| Commit message (Expand) | Author | Age | Files | Lines |
* | When a duplicate SYN arrives which matches an entry in the syncache, | jlemon | 2002-02-12 | 1 | -0/+5 |
* | Silence unused variable warning in the !KLD_MODULE case. | dd | 2002-02-10 | 1 | -0/+2 |
* | Pre-KSE/M3 commit. | julian | 2002-02-07 | 1 | -2/+2 |
* | In tcp_respond(), correctly reset returned IPv6 header. This is essential | ume | 2002-02-04 | 2 | -0/+6 |
* | WARNS=n and lint(1) silencer. Declare an array of (const) strings | markm | 2002-02-03 | 1 | -1/+1 |
* | The ipfw(8) 'tee' action simply hasn't worked on incoming packets for | cjc | 2002-01-26 | 1 | -0/+3 |
* | The ENDPTS_EQ macro was comparing the one of the fports to itself. Fix. | jlemon | 2002-01-22 | 1 | -1/+1 |
* | - Check the address family of the destination cached in a PCB. | ume | 2002-01-21 | 2 | -4/+12 |
* | RFC1122 requires that addresses of the form { 127, <any> } MUST NOT | ru | 2002-01-21 | 1 | -1/+11 |
* | Fix a panic condition in icmp_reflect() introduced in rev. 1.61. | ru | 2002-01-11 | 1 | -2/+2 |
* | Initialise the intrq_present fields at runtime, not link time. This allows | msmith | 2002-01-08 | 1 | -1/+1 |
* | Fix a missing "ipfw:" in a syslog message. | cjc | 2002-01-07 | 1 | -1/+1 |
* | Pre-calculate the checksum for multicast packets sourced on a | fenner | 2002-01-05 | 1 | -0/+12 |
* | o Spelling fix in comment: tcp_ouput -> tcp_output | rwatson | 2002-01-04 | 2 | -2/+2 |
* | Don't reveal a router in the IPSTEALTH mode through IP options. | yar | 2001-12-29 | 1 | -4/+41 |
* | Fix ipfw fwd so that it acts as the docs say | julian | 2001-12-28 | 2 | -10/+24 |
* | Implement matching IP precedence in ipfw(4). | yar | 2001-12-21 | 2 | -2/+6 |
* | Remove a change that snuck in from my private tree. | jlemon | 2001-12-21 | 1 | -1/+0 |
* | If syncookies are disabled (net.inet.tcp.syncookies) then use the faster | jlemon | 2001-12-21 | 2 | -1/+5 |
* | When storing an int value in a void *, use intptr_t as the cast type | jlemon | 2001-12-19 | 1 | -2/+2 |
* | Don't try to free a NULL route when doing IPFIREWALL_FORWARD. | yar | 2001-12-19 | 1 | -1/+2 |
* | Extend the SYN DoS defense by adding syncookies to the syncache. | jlemon | 2001-12-19 | 1 | -14/+193 |
* | Fixed the bug in transparent TCP proxying with the "encode_ip_hdr" | ru | 2001-12-18 | 1 | -1/+3 |
* | o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108) | rwatson | 2001-12-14 | 1 | -0/+1 |
* | o Add definition for IPOPT_CIPSO, the commercial security IP option | rwatson | 2001-12-14 | 1 | -0/+1 |
* | whitespace and style fixes recovered from -stable. | jlemon | 2001-12-14 | 1 | -33/+35 |
* | minor style and whitespace fixes. | jlemon | 2001-12-14 | 1 | -11/+12 |
* | whitespace fixes. | jlemon | 2001-12-14 | 2 | -7/+7 |
* | minor whitespace fixes. | jlemon | 2001-12-14 | 1 | -1/+1 |
* | Reduce the local network slowstart flightsize from infinity to 4 packets. | silby | 2001-12-14 | 1 | -1/+1 |
* | Undo one of my last minute changes; move sc_iss up earlier so it | jlemon | 2001-12-13 | 1 | -1/+1 |
* | Fix up tabs from cut&n&paste. | jlemon | 2001-12-13 | 1 | -8/+8 |
* | Fix up tabs in comments. | jlemon | 2001-12-13 | 2 | -8/+8 |
* | Minor style fixes. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Minor style fix. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Update to C99, s/__FUNCTION__/__func__/, | obrien | 2001-12-10 | 2 | -3/+3 |
* | o Our currenty userland boot code (due to rc.conf and rc.network) always | rwatson | 2001-12-07 | 1 | -1/+1 |
* | Fixed remotely exploitable DoS in arpresolve(). | ru | 2001-12-05 | 1 | -1/+3 |
* | o Introduce pr_mtx into struct prison, providing protection for the | rwatson | 2001-12-03 | 1 | -2/+2 |
* | Fix a bug with transmitter restart after receiving a 0 window. The | dillon | 2001-12-02 | 5 | -19/+56 |
* | Allow for ip_output() to be called with a NULL route pointer. | ru | 2001-12-01 | 2 | -6/+7 |
* | o Stop abusing MD headers with non-MD types. | mike | 2001-12-01 | 1 | -0/+15 |
* | The transmit burst limit for newreno completely breaks TCP's performance | dillon | 2001-11-30 | 1 | -0/+10 |
* | During SIOCAIFADDR, if in_ifinit() fails and we've already added an | brian | 2001-11-30 | 1 | -24/+39 |
* | - Make ip_rtaddr() global, and use it to look up the correct source | ru | 2001-11-30 | 4 | -42/+35 |
* | ipfw_modevent(): Don't use an unnatural block to define a variable | dd | 2001-11-27 | 1 | -3/+0 |
* | Remove debugging printfs that weren't conditional on any debugging | dd | 2001-11-27 | 1 | -2/+0 |
* | In icmp_reflect(): If the packet was not addressed to us and was | dd | 2001-11-27 | 1 | -2/+15 |
* | Add include of net/route.h, as structures moved around due to the | rwatson | 2001-11-27 | 1 | -0/+1 |
* | Clear a new syncache entry first, followed by filling in values. This | tanimura | 2001-11-27 | 1 | -4/+4 |