| Commit message (Expand) | Author | Age | Files | Lines |
* | It is time to put inet6 on a diet. Use the flensing knife and cut out |  claudio | 2015-09-10 | 1 | -3/+3 |
* | Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats. |  mpi | 2015-09-09 | 1 | -6/+1 |
* | Store a unique ID, an interface index, rather than a pointer to the |  mpi | 2015-06-16 | 1 | -3/+7 |
* | Move away from using hzto(9); OK dlg |  mikeb | 2015-06-11 | 1 | -10/+5 |
* | test mbuf pointers against NULL not 0 |  jsg | 2015-05-13 | 1 | -2/+2 |
* | Stubs and support code for NIC-enabled IPsec bite the dust. |  mikeb | 2015-04-17 | 1 | -8/+3 |
* | make ipsp_address thread safe; ok mpi |  mikeb | 2015-04-14 | 1 | -13/+26 |
* | replace the use of ifqueues for most input queues serviced by netisr |  dlg | 2015-04-10 | 1 | -35/+4 |
* | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? |  mikeb | 2015-03-26 | 1 | -123/+1 |
* | Userland (base & ports) was adapted to always include <netinet/in.h> |  deraadt | 2015-01-24 | 1 | -5/+5 |
* | unifdef INET in net code as a precursor to removing the pretend option. |  tedu | 2014-12-19 | 1 | -17/+1 |
* | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. |  mpi | 2014-12-05 | 1 | -1/+2 |
* | Yet more #include de-duplication. |  krw | 2014-11-20 | 1 | -4/+1 |
* | Fewer <netinet/in_systm.h> ! |  mpi | 2014-07-22 | 1 | -2/+1 |
* | bpf code surgery / shuffling / simplification. |  henning | 2014-07-09 | 1 | -2/+2 |
* | "struct pkthdr" holds a routing table ID, not a routing domain one. |  mpi | 2014-04-14 | 1 | -2/+2 |
* | bzero/bcmp -> memset/memcmp. ok matthew |  tedu | 2014-01-09 | 1 | -9/+9 |
* | Replace most of our formating functions to convert IPv4/6 addresses from |  mpi | 2013-11-11 | 1 | -5/+21 |
* | Remove the number of in_var.h inclusions by moving some functions and |  mpi | 2013-10-23 | 1 | -2/+1 |
* | The header file netinet/in_var.h included netinet6/in6_var.h. This |  bluhm | 2013-10-17 | 1 | -1/+2 |
* | Fix typo backswards -> backwards. |  bluhm | 2013-06-01 | 1 | -2/+2 |
* | Instead of having various extern declarations for protocol variables, |  mpi | 2013-04-24 | 1 | -6/+1 |
* | Remove the extern keyword from function declarations, document |  mpi | 2013-04-11 | 1 | -1/+12 |
* | Remove various external variable declaration from sources files and |  mpi | 2013-04-10 | 1 | -2/+1 |
* | Do not transfer diverted packets into IPsec processing. They should |  bluhm | 2013-03-31 | 1 | -1/+4 |
* | code that calls timeout functions should include timeout.h |  tedu | 2013-03-28 | 1 | -1/+2 |
* | no need for a lot of code to include proc.h |  tedu | 2013-03-28 | 1 | -2/+1 |
* | add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys) |  markus | 2012-09-26 | 1 | -3/+3 |
* | spltdb() was really just #define'd to be splsoftnet(); replace the former |  blambert | 2012-09-20 | 1 | -4/+4 |
* | Fix RFC reference section |  sperreault | 2011-12-22 | 1 | -2/+2 |
* | Compute mandatory UDP checksum for IPv6 packets |  sperreault | 2011-12-21 | 1 | -1/+9 |
* | Fix checksum of UDP/TCP packets following RFC 3948. This is required for |  yasuoka | 2011-12-19 | 1 | -1/+48 |
* | In ipsec_common_input() the packet can be either IPv4 or IPv6. So |  bluhm | 2011-04-26 | 1 | -2/+20 |
* | uncompress a packet with an IPcomp header only once; this prevents |  markus | 2011-04-06 | 1 | -2/+11 |
* | don't rely on implict net/route.h inclusion via pf, claudio ok |  henning | 2011-04-03 | 1 | -1/+2 |
* | The function pf_tag_packet() never fails. Remove a redundant check |  bluhm | 2011-03-05 | 1 | -3/+2 |
* | don't leak short packets; ok mikeb@ |  markus | 2010-12-21 | 1 | -1/+10 |
* | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -10/+15 |
* | Allow to specify an alternative enc(4) interface for an SA. All |  reyk | 2010-07-01 | 1 | -3/+18 |
* | Replace enc(4) with a new implementation as a cloner device. We still |  reyk | 2010-06-29 | 1 | -14/+15 |
* | remove proc.h include from uvm_map.h. This has far reaching effects, as |  tedu | 2010-04-20 | 1 | -1/+2 |
* | uninitalized protocol version for ipv6; from mickey; ok claudio |  markus | 2010-01-02 | 1 | -3/+4 |
* | Extend the protosw pr_ctlinput function to include the rdomain. This is |  claudio | 2009-11-13 | 1 | -4/+7 |
* | once again ipsec tries to be clever and plays fast, this time by |  henning | 2009-08-09 | 1 | -5/+2 |
* | #if INET => #ifdef INET |  mpf | 2008-10-22 | 1 | -2/+2 |
* | filter ipv6 ipsec packets on enc0 (in and out), similar to ipv4; |  markus | 2008-10-22 | 1 | -7/+3 |
* | call pf_pkt_addr_changed instead of manually clearing the pf state key ptr |  henning | 2008-08-26 | 1 | -4/+2 |
* | ipsec is glued into the stack in a very weird way, violating all kinds |  henning | 2008-07-24 | 1 | -1/+4 |
* | make easier to read, found during a bug hunt earlier |  todd | 2008-06-14 | 1 | -2/+2 |
* | fix an old typo that prevented outer ipv6 headers from being corrected, |  canacar | 2008-06-11 | 1 | -4/+3 |