| Commit message (Expand) | Author | Age | Files | Lines |
* | Initialise the intrq_present fields at runtime, not link time. This allows | msmith | 2002-01-08 | 1 | -1/+1 |
* | Fix a missing "ipfw:" in a syslog message. | cjc | 2002-01-07 | 1 | -1/+1 |
* | Pre-calculate the checksum for multicast packets sourced on a | fenner | 2002-01-05 | 1 | -0/+12 |
* | o Spelling fix in comment: tcp_ouput -> tcp_output | rwatson | 2002-01-04 | 2 | -2/+2 |
* | Don't reveal a router in the IPSTEALTH mode through IP options. | yar | 2001-12-29 | 1 | -4/+41 |
* | Fix ipfw fwd so that it acts as the docs say | julian | 2001-12-28 | 2 | -10/+24 |
* | Implement matching IP precedence in ipfw(4). | yar | 2001-12-21 | 2 | -2/+6 |
* | Remove a change that snuck in from my private tree. | jlemon | 2001-12-21 | 1 | -1/+0 |
* | If syncookies are disabled (net.inet.tcp.syncookies) then use the faster | jlemon | 2001-12-21 | 2 | -1/+5 |
* | When storing an int value in a void *, use intptr_t as the cast type | jlemon | 2001-12-19 | 1 | -2/+2 |
* | Don't try to free a NULL route when doing IPFIREWALL_FORWARD. | yar | 2001-12-19 | 1 | -1/+2 |
* | Extend the SYN DoS defense by adding syncookies to the syncache. | jlemon | 2001-12-19 | 1 | -14/+193 |
* | Fixed the bug in transparent TCP proxying with the "encode_ip_hdr" | ru | 2001-12-18 | 1 | -1/+3 |
* | o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108) | rwatson | 2001-12-14 | 1 | -0/+1 |
* | o Add definition for IPOPT_CIPSO, the commercial security IP option | rwatson | 2001-12-14 | 1 | -0/+1 |
* | whitespace and style fixes recovered from -stable. | jlemon | 2001-12-14 | 1 | -33/+35 |
* | minor style and whitespace fixes. | jlemon | 2001-12-14 | 1 | -11/+12 |
* | whitespace fixes. | jlemon | 2001-12-14 | 2 | -7/+7 |
* | minor whitespace fixes. | jlemon | 2001-12-14 | 1 | -1/+1 |
* | Reduce the local network slowstart flightsize from infinity to 4 packets. | silby | 2001-12-14 | 1 | -1/+1 |
* | Undo one of my last minute changes; move sc_iss up earlier so it | jlemon | 2001-12-13 | 1 | -1/+1 |
* | Fix up tabs from cut&n&paste. | jlemon | 2001-12-13 | 1 | -8/+8 |
* | Fix up tabs in comments. | jlemon | 2001-12-13 | 2 | -8/+8 |
* | Minor style fixes. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Minor style fix. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Update to C99, s/__FUNCTION__/__func__/, | obrien | 2001-12-10 | 2 | -3/+3 |
* | o Our currenty userland boot code (due to rc.conf and rc.network) always | rwatson | 2001-12-07 | 1 | -1/+1 |
* | Fixed remotely exploitable DoS in arpresolve(). | ru | 2001-12-05 | 1 | -1/+3 |
* | o Introduce pr_mtx into struct prison, providing protection for the | rwatson | 2001-12-03 | 1 | -2/+2 |
* | Fix a bug with transmitter restart after receiving a 0 window. The | dillon | 2001-12-02 | 5 | -19/+56 |
* | Allow for ip_output() to be called with a NULL route pointer. | ru | 2001-12-01 | 2 | -6/+7 |
* | o Stop abusing MD headers with non-MD types. | mike | 2001-12-01 | 1 | -0/+15 |
* | The transmit burst limit for newreno completely breaks TCP's performance | dillon | 2001-11-30 | 1 | -0/+10 |
* | During SIOCAIFADDR, if in_ifinit() fails and we've already added an | brian | 2001-11-30 | 1 | -24/+39 |
* | - Make ip_rtaddr() global, and use it to look up the correct source | ru | 2001-11-30 | 4 | -42/+35 |
* | ipfw_modevent(): Don't use an unnatural block to define a variable | dd | 2001-11-27 | 1 | -3/+0 |
* | Remove debugging printfs that weren't conditional on any debugging | dd | 2001-11-27 | 1 | -2/+0 |
* | In icmp_reflect(): If the packet was not addressed to us and was | dd | 2001-11-27 | 1 | -2/+15 |
* | Add include of net/route.h, as structures moved around due to the | rwatson | 2001-11-27 | 1 | -0/+1 |
* | Clear a new syncache entry first, followed by filling in values. This | tanimura | 2001-11-27 | 1 | -4/+4 |
* | When servicing an internal FTP server, punch ipfirewall(4) holes | ru | 2001-11-27 | 1 | -5/+2 |
* | Restore the ability to use IP_FW_ADD with setsockopt(2) that got | ru | 2001-11-26 | 1 | -0/+1 |
* | Fixed a buffer overrun. In my kernel configuration, tcp_syncache happens | bde | 2001-11-23 | 1 | -1/+1 |
* | Introduce a syncache, which enables FreeBSD to withstand a SYN flood | jlemon | 2001-11-22 | 10 | -1066/+1909 |
* | Move initialization of snd_recover into tcp_sendseqinit(). | jlemon | 2001-11-21 | 3 | -3/+1 |
* | Give struct socket structures a ref counting interface similar to | dillon | 2001-11-17 | 1 | -1/+1 |
* | o Replace reference to 'struct proc' with 'struct thread' in 'struct | rwatson | 2001-11-08 | 5 | -15/+17 |
* | - Fixes non-zero'd out sin_zero field problem so that the padding | arr | 2001-11-06 | 1 | -0/+1 |
* | 3.5 years ago Wollman wrote: | phk | 2001-11-05 | 2 | -240/+0 |
* | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | luigi | 2001-11-04 | 7 | -126/+157 |