| Commit message (Expand) | Author | Age | Files | Lines |
| * | add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4) |  markus | 2012-07-16 | 1 | -2/+2 |
| * | Increase TCP's initial window to 10 * MSS or 14600 bytes as proposed in |  claudio | 2012-03-10 | 1 | -1/+4 |
| * | Respect the ToS setting in tcp syn+ack for IPv4, still need to fix for |  haesbaert | 2011-10-15 | 1 | -2/+3 |
| * | Revert the pf->socket linking diff. |  oga | 2011-05-13 | 1 | -16/+2 |
| * | Clean up gotos for listening sockets to make it obvious when packets |  blambert | 2011-05-04 | 1 | -12/+12 |
| * | In certain failure cases, a RST would be sent out on rdomain 0, |  blambert | 2011-04-29 | 1 | -3/+3 |
| * | Make in_broadcast() rdomain aware. Mostly mechanical change. |  claudio | 2011-04-28 | 1 | -2/+3 |
| * | Double link between pf states and sockets. Henning has already |  bluhm | 2011-04-24 | 1 | -2/+16 |
| * | put the accepted socket of a diverted connection into the routing domain |  mikeb | 2011-04-12 | 1 | -1/+10 |
| * | Replace if/else ladder with much more legible switch statement for |  blambert | 2011-04-05 | 1 | -50/+57 |
| * | turn some macros into functions; saves 1400+ bytes from the kernel |  blambert | 2011-04-04 | 1 | -37/+42 |
| * | Instead of calling tcp_reass (tcp reassembly) with magic arguments |  blambert | 2011-04-04 | 1 | -15/+18 |
| * | change an if statement to a switch to reduce eye bleedage |  blambert | 2011-04-04 | 1 | -5/+4 |
| * | Add socket option SO_SPLICE to splice together two TCP sockets. |  bluhm | 2011-01-07 | 1 | -12/+24 |
| * | Initialize the ts_recent (received timestamp) field in the newly created |  claudio | 2010-09-29 | 1 | -1/+3 |
| * | It is not allowed to recalculate the window scale after the initial SYN. |  claudio | 2010-09-29 | 1 | -6/+1 |
| * | Do not delay ACKs on connections using loopback interfaces. There is no |  claudio | 2010-09-29 | 1 | -6/+10 |
| * | TCP send and recv buffer scaling. |  claudio | 2010-09-24 | 1 | -3/+39 |
| * | Switch some obvious network stack MAC comparisons from bcmp() to |  matthew | 2010-07-20 | 1 | -3/+3 |
| * | Add support for using IPsec in multiple rdomains. |  reyk | 2010-07-09 | 1 | -7/+13 |
| * | Fix the naming of interfaces and variables for rdomains and rtables |  guenther | 2010-07-03 | 1 | -15/+15 |
| * | unbreak the build with a custom kernel config including "pseudo-device |  sthen | 2010-03-11 | 1 | -1/+4 |
| * | Replace pool_get() + bzero() with pool_get(..., PR_ZERO). |  chl | 2010-01-15 | 1 | -4/+2 |
| * | Extend the protosw pr_ctlinput function to include the rdomain. This is |  claudio | 2009-11-13 | 1 | -4/+5 |
| * | rtables are stacked on rdomains (it is possible to have multiple routing |  claudio | 2009-11-03 | 1 | -6/+6 |
| * | fix indentation |  bluhm | 2009-08-20 | 1 | -6/+5 |
| * | sockets created via a listening socket lose the rdomain and fail to work |  claudio | 2009-08-10 | 1 | -10/+22 |
| * | Initial support for routing domains. This allows to bind interfaces to |  claudio | 2009-06-05 | 1 | -4/+6 |
| * | add the basic infrastructure to take advantage of TCP and UDP receive |  naddy | 2009-06-03 | 1 | -4/+15 |
| * | Remove the M_ANYCAST6 mbuf flag by doing the detection all in ip6_input(). |  claudio | 2008-11-02 | 1 | -16/+1 |
| * | back out previous change. Another panic, not as frequent, and |  dhill | 2008-10-10 | 1 | -3/+1 |
| * | Comment out statekey code to stop 'panic: soreceive 3', which |  dhill | 2008-10-10 | 1 | -1/+3 |
| * | The pf state to pcb linking code change didn't account for the |  mpf | 2008-09-09 | 1 | -2/+3 |
| * | link pf state keys to tcp pcbs and vice versa. |  henning | 2008-07-03 | 1 | -12/+38 |
| * | Include "faith.h" in order to get NFAITH. Also clean up NFAITH conditionals |  jsing | 2008-06-14 | 1 | -2/+4 |
| * | Remove some crazy #if mess. |  jsing | 2008-06-12 | 1 | -8/+2 |
| * | ANSIfy function definitions. |  jsing | 2008-06-12 | 1 | -81/+26 |
| * | Fix type difference between function prototype and implementation. |  jsing | 2008-06-12 | 1 | -2/+2 |
| * | divert for ipv6; ok henning, pyr |  markus | 2008-05-15 | 1 | -2/+2 |
| * | divert packets to local socket without modifying the ip header; |  markus | 2008-05-09 | 1 | -2/+2 |
| * | remove tcp_drain code since it's not longer used; ok henning, feedback thib |  markus | 2008-05-06 | 1 | -8/+1 |
| * | when creating a response, use the correct TCP header instead of |  markus | 2008-02-20 | 1 | -4/+6 |
| * | The TCP server has to recalculate the client's window size taken |  bluhm | 2008-02-11 | 1 | -3/+2 |
| * | TCP_COMPAT_42 was last used in 1997. Kill it. |  deraadt | 2007-11-27 | 1 | -6/+1 |
| * | typos; ok jmc@ |  martynas | 2007-11-27 | 1 | -2/+2 |
| * | since the |  henning | 2007-09-01 | 1 | -1/+2 |
| * | Drop the current random timestamps and the current ISN generation |  markus | 2007-06-15 | 1 | -18/+28 |
| * | there was code inside #if NPF > 0, but pf.h was not included, so it did |  henning | 2007-06-11 | 1 | -7/+2 |
| * | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. |  henning | 2007-06-01 | 1 | -2/+2 |
| * | diffs are better if compilers see them first |  deraadt | 2007-05-27 | 1 | -3/+3 |