| Commit message (Expand) | Author | Age | Files | Lines |
| * | add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4) |  markus | 2012-07-16 | 1 | -2/+12 |
| * | unneccessary casts to unsigned; ok claudio |  deraadt | 2012-04-13 | 1 | -5/+5 |
| * | Bring the rtable sockopt code in line with the setrtable() implementation. |  claudio | 2012-04-07 | 1 | -8/+9 |
| * | actually store the result of the pmtu-route lookup. otherwise we |  markus | 2012-03-30 | 1 | -3/+2 |
| * | remove IP_JUMBO, SO_JUMBO, and RTF_JUMBO. |  dlg | 2012-03-17 | 1 | -9/+1 |
| * | Escape hardware-checksumming if interface is in a bridge, this is |  haesbaert | 2011-12-29 | 1 | -4/+7 |
| * | Kill unused IFCAP_IPSEC and IFCAP_IPCOMP. |  haesbaert | 2011-12-02 | 1 | -5/+3 |
| * | Bye bye pf_test6(). Only one pf_test function for both IPv4 and v6. |  claudio | 2011-07-04 | 1 | -3/+3 |
| * | Add IP_RECVRTABLE socket option to be used with a IPPROTO_IP |  mikeb | 2011-06-15 | 1 | -1/+9 |
| * | Do not allow traffic to be sent with a destination address in 0/8; |  weerd | 2011-05-28 | 1 | -1/+10 |
| * | recognize SO_RTABLE socket option at the SOL_SOCKET level; |  mikeb | 2011-05-02 | 1 | -2/+2 |
| * | Make in_broadcast() rdomain aware. Mostly mechanical change. |  claudio | 2011-04-28 | 1 | -2/+3 |
| * | in_proto_csum_out: if M_ICMP_CSUM_OUT is set, do the icmp checksum |  henning | 2011-04-05 | 1 | -1/+15 |
| * | mechanic rename M_{TCP|UDP}V4_CSUM_OUT -> M_{TCP|UDP}_CSUM_OUT |  henning | 2011-04-05 | 1 | -7/+7 |
| * | de-guttenberg our stack a bit |  henning | 2011-04-04 | 1 | -31/+23 |
| * | there is no need to special case the bridge in the ip checksum handling |  henning | 2011-04-04 | 1 | -7/+4 |
| * | If a caller is requesting to be set to the same rtable that they |  phessler | 2010-09-30 | 1 | -6/+7 |
| * | add a new IP level socket option IP_PIPEX. This option is used for L2TP |  yasuoka | 2010-09-23 | 1 | -1/+13 |
| * | Return EACCES when pf_test() blocks a packet in ip_output(). This allows |  claudio | 2010-09-08 | 1 | -2/+2 |
| * | when sending a fragmented packet, dont check if the interfaces send queue |  dlg | 2010-08-13 | 1 | -20/+1 |
| * | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -4/+8 |
| * | Fix the naming of interfaces and variables for rdomains and rtables |  guenther | 2010-07-03 | 1 | -16/+15 |
| * | m_copyback can fail to allocate memory, but is a void fucntion so gymnastics |  blambert | 2010-07-02 | 1 | -3/+3 |
| * | Allow to specify an alternative enc(4) interface for an SA. All |  reyk | 2010-07-01 | 1 | -11/+11 |
| * | Replace enc(4) with a new implementation as a cloner device. We still |  reyk | 2010-06-29 | 1 | -3/+6 |
| * | Start cleaning up the mess called rtalloc*. Kill rtalloc2, make rtalloc1 |  claudio | 2010-05-07 | 1 | -9/+12 |
| * | Double and in comment. |  claudio | 2010-01-13 | 1 | -2/+2 |
| * | Allow the queueing of multiple fragments on virtual interfaces with a |  beck | 2010-01-12 | 1 | -2/+6 |
| * | The process's rdomain should be, well, per-process and not per-rthread, |  guenther | 2009-12-23 | 1 | -2/+3 |
| * | Two cases of IPSEC getsockopt() returning two bytes of uninitialialized |  deraadt | 2009-12-11 | 1 | -1/+3 |
| * | Add setrdomain() and getrdomain() system calls. Committing now to |  guenther | 2009-11-27 | 1 | -2/+7 |
| * | NULL dereference in IPV6_PORTRANGE and IP_IPSEC_*, found by Clement LECIGNE, |  guenther | 2009-11-20 | 1 | -2/+2 |
| * | Packets generated by ip_fragment() need to inherit the rdomain from the |  claudio | 2009-11-13 | 1 | -2/+3 |
| * | rtables are stacked on rdomains (it is possible to have multiple routing |  claudio | 2009-11-03 | 1 | -2/+3 |
| * | *NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL, |  deraadt | 2009-10-28 | 1 | -1/+2 |
| * | Redo the route lookup in the output (and IPv6 forwarding) path if the |  claudio | 2009-10-06 | 1 | -2/+23 |
| * | Initial support for routing domains. This allows to bind interfaces to |  claudio | 2009-06-05 | 1 | -25/+52 |
| * | When don't-fragment packets need to get fragemnted some code tries to |  claudio | 2009-01-30 | 1 | -2/+3 |
| * | Always zero the IP checksum field for packets and packet fragments |  naddy | 2009-01-29 | 1 | -10/+7 |
| * | IP_RECVDSTPORT, allows you to get the destination port of UDP datagrams |  markus | 2008-05-09 | 1 | -1/+9 |
| * | MALLOC/FREE -> malloc/free |  chl | 2007-10-29 | 1 | -7/+6 |
| * | allow 4095 instead of 20 multicast group memberships per socket (you need |  markus | 2007-09-18 | 1 | -7/+39 |
| * | Remove inm_ifp from struct in_multi -- caching struct ifnet is dangerous |  claudio | 2007-07-20 | 1 | -3/+3 |
| * | no need to declare extern ipsec_in_use, we get it via ip_ipsp.h |  henning | 2007-05-30 | 1 | -2/+1 |
| * | gain another 5+% in ip forwarding performance. |  henning | 2007-05-29 | 1 | -4/+9 |
| * | -static |  dlg | 2007-05-27 | 1 | -5/+5 |
| * | do not install pmtu routes for transport mode SAs, as they do not |  markus | 2006-12-05 | 1 | -2/+11 |
| * | rangecheck ttl on IP_TTL, collected dust in my tree |  henning | 2006-12-01 | 1 | -2/+5 |
| * | implement IP_MINTTL socket option fo tcp sockets |  henning | 2006-10-11 | 1 | -1/+13 |
| * | implement IP_RECVTTL socket option. |  henning | 2006-10-11 | 1 | -1/+10 |