| Commit message (Expand) | Author | Age | Files | Lines |
* | Enforce inbound IPsec SPD | jedgar | 2002-02-26 | 1 | -1/+11 |
* | Document what inpcb->inp_vflag is for. | alfred | 2002-02-25 | 1 | -1/+1 |
* | The TCP code did not do sufficient checks on whether incoming packets | cjc | 2002-02-25 | 2 | -14/+26 |
* | BUGFIX: make use of the pointer to the target of skipto rules, | luigi | 2002-02-20 | 1 | -2/+4 |
* | When expanding a syncache entry into a socket, inherit the socket options | jlemon | 2002-02-20 | 1 | -1/+1 |
* | o Move NTOHL() and associated macros into <sys/param.h>. These are | mike | 2002-02-18 | 9 | -53/+70 |
* | Moved the 127/8 check below so that IPF redirects have a chance of working. | ru | 2002-02-15 | 1 | -10/+10 |
* | When a duplicate SYN arrives which matches an entry in the syncache, | jlemon | 2002-02-12 | 1 | -0/+5 |
* | Silence unused variable warning in the !KLD_MODULE case. | dd | 2002-02-10 | 1 | -0/+2 |
* | Pre-KSE/M3 commit. | julian | 2002-02-07 | 1 | -2/+2 |
* | In tcp_respond(), correctly reset returned IPv6 header. This is essential | ume | 2002-02-04 | 2 | -0/+6 |
* | WARNS=n and lint(1) silencer. Declare an array of (const) strings | markm | 2002-02-03 | 1 | -1/+1 |
* | The ipfw(8) 'tee' action simply hasn't worked on incoming packets for | cjc | 2002-01-26 | 1 | -0/+3 |
* | The ENDPTS_EQ macro was comparing the one of the fports to itself. Fix. | jlemon | 2002-01-22 | 1 | -1/+1 |
* | - Check the address family of the destination cached in a PCB. | ume | 2002-01-21 | 2 | -4/+12 |
* | RFC1122 requires that addresses of the form { 127, <any> } MUST NOT | ru | 2002-01-21 | 1 | -1/+11 |
* | Fix a panic condition in icmp_reflect() introduced in rev. 1.61. | ru | 2002-01-11 | 1 | -2/+2 |
* | Initialise the intrq_present fields at runtime, not link time. This allows | msmith | 2002-01-08 | 1 | -1/+1 |
* | Fix a missing "ipfw:" in a syslog message. | cjc | 2002-01-07 | 1 | -1/+1 |
* | Pre-calculate the checksum for multicast packets sourced on a | fenner | 2002-01-05 | 1 | -0/+12 |
* | o Spelling fix in comment: tcp_ouput -> tcp_output | rwatson | 2002-01-04 | 2 | -2/+2 |
* | Don't reveal a router in the IPSTEALTH mode through IP options. | yar | 2001-12-29 | 1 | -4/+41 |
* | Fix ipfw fwd so that it acts as the docs say | julian | 2001-12-28 | 2 | -10/+24 |
* | Implement matching IP precedence in ipfw(4). | yar | 2001-12-21 | 2 | -2/+6 |
* | Remove a change that snuck in from my private tree. | jlemon | 2001-12-21 | 1 | -1/+0 |
* | If syncookies are disabled (net.inet.tcp.syncookies) then use the faster | jlemon | 2001-12-21 | 2 | -1/+5 |
* | When storing an int value in a void *, use intptr_t as the cast type | jlemon | 2001-12-19 | 1 | -2/+2 |
* | Don't try to free a NULL route when doing IPFIREWALL_FORWARD. | yar | 2001-12-19 | 1 | -1/+2 |
* | Extend the SYN DoS defense by adding syncookies to the syncache. | jlemon | 2001-12-19 | 1 | -14/+193 |
* | Fixed the bug in transparent TCP proxying with the "encode_ip_hdr" | ru | 2001-12-18 | 1 | -1/+3 |
* | o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108) | rwatson | 2001-12-14 | 1 | -0/+1 |
* | o Add definition for IPOPT_CIPSO, the commercial security IP option | rwatson | 2001-12-14 | 1 | -0/+1 |
* | whitespace and style fixes recovered from -stable. | jlemon | 2001-12-14 | 1 | -33/+35 |
* | minor style and whitespace fixes. | jlemon | 2001-12-14 | 1 | -11/+12 |
* | whitespace fixes. | jlemon | 2001-12-14 | 2 | -7/+7 |
* | minor whitespace fixes. | jlemon | 2001-12-14 | 1 | -1/+1 |
* | Reduce the local network slowstart flightsize from infinity to 4 packets. | silby | 2001-12-14 | 1 | -1/+1 |
* | Undo one of my last minute changes; move sc_iss up earlier so it | jlemon | 2001-12-13 | 1 | -1/+1 |
* | Fix up tabs from cut&n&paste. | jlemon | 2001-12-13 | 1 | -8/+8 |
* | Fix up tabs in comments. | jlemon | 2001-12-13 | 2 | -8/+8 |
* | Minor style fixes. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Minor style fix. | jlemon | 2001-12-13 | 1 | -2/+2 |
* | Update to C99, s/__FUNCTION__/__func__/, | obrien | 2001-12-10 | 2 | -3/+3 |
* | o Our currenty userland boot code (due to rc.conf and rc.network) always | rwatson | 2001-12-07 | 1 | -1/+1 |
* | Fixed remotely exploitable DoS in arpresolve(). | ru | 2001-12-05 | 1 | -1/+3 |
* | o Introduce pr_mtx into struct prison, providing protection for the | rwatson | 2001-12-03 | 1 | -2/+2 |
* | Fix a bug with transmitter restart after receiving a 0 window. The | dillon | 2001-12-02 | 5 | -19/+56 |
* | Allow for ip_output() to be called with a NULL route pointer. | ru | 2001-12-01 | 2 | -6/+7 |
* | o Stop abusing MD headers with non-MD types. | mike | 2001-12-01 | 1 | -0/+15 |
* | The transmit burst limit for newreno completely breaks TCP's performance | dillon | 2001-11-30 | 1 | -0/+10 |