| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix the comment. We will not do SPD lookup again, because | ae | 2015-04-28 | 1 | -2/+1 |
* | Since PFIL can change mbuf pointer, we should update pointers after | ae | 2015-04-28 | 1 | -0/+2 |
* | Fix possible use after free due to security policy deletion. | ae | 2015-04-27 | 1 | -2/+15 |
* | Change ipsec_address() and ipsec_logsastr() functions to take two | ae | 2015-04-18 | 1 | -10/+11 |
* | Fix handling of scoped IPv6 addresses in IPSec code. | ae | 2015-04-18 | 1 | -0/+7 |
* | Remove xform_ipip.c and code related to XF_IP4. | ae | 2015-04-18 | 1 | -92/+128 |
* | Remove flags and tunalready arguments from ipsec4_process_packet() | ae | 2014-12-11 | 1 | -92/+53 |
* | Remove route chaching support from ipsec code. It isn't used for some time. | ae | 2014-12-02 | 1 | -1/+0 |
* | Count statistics for the specific address family. | ae | 2014-11-13 | 1 | -1/+2 |
* | ipsec6_process_packet is called before ip6_output fixes ip6_plen. | ae | 2014-11-12 | 1 | -5/+2 |
* | Fix ips_out_nosa errors accounting. | ae | 2014-11-12 | 1 | -1/+10 |
* | Mechanically convert to if_inc_counter(). | glebius | 2014-09-19 | 1 | -4/+4 |
* | The assumption in ipsec4_process_packet() that the payload may be | zec | 2014-07-01 | 1 | -3/+5 |
* | Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6 | bz | 2014-05-28 | 1 | -2/+2 |
* | Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels. | vanhu | 2014-05-28 | 1 | -269/+112 |
* | Remove _IP_VHL* macros and related ifdefs. | ae | 2014-04-16 | 1 | -12/+0 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | glebius | 2013-10-26 | 1 | -0/+1 |
* | Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP, | ae | 2013-06-20 | 1 | -6/+10 |
* | Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics | ae | 2013-06-20 | 1 | -6/+6 |
* | Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats. | ae | 2013-04-09 | 1 | -1/+1 |
* | Mechanically substitute flags from historic mbuf allocator with | glebius | 2012-12-05 | 1 | -2/+2 |
* | Couple of changes missed from r241913, which converted | glebius | 2012-10-22 | 1 | -6/+2 |
* | Merge the projects/pf/head branch, that was worked on for last six months, | glebius | 2012-09-08 | 1 | -2/+0 |
* | Fix a bug introduced in r221129 that leads to a panic wen using bundled | bz | 2012-07-22 | 1 | -2/+1 |
* | Merge multi-FIB IPv6 support from projects/multi-fibv6/head/: | bz | 2012-02-17 | 1 | -1/+1 |
* | Update packet filter (pf) code to OpenBSD 4.5. | bz | 2011-06-28 | 1 | -0/+2 |
* | Make IPsec compile without INET adding appropriate #ifdef checks. | bz | 2011-04-27 | 1 | -1/+23 |
* | Fix two SA refcount: | fabient | 2011-03-31 | 1 | -1/+0 |
* | Make the IPsec SADB embedded route cache a union to be able to hold both the | bz | 2010-10-23 | 1 | -1/+2 |
* | Remove dead code: | bz | 2010-10-14 | 1 | -3/+1 |
* | Style: make the asterisk go with the variable name, not the type. | bz | 2010-10-14 | 1 | -1/+1 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 1 | -1/+0 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 1 | -8/+1 |
* | Added support for NAT-Traversal (RFC 3948) in IPsec stack. | vanhu | 2009-06-12 | 1 | -0/+55 |
* | Use NULL rather than 0 when comparing pointers. | bz | 2009-01-30 | 1 | -2/+2 |
* | Rather than using hidden includes (with cicular dependencies), | bz | 2008-12-02 | 1 | -0/+1 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -0/+7 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -17/+18 |
* | Increase statistic counters for enc0 interface when enabled | vanhu | 2008-08-12 | 1 | -0/+11 |
* | In addition to the ipsec_osdep.h removal a week ago, now also eliminate | bz | 2008-05-24 | 1 | -3/+0 |
* | Correct IPsec behaviour with a 'use' level in SP but no SA available. | bz | 2008-03-14 | 1 | -22/+33 |
* | Add sysctls to if_enc(4) to control whether the firewalls or | bz | 2007-11-28 | 1 | -2/+24 |
* | Replace hard coded options by their defined PFIL_{IN,OUT} names. | bz | 2007-07-19 | 1 | -1/+2 |
* | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 1 | -13/+18 |
* | In ipsec6_output_tunnel() make sure that the SA contents do not change. | bz | 2007-05-29 | 1 | -1/+8 |
* | fix typo: s,applyed,applied,g | bz | 2007-05-29 | 1 | -2/+2 |
* | Add a pseudo interface for packet filtering IPSec connections before or after | thompsa | 2006-06-26 | 1 | -0/+13 |
* | Retire MT_HEADER mbuf type and change its users to use MT_DATA. | andre | 2005-11-02 | 1 | -1/+1 |
* | Fix ipip_output() to always set *mp to NULL on failure, even if 'm' | sam | 2004-01-20 | 1 | -1/+4 |
* | MFp4: portability work, general cleanup, locking fixes | sam | 2003-09-29 | 1 | -44/+46 |