summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ipsec_input.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* It is time to put inet6 on a diet. Use the flensing knife and cut outclaudio2015-09-101-3/+3
* Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats.mpi2015-09-091-6/+1
* Store a unique ID, an interface index, rather than a pointer to thempi2015-06-161-3/+7
* Move away from using hzto(9); OK dlgmikeb2015-06-111-10/+5
* test mbuf pointers against NULL not 0jsg2015-05-131-2/+2
* Stubs and support code for NIC-enabled IPsec bite the dust.mikeb2015-04-171-8/+3
* make ipsp_address thread safe; ok mpimikeb2015-04-141-13/+26
* replace the use of ifqueues for most input queues serviced by netisrdlg2015-04-101-35/+4
* Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone?mikeb2015-03-261-123/+1
* Userland (base & ports) was adapted to always include <netinet/in.h>deraadt2015-01-241-5/+5
* unifdef INET in net code as a precursor to removing the pretend option.tedu2014-12-191-17/+1
* Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.mpi2014-12-051-1/+2
* Yet more #include de-duplication.krw2014-11-201-4/+1
* Fewer <netinet/in_systm.h> !mpi2014-07-221-2/+1
* bpf code surgery / shuffling / simplification.henning2014-07-091-2/+2
* "struct pkthdr" holds a routing table ID, not a routing domain one.mpi2014-04-141-2/+2
* bzero/bcmp -> memset/memcmp. ok matthewtedu2014-01-091-9/+9
* Replace most of our formating functions to convert IPv4/6 addresses frommpi2013-11-111-5/+21
* Remove the number of in_var.h inclusions by moving some functions andmpi2013-10-231-2/+1
* The header file netinet/in_var.h included netinet6/in6_var.h. Thisbluhm2013-10-171-1/+2
* Fix typo backswards -> backwards.bluhm2013-06-011-2/+2
* Instead of having various extern declarations for protocol variables,mpi2013-04-241-6/+1
* Remove the extern keyword from function declarations, documentmpi2013-04-111-1/+12
* Remove various external variable declaration from sources files andmpi2013-04-101-2/+1
* Do not transfer diverted packets into IPsec processing. They shouldbluhm2013-03-311-1/+4
* code that calls timeout functions should include timeout.htedu2013-03-281-1/+2
* no need for a lot of code to include proc.htedu2013-03-281-2/+1
* add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys)markus2012-09-261-3/+3
* spltdb() was really just #define'd to be splsoftnet(); replace the formerblambert2012-09-201-4/+4
* Fix RFC reference sectionsperreault2011-12-221-2/+2
* Compute mandatory UDP checksum for IPv6 packetssperreault2011-12-211-1/+9
* Fix checksum of UDP/TCP packets following RFC 3948. This is required foryasuoka2011-12-191-1/+48
* In ipsec_common_input() the packet can be either IPv4 or IPv6. Sobluhm2011-04-261-2/+20
* uncompress a packet with an IPcomp header only once; this preventsmarkus2011-04-061-2/+11
* don't rely on implict net/route.h inclusion via pf, claudio okhenning2011-04-031-1/+2
* The function pf_tag_packet() never fails. Remove a redundant checkbluhm2011-03-051-3/+2
* don't leak short packets; ok mikeb@markus2010-12-211-1/+10
* Add support for using IPsec in multiple rdomains.reyk2010-07-091-10/+15
* Allow to specify an alternative enc(4) interface for an SA. Allreyk2010-07-011-3/+18
* Replace enc(4) with a new implementation as a cloner device. We stillreyk2010-06-291-14/+15
* remove proc.h include from uvm_map.h. This has far reaching effects, astedu2010-04-201-1/+2
* uninitalized protocol version for ipv6; from mickey; ok claudiomarkus2010-01-021-3/+4
* Extend the protosw pr_ctlinput function to include the rdomain. This isclaudio2009-11-131-4/+7
* once again ipsec tries to be clever and plays fast, this time byhenning2009-08-091-5/+2
* #if INET => #ifdef INETmpf2008-10-221-2/+2
* filter ipv6 ipsec packets on enc0 (in and out), similar to ipv4;markus2008-10-221-7/+3
* call pf_pkt_addr_changed instead of manually clearing the pf state key ptrhenning2008-08-261-4/+2
* ipsec is glued into the stack in a very weird way, violating all kindshenning2008-07-241-1/+4
* make easier to read, found during a bug hunt earliertodd2008-06-141-2/+2
* fix an old typo that prevented outer ipv6 headers from being corrected,canacar2008-06-111-4/+3