* | Move the *intrq variables into net/intrq.c and unconditionally | brian | 2000-01-24 | 1 | -1/+2 |
* | IPSEC support in the kernel. | shin | 1999-12-22 | 1 | -19/+123 |
* | Revive mlfk_ipl here. This version is slightly changed from | guido | 1999-12-06 | 1 | -5/+0 |
* | Miscellaneous fixes/cleanups relating to ipfw and divert(4): | archie | 1999-12-06 | 1 | -73/+100 |