| Commit message (Expand) | Author | Age | Files | Lines |
* | Treat errors when retrieving security policy as policy violation. | ae | 2014-12-11 | 1 | -2/+4 |
* | Initialize error variable. | ae | 2014-12-11 | 1 | -0/+1 |
* | Remove flag/flags argument from the following functions: | ae | 2014-12-11 | 2 | -23/+12 |
* | Remove flags and tunalready arguments from ipsec4_process_packet() | ae | 2014-12-11 | 2 | -94/+54 |
* | Remove now unused mtag argument from ipsec*_common_input_cb. | ae | 2014-12-11 | 6 | -31/+16 |
* | Remove code related to PACKET_TAG_IPSEC_IN_CRYPTO_DONE mbuf tag. | ae | 2014-12-11 | 2 | -153/+71 |
* | Remove unused mtag variable. | ae | 2014-12-11 | 1 | -2/+0 |
* | key_getspacq() returns holding the spacq_lock. Unlock it in all cases. | ae | 2014-12-07 | 1 | -1/+2 |
* | Fix style(9) and remove m_freem(NULL). | ae | 2014-12-04 | 1 | -4/+3 |
* | Remove __P() macro. | ae | 2014-12-03 | 10 | -206/+202 |
* | ANSIfy function declarations. | ae | 2014-12-03 | 3 | -257/+103 |
* | Remove unneded check. No need to do m_pullup to the size that we prepended. | ae | 2014-12-02 | 1 | -2/+0 |
* | Remove route chaching support from ipsec code. It isn't used for some time. | ae | 2014-12-02 | 15 | -47/+4 |
* | Remove unused structure declarations. | ae | 2014-12-02 | 1 | -11/+0 |
* | Remove unused declartations. | ae | 2014-12-02 | 1 | -10/+0 |
* | Remove ip4_input() declaration. It was removed in r275133. | ae | 2014-11-27 | 1 | -1/+0 |
* | Do not use xform_ipip as decapsulation fallback. | ae | 2014-11-26 | 3 | -433/+6 |
* | Count statistics for the specific address family. | ae | 2014-11-13 | 1 | -1/+2 |
* | Strip IP header only when we act in tunnel mode. | ae | 2014-11-13 | 1 | -29/+30 |
* | Remove redundant ip6_plen initialization. | ae | 2014-11-13 | 1 | -3/+0 |
* | ipsec6_process_packet is called before ip6_output fixes ip6_plen. | ae | 2014-11-12 | 1 | -5/+2 |
* | Fix ips_out_nosa errors accounting. | ae | 2014-11-12 | 1 | -1/+10 |
* | Pass mbuf to pfil processing before stripping outer IP header as it | ae | 2014-11-07 | 1 | -17/+6 |
* | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | glebius | 2014-11-07 | 6 | -74/+74 |
* | When mode isn't explicitly specified (wildcard) and inner protocol isn't | ae | 2014-11-06 | 1 | -1/+10 |
* | Use in_localip() instead of handmade implementation. | ae | 2014-10-31 | 1 | -21/+2 |
* | Use a static callout to drive key_timehandler() instead of timeout(). | jhb | 2014-10-23 | 2 | -5/+9 |
* | Fix multiple incorrect SYSCTL arguments in the kernel: | hselasky | 2014-10-21 | 1 | -1/+1 |
* | Do not strip outer header when operating in transport mode. | ae | 2014-10-02 | 1 | -2/+10 |
* | Mechanically convert to if_inc_counter(). | glebius | 2014-09-19 | 2 | -8/+8 |
* | Change pr_output's prototype to avoid the need for explicit casts. | kevlo | 2014-08-15 | 2 | -2/+2 |
* | Merge 'struct ip6protosw' and 'struct protosw' into one. Now we have | kevlo | 2014-08-08 | 4 | -14/+40 |
* | Fix style bug: rename the refcount field of m_ext to ext_cnt, to match | glebius | 2014-07-11 | 1 | -2/+2 |
* | The assumption in ipsec4_process_packet() that the payload may be | zec | 2014-07-01 | 1 | -3/+5 |
* | Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6 | bz | 2014-05-28 | 1 | -2/+2 |
* | Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels. | vanhu | 2014-05-28 | 4 | -338/+207 |
* | Only do a ports check if this is a NAT-T SA. Otherwise other | bz | 2014-05-24 | 1 | -6/+20 |
* | Remove _IP_VHL* macros and related ifdefs. | ae | 2014-04-16 | 2 | -24/+0 |
* | The check for local address spoofing lacks ifaddr locking. | ae | 2014-04-04 | 1 | -44/+13 |
* | Remove unused variable. | ae | 2014-04-04 | 1 | -3/+0 |
* | Remove dead code. | ae | 2014-04-04 | 1 | -13/+0 |
* | Remove more constants related to static sysctl nodes. The MAXID constants | jhb | 2014-02-25 | 2 | -5/+0 |
* | Initialize prot variable. | ae | 2013-11-11 | 1 | -0/+1 |
* | Provide includes that are needed in these files, and before were read | glebius | 2013-10-26 | 3 | -1/+5 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | glebius | 2013-10-26 | 5 | -1/+6 |
* | Remove most of the remaining sysctl name list macros. They were only | jhb | 2013-08-26 | 2 | -50/+0 |
* | Remove the large part of struct ipsecstat. Only few fields of this | ae | 2013-07-23 | 1 | -30/+4 |
* | Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat, | ae | 2013-07-09 | 13 | -55/+94 |
* | Prepare network statistics structures for migration to PCPU counters. | ae | 2013-07-09 | 7 | -135/+131 |
* | Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP, | ae | 2013-06-20 | 13 | -202/+194 |