| Commit message (Expand) | Author | Age | Files | Lines |
* | Kill yet another argument to functions in IPv6. This time ip6_output's |  claudio | 2015-09-11 | 1 | -2/+2 |
* | m_freem() can handle NULL, do not check for this condition beforehands. |  deraadt | 2015-07-15 | 1 | -5/+2 |
* | Move away from using hzto(9); OK dlg |  mikeb | 2015-06-11 | 1 | -12/+5 |
* | Stubs and support code for NIC-enabled IPsec bite the dust. |  mikeb | 2015-04-17 | 1 | -9/+3 |
* | make ipsp_address thread safe; ok mpi |  mikeb | 2015-04-14 | 1 | -6/+11 |
* | Userland (base & ports) was adapted to always include <netinet/in.h> |  deraadt | 2015-01-24 | 1 | -7/+5 |
* | unifdef INET in net code as a precursor to removing the pretend option. |  tedu | 2014-12-19 | 1 | -30/+1 |
* | remove uneeded route.h includes |  jsg | 2014-09-08 | 1 | -2/+1 |
* | Fewer <netinet/in_systm.h> ! |  mpi | 2014-07-22 | 1 | -2/+1 |
* | ip_output() using varargs always struck me as bizarre, esp since it's only |  henning | 2014-04-21 | 1 | -2/+2 |
* | we'll do fine without casting NULL to struct foo * / void * |  henning | 2014-04-21 | 1 | -3/+3 |
* | Remove the number of in6_var.h inclusions by moving some functions and |  mpi | 2013-10-24 | 1 | -2/+1 |
* | unbreak PMTU-discovery for AES-GCM; ok mikeb@ |  markus | 2013-08-03 | 1 | -2/+2 |
* | Remove various external variable declaration from sources files and |  mpi | 2013-04-10 | 1 | -3/+1 |
* | code that calls timeout functions should include timeout.h |  tedu | 2013-03-28 | 1 | -1/+2 |
* | spltdb() was really just #define'd to be splsoftnet(); replace the former |  blambert | 2012-09-20 | 1 | -2/+2 |
* | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set |  markus | 2012-09-18 | 1 | -9/+3 |
* | The function pf_tag_packet() never fails. Remove a redundant check |  bluhm | 2011-03-05 | 1 | -3/+2 |
* | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -2/+4 |
* | Fix two bugs in IPsec/HMAC-SHA2: |  markus | 2010-01-10 | 1 | -2/+2 |
* | we need to call pf_pkt_addr_changed here too. found by david |  henning | 2008-08-26 | 1 | -1/+2 |
* | Assign the ip and ip6 pointers in ipsp_process_packet() only if a |  bluhm | 2008-08-21 | 1 | -8/+11 |
* | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. |  henning | 2007-06-01 | 1 | -2/+2 |
* | double pf performance. |  henning | 2007-05-28 | 1 | -2/+2 |
* | - AH: when computing crypto checksum for output, massage source-routing |  itojun | 2007-02-08 | 1 | -1/+62 |
* | TDBF_USEDTUNNEL flag manipulation was inside #ifdef INET. it applies |  itojun | 2006-12-19 | 1 | -2/+2 |
* | do not install pmtu routes for transport mode SAs, as they do not |  markus | 2006-12-05 | 1 | -1/+5 |
* | add support to tag ipsec traffic belonging to specific IKE-initiated |  reyk | 2006-11-24 | 1 | -1/+13 |
* | handle PMTU for ipip SAs, too; ok hshoexer, cloder |  markus | 2005-04-12 | 1 | -1/+5 |
* | pmtu support for udpencap; ok hshoexer, ho |  markus | 2004-09-24 | 1 | -1/+3 |
* | Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok. |  ho | 2004-06-26 | 1 | -2/+2 |
* | First step towards more sane time handling in the kernel -- this changes |  tholo | 2004-06-21 | 1 | -8/+4 |
* | don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@ |  markus | 2004-06-21 | 1 | -3/+6 |
* | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) |  markus | 2003-12-02 | 1 | -1/+30 |
* | do not flip ip_len/ip_off in netinet stack. deraadt ok. |  itojun | 2003-07-09 | 1 | -8/+3 |
* | add a counter for times ipcomp is skipped because the packet is below the |  jason | 2003-02-19 | 1 | -1/+4 |
* | Fix a problem where passing NULL as a pointer with varargs does not promote |  pefo | 2002-08-28 | 1 | -2/+2 |
* | Move mtod() after the m_pullup() --- noted by sam@errno.com (who seems |  angelos | 2002-07-01 | 1 | -2/+2 |
* | Remove redundant address family check -- sam@errno.com |  angelos | 2002-06-19 | 1 | -17/+13 |
* | whitespace |  itojun | 2002-06-09 | 1 | -5/+5 |
* | IPsec is written ``IPsec'', not ``IPSec''. |  miod | 2002-02-19 | 1 | -2/+2 |
* | Use hzto() to handle overflow of (hz * timeout) cases --- when using |  angelos | 2001-12-06 | 1 | -3/+14 |
* | Remove IPCOMP option, it's now part of IPSEC option. You still need to |  jjbg | 2001-08-08 | 1 | -3/+1 |
* | IPComp support. angelos@ ok. |  jjbg | 2001-07-05 | 1 | -2/+14 |
* | KNF |  angelos | 2001-06-26 | 1 | -258/+254 |
* | Copyright. |  angelos | 2001-06-25 | 1 | -4/+3 |
* | path mtu discovery for ipsec. on receiving a need fragment icmp match |  provos | 2001-06-24 | 1 | -1/+107 |
* | Trim include files. |  angelos | 2001-06-08 | 1 | -3/+1 |
* | Update to match prototypes. |  angelos | 2001-05-30 | 1 | -13/+8 |
* | Record last use time for SAs. |  angelos | 2001-05-29 | 1 | -1/+3 |