| Commit message (Expand) | Author | Age | Files | Lines |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
* | Remove stone-aged and irrelevant "#ifndef notdef". | andre | 2006-09-29 | 1 | -2/+2 |
* | Account for output IP datagrams on the ifaddr where they originated from, | bms | 2006-09-25 | 1 | -5/+12 |
* | Fix a NULL pointer dereference of ro->ro_rt->rt_flags by checking for the | andre | 2006-09-11 | 1 | -1/+1 |
* | make use of the host route's mtu for processing. This means we can now | jmg | 2006-09-10 | 1 | -18/+25 |
* | First step of TSO (TCP segmentation offload) support in our network stack. | andre | 2006-09-06 | 1 | -6/+17 |
* | Fix the socket option IP_ONESBCAST by giving it its own case in ip_output() | andre | 2006-09-06 | 1 | -2/+11 |
* | Remove the IPFIREWALL_FORWARD_EXTENDED option and make it on by default as it... | julian | 2006-08-17 | 1 | -14/+5 |
* | Fix URL to Bellovin's paper. | glebius | 2006-06-29 | 1 | -1/+1 |
* | o Add missed error check: in ip_ctloutput() sooptcopyin() returns a | maxim | 2006-05-21 | 1 | -0/+4 |
* | Fix a long-standing limitation in IPv4 multicast group membership. | bms | 2006-05-14 | 1 | -1/+29 |
* | Somewhat re-factor the read/write locking mechanism associated with the packet | csjp | 2006-02-02 | 1 | -1/+1 |
* | Move the IPSEC related code blocks to their own file to unclutter | andre | 2006-02-01 | 1 | -280/+17 |
* | In in_delayed_cksum() we can't perform a m_pullup() as it may | andre | 2006-01-18 | 1 | -2/+2 |
* | Prevent dereferencing a NULL route pointer when trying to update the | andre | 2006-01-18 | 1 | -1/+2 |
* | When we drop packet due to no space in output interface output queue, also | glebius | 2005-12-06 | 1 | -0/+1 |
* | Consolidate all IP Options handling functions into ip_options.[ch] and | andre | 2005-11-18 | 1 | -212/+1 |
* | Purge layer specific mbuf flags on layer crossings to avoid confusing | andre | 2005-11-18 | 1 | -1/+12 |
* | Retire MT_HEADER mbuf type and change its users to use MT_DATA. | andre | 2005-11-02 | 1 | -2/+2 |
* | Implement IP_DONTFRAG IP socket option enabling the Don't Fragment | andre | 2005-09-26 | 1 | -1/+9 |
* | Use the correct mbuf type for MGET(). | andre | 2005-08-30 | 1 | -1/+1 |
* | Add socketoption IP_MINTTL. May be used to set the minimum acceptable | andre | 2005-08-22 | 1 | -0/+14 |
* | Add helper function ip_findmoptions(), which accepts an inpcb, and attempts | rwatson | 2005-08-09 | 1 | -33/+58 |
* | Introduce in_multi_mtx, which will protect IPv4-layer multicast address | rwatson | 2005-08-03 | 1 | -0/+3 |
* | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 1 | -1/+1 |
* | Stop embedding struct ifnet at the top of driver softcs. Instead the | brooks | 2005-06-10 | 1 | -2/+2 |
* | Bring back the full packet destination manipulation for 'ipfw fwd' | andre | 2005-02-22 | 1 | -1/+5 |
* | Correctly move the packet header in ip_insertoptions(). | alc | 2005-01-23 | 1 | -1/+2 |
* | /* -> /*- for license, minor formatting changes | imp | 2005-01-07 | 1 | -1/+1 |
* | Remove an errant blank line apparently introduced in | rwatson | 2004-12-25 | 1 | -1/+0 |
* | Pass the inpcb reference into ip_getmoptions() rather than just the | rwatson | 2004-12-05 | 1 | -6/+14 |
* | Push the inpcb argument into ip_setmoptions() when setting IP multicast | rwatson | 2004-12-05 | 1 | -10/+8 |
* | Start working through inpcb locking for ip_ctloutput() by cleaning up | rwatson | 2004-12-05 | 1 | -10/+13 |
* | Add an additional struct inpcb * argument to pfil(9) in order to enable | mlaier | 2004-09-29 | 1 | -1/+1 |
* | Make comments more clear for the packet changed cases after pfil hooks. | andre | 2004-09-13 | 1 | -1/+2 |
* | revert comment from rev1.158 now that rev1.225 backed it out.. | jmg | 2004-09-06 | 1 | -3/+1 |
* | In the case the destination of a packet was changed by the packet filter | andre | 2004-08-27 | 1 | -2/+2 |
* | Always compile PFIL_HOOKS into the kernel and remove the associated kernel | andre | 2004-08-27 | 1 | -17/+7 |
* | Allow early drop for non-ALTQ enabled queues in an ALTQ-enabled kernel. | mlaier | 2004-08-22 | 1 | -13/+14 |
* | Make the kernel compile again if you are not using PFIL_HOOKS | peter | 2004-08-18 | 1 | -0/+4 |
* | Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland | andre | 2004-08-17 | 1 | -282/+67 |
* | Get rid of the RANDOM_IP_ID option and make it a sysctl. NetBSD | dwmalone | 2004-08-14 | 1 | -6/+1 |
* | Consistently use NULL for pointer comparisons. | andre | 2004-08-11 | 1 | -10/+10 |
* | Make a comment that "ipfw forward" is not SMP and PREEMPTION safe. | andre | 2004-08-09 | 1 | -0/+1 |
* | o Delayed checksums are now calculated in divert_packet() for diverted packets | andre | 2004-08-03 | 1 | -10/+0 |
* | In ip_ctloutput(), acquire the inpcb lock around some of the basic | rwatson | 2004-06-24 | 1 | -5/+10 |
* | Link ALTQ to the build and break with ABI for struct ifnet. Please recompile | mlaier | 2004-06-13 | 1 | -0/+7 |
* | o Calculate a number of bytes to copy (cnt) correctly: | maxim | 2004-05-11 | 1 | -1/+1 |
* | Rename m_claim_next_hop() to m_claim_next(), as suggested by Max Laier. | darrenr | 2004-05-02 | 1 | -1/+1 |
* | Rename ip_claim_next_hop() to m_claim_next_hop(), give it an extra arg | darrenr | 2004-05-02 | 1 | -1/+1 |