| Commit message (Expand) | Author | Age | Files | Lines |
* | The assumption in ipsec4_process_packet() that the payload may be | zec | 2014-07-01 | 1 | -3/+5 |
* | Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6 | bz | 2014-05-28 | 1 | -2/+2 |
* | Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels. | vanhu | 2014-05-28 | 4 | -338/+207 |
* | Only do a ports check if this is a NAT-T SA. Otherwise other | bz | 2014-05-24 | 1 | -6/+20 |
* | Remove _IP_VHL* macros and related ifdefs. | ae | 2014-04-16 | 2 | -24/+0 |
* | The check for local address spoofing lacks ifaddr locking. | ae | 2014-04-04 | 1 | -44/+13 |
* | Remove unused variable. | ae | 2014-04-04 | 1 | -3/+0 |
* | Remove dead code. | ae | 2014-04-04 | 1 | -13/+0 |
* | Remove more constants related to static sysctl nodes. The MAXID constants | jhb | 2014-02-25 | 2 | -5/+0 |
* | Initialize prot variable. | ae | 2013-11-11 | 1 | -0/+1 |
* | Provide includes that are needed in these files, and before were read | glebius | 2013-10-26 | 3 | -1/+5 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | glebius | 2013-10-26 | 5 | -1/+6 |
* | Remove most of the remaining sysctl name list macros. They were only | jhb | 2013-08-26 | 2 | -50/+0 |
* | Remove the large part of struct ipsecstat. Only few fields of this | ae | 2013-07-23 | 1 | -30/+4 |
* | Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat, | ae | 2013-07-09 | 13 | -55/+94 |
* | Prepare network statistics structures for migration to PCPU counters. | ae | 2013-07-09 | 7 | -135/+131 |
* | Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP, | ae | 2013-06-20 | 13 | -202/+194 |
* | Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics | ae | 2013-06-20 | 5 | -14/+16 |
* | Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats. | ae | 2013-04-09 | 2 | -3/+3 |
* | Use m_get2() + m_align() instead of hand made key_alloc_mbuf(). Code | glebius | 2013-03-15 | 1 | -104/+50 |
* | Mechanically substitute flags from historic mbuf allocator with | glebius | 2012-12-05 | 5 | -33/+33 |
* | Do not reduce ip_len by size of IP header in the ip_input() | glebius | 2012-10-23 | 1 | -3/+0 |
* | - Fix one more miss from r241913. | glebius | 2012-10-23 | 1 | -2/+4 |
* | Couple of changes missed from r241913, which converted | glebius | 2012-10-22 | 2 | -23/+9 |
* | Switch the entire IPv4 stack to keep the IP packet header | glebius | 2012-10-22 | 1 | -3/+2 |
* | Mechanically remove the last stray remains of spl* calls from net*/*. | andre | 2012-10-18 | 1 | -6/+0 |
* | Add missing break | kevlo | 2012-09-18 | 1 | -0/+1 |
* | In NAT-T transport mode, allow a client to open a new connection just after | vanhu | 2012-09-12 | 1 | -3/+5 |
* | Merge the projects/pf/head branch, that was worked on for last six months, | glebius | 2012-09-08 | 3 | -6/+0 |
* | Unexpand a couple of TAILQ_FOREACH()s. | jhb | 2012-08-17 | 1 | -2/+1 |
* | Fix a bug introduced in r221129 that leads to a panic wen using bundled | bz | 2012-07-22 | 1 | -2/+1 |
* | Merge multi-FIB IPv6 support from projects/multi-fibv6/head/: | bz | 2012-02-17 | 1 | -1/+1 |
* | Clean up some #endif comments removing from short sections. Add #endif | bz | 2012-01-22 | 1 | -1/+1 |
* | Remove unused 'plen' variable. | pjd | 2011-11-26 | 1 | -2/+1 |
* | The esp_max_ivlen global variable is not needed, we can just use | pjd | 2011-11-26 | 1 | -16/+1 |
* | malloc(M_WAITOK) never fails, so there is no need to check for NULL. | pjd | 2011-11-26 | 1 | -4/+0 |
* | Eliminate 'err' variable and just use existing 'error'. | pjd | 2011-11-26 | 2 | -6/+5 |
* | Simplify code a bit. | pjd | 2011-11-26 | 2 | -12/+6 |
* | There is no need to virtualize esp_max_ivlen. | pjd | 2011-11-26 | 1 | -6/+5 |
* | Add missing va_end() in an error case to clean up after va_start() | brueffer | 2011-10-07 | 1 | -0/+1 |
* | Update packet filter (pf) code to OpenBSD 4.5. | bz | 2011-06-28 | 3 | -0/+6 |
* | Release SP's refcount in key_get_spdbyid(). | vanhu | 2011-05-09 | 1 | -0/+1 |
* | Make IPsec compile without INET adding appropriate #ifdef checks. | bz | 2011-04-27 | 7 | -67/+112 |
* | Do not allow recursive RFC3173 IPComp payload. | bz | 2011-04-01 | 1 | -0/+21 |
* | Optimisation in IPSEC(4): | fabient | 2011-03-31 | 7 | -75/+69 |
* | Fix two SA refcount: | fabient | 2011-03-31 | 2 | -1/+1 |
* | Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant. | vanhu | 2011-02-18 | 4 | -13/+84 |
* | After some off-list discussion, revert a number of changes to the | dim | 2010-11-22 | 3 | -20/+20 |
* | Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughout | dim | 2010-11-14 | 3 | -20/+20 |
* | Announce both IPsec and UDP Encap (NAT-T) if available for | bz | 2010-10-30 | 1 | -0/+5 |