| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | add sysctl entry points into various network layers, in particular to |   deraadt | 2007-12-14 | 1 | -1/+6 | |
| | | | | | provide netstat(1) with data it needs; ok claudio reyk | |||||
| * | Cleanup, kill dead code and unused arguments. Mostly stuff that is computed |   claudio | 2007-02-10 | 1 | -3/+3 | |
| | | | | | and passed around but never used. OK mglocker@ | |||||
| * | use IN6_IS_SCOPE_EMBED to check kernel-internal form addresses |   itojun | 2006-12-13 | 1 | -3/+3 | |
| | | | | | | (s6_addr16[1] filled) ok dhartmei | |||||
| * | Remove virtual tunnel support from the mrouting code. The virtual tunnel | claudio | 2006-04-25 | 1 | -10/+1 | |
| | | | | | | | code breaks multicast on gif(4) interfaces and it is far better to configure a real gif(4) tunnel instead of a multicast tunnel as the latter is almost not manageable. OK norby@, mblamer@ | |||||
| * | allow bpf(4) to ignore packets based on their direction (inbound or |   djm | 2006-03-25 | 1 | -2/+2 | |
| | | | | | | outbound), using a new BIOCSDIRFILT ioctl; guidance, feedback and ok canacar@ | |||||
| * | Use more queue macros rather than doing it by hand; ok otto@ krw@ |   miod | 2006-03-05 | 1 | -5/+3 | |
| | | ||||||
| * | With the exception of two other small uncommited diffs this moves |   brad | 2006-03-04 | 1 | -2/+2 | |
| | | | | | | | the remainder of the network stack from splimp to splnet. ok miod@ | |||||
| * | Introduce bpf_mtap_af and bpf_mtap_hdr to be used when passing a mbuf chain |   pascoe | 2005-07-31 | 1 | -17/+4 | |
| | | | | | | | | | | | to bpf with either an address family or other header added. These helpers only allocate a much smaller struct m_hdr on the stack when needed, rather than leaving 256 byte struct mbufs on the stack in deep call paths. Also removes a fair bit of duplicated code. commit now, tune after deraadt@ | |||||
| * | ip6_plen does not include the size of the ipv6 header; ok itojun |   markus | 2004-11-17 | 1 | -2/+2 | |
| | | ||||||
| * | make it possble to use IPsec over link-local address (policy table uses | itojun | 2004-06-21 | 1 | -3/+3 | |
| | | | | | sin6_scope_id, IPsec porion uses embedded form). beck ok | |||||
| * | de-register. deraadt ok | itojun | 2003-12-10 | 1 | -5/+5 | |
| | | ||||||
| * | just as a safety measure, set m_flags to 0 for mbufs allocated on stack. | itojun | 2003-05-03 | 1 | -1/+2 | |
| | | | | | dhartmei ok | |||||
| * | KNF | deraadt | 2003-01-31 | 1 | -2/+2 | |
| | | ||||||
| * | Also, return EAFNOSUPPORT instead of ENOBUFS. Both this and the |   angelos | 2002-07-05 | 1 | -2/+2 | |
| | | | | | previous commit where noted by sam@errno.com | |||||
| * | Bump ipips_family in ipipstat in all cases where EAFNOSUPPORT is returned. | angelos | 2002-07-05 | 1 | -1/+3 | |
| | | ||||||
| * | correct tcpdump on gif interface (inbound). reported by fries | itojun | 2002-06-10 | 1 | -16/+29 | |
| | | ||||||
| * | whitespace | itojun | 2002-06-09 | 1 | -8/+8 | |
| | | ||||||
| * | bring in ECN support from KAME. |   kjc | 2002-05-16 | 1 | -3/+9 | |
| | | | | | | | | | | | | | it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@ | |||||
| * | Sanity check on inner IP header in IP-in-IP encapsulation; could be | angelos | 2001-12-06 | 1 | -1/+8 | |
| | | | | | | exploited to crash systems that allowed IP-in-IP protocol (sysctl -w net.inet.ipip.allow=1) | |||||
| * | Pass the interface (if any) to ipip_input(), so it can be used in | angelos | 2001-08-19 | 1 | -8/+25 | |
| | | | | | BPF. Closes PR 2000. | |||||
| * | Make preprocessor happier, don't give it untasty tokens at end of input. |   espie | 2001-07-04 | 1 | -2/+2 | |
| | | | | | Ok millert@ | |||||
| * | More KNF | angelos | 2001-06-26 | 1 | -367/+342 | |
| | | ||||||
| * | Copyright. | angelos | 2001-06-25 | 1 | -4/+4 | |
| | | ||||||
| * | mop up after angelos | deraadt | 2001-06-19 | 1 | -2/+2 | |
| | | ||||||
| * | Cut down on include files. | angelos | 2001-06-08 | 1 | -14/+1 | |
| | | ||||||
| * | Match prototype. | angelos | 2001-05-30 | 1 | -2/+2 | |
| | | ||||||
| * | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok |   aaron | 2001-05-11 | 1 | -3/+3 | |
| | | ||||||
| * | Minor changes, preparing for real socket-attached TDBs; also, more | angelos | 2001-04-14 | 1 | -2/+2 | |
| | | | | | information will be stored in the TDB. ok ho@ provos@ | |||||
| * | Move offsetof define into sys/param.h |   csapuntz | 2001-04-06 | 1 | -5/+1 | |
| | | ||||||
| * | Allow tdbi's to appear in mbufs throughout the stack; this allows | angelos | 2001-03-28 | 1 | -42/+3 | |
| | | | | | | | | | | security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs. | |||||
| * | If net.inet.ipip.allow is set to 2, don't check for loopback address | angelos | 2001-02-28 | 1 | -3/+4 | |
| | | | | | | spoofing of encapsulated packets (useful for single-machinet testing of isakmpd) | |||||
| * | Lots and lots of changes. | angelos | 2000-09-19 | 1 | -8/+42 | |
| | | ||||||
| * | One parenthesis too many. | angelos | 2000-08-04 | 1 | -2/+2 | |
| | | ||||||
| * | Worked out the logic (thanks to pt98asp@student.hk-r.se and | angelos | 2000-08-04 | 1 | -3/+4 | |
| | | | | | | pt98kfr@student.hk-r.se -- I still don't know why rev1.5 didn't work). | |||||
| * | Back to the submitted patch -- this needs more investigation. | angelos | 2000-08-03 | 1 | -3/+3 | |
| | | ||||||
| * | In fact, this is the correct behaviour (or I'm going crazy). | angelos | 2000-08-03 | 1 | -3/+3 | |
| | | ||||||
| * | Correct handling of ip_off (askk@rsn.hk-r.se) | angelos | 2000-08-03 | 1 | -2/+3 | |
| | | ||||||
| * | try to cope with AH6 with scoped address case better. | itojun | 2000-06-20 | 1 | -2/+9 | |
| | | ||||||
| * | Typo. | angelos | 2000-01-21 | 1 | -2/+2 | |
| | | ||||||
| * | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | angelos | 2000-01-21 | 1 | -0/+655 | |
| affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input. | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |