| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | wrap a long line. no functional change. |   dlg | 2020-06-21 | 1 | -2/+3 |
| * | if an inp_upcall is set, let it look at and maybe steal the udp packet. | dlg | 2020-06-21 | 1 | -3/+11 |
| * | Checking the IPsec policy is expensive. Check only when IPsec is used. |   tobhe | 2019-12-06 | 1 | -16/+18 |
| * | Change the default security level for incoming IPsec flows from | tobhe | 2019-11-29 | 1 | -38/+40 |
| * | Avoid an mbuf double free in the oob soreceive() path. In the |   bluhm | 2019-02-04 | 1 | -8/+8 |
| * | Do not translate the EACCES error from pf(4) to EHOSTUNREACH anymore. | bluhm | 2018-11-10 | 1 | -3/+1 |
| * | Revert the inpcb table mutex commit. It triggers a witness panic | bluhm | 2018-10-04 | 1 | -3/+1 |
| * | As a step towards per inpcb or socket locks, remove the net lock | bluhm | 2018-09-20 | 1 | -1/+3 |
| * | Add reference counting for inet pcb, this will be needed when we | bluhm | 2018-09-13 | 1 | -2/+2 |
| * | It was possible to leak the control mbuf in raw ip user request | bluhm | 2018-07-05 | 1 | -2/+1 |
| * | The udp control option processing was implemented three times. | bluhm | 2018-06-08 | 1 | -77/+44 |
| * | When checking the IPsec enable sysctls, ipsec_common_input() had | bluhm | 2018-05-14 | 1 | -2/+2 |
| * | Push NET_LOCK down in the default ifioctl case. |   pirofti | 2018-04-24 | 1 | -3/+3 |
| * | Use the existing pf state to speed up UDP socket lookup. This was | bluhm | 2018-04-06 | 1 | -2/+2 |
| * | Simplify the reverse PCB lookup logic. The PF_TAG_TRANSLATE_LOCALHOST | bluhm | 2017-12-01 | 1 | -11/+6 |
| * | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running |   mpi | 2017-11-20 | 1 | -3/+8 |
| * | Make {ah,esp,ipcomp}stat use percpu counters. |   visa | 2017-11-08 | 1 | -2/+2 |
| * | Move PRU_DETACH out of pr_usrreq into per proto pr_detach |   florian | 2017-11-02 | 1 | -5/+16 |
| * | Reduces the scope of the NET_LOCK() in sysctl(2) path. | mpi | 2017-10-09 | 1 | -8/+20 |
| * | Replace NET_ASSERT_LOCKED() by soassertlocked() in *_usrreq(). | mpi | 2017-09-05 | 1 | -2/+2 |
| * | Validate sockaddr from userland in central functions. This results | bluhm | 2017-08-11 | 1 | -12/+2 |
| * | Assert that the corresponding socket is locked when manipulating socket | mpi | 2017-06-26 | 1 | -4/+5 |
| * | Checking for IPv4 mapped addreses and dropping the packet is done | bluhm | 2017-05-06 | 1 | -7/+1 |
| * | If m is not a continuous mbuf cluster, m_pullup() in pr_input may | bluhm | 2017-05-04 | 1 | -3/+3 |
| * | Use the address family passed down with pr_input to simplify | bluhm | 2017-04-17 | 1 | -49/+23 |
| * | Pass down the address family through the pr_input calls. This | bluhm | 2017-04-14 | 1 | -2/+2 |
| * | When building counter memory in preparation to copy to userland, always |   deraadt | 2017-04-05 | 1 | -2/+2 |
| * | Move PRU_ATTACH out of the pr_usrreq functions into pr_attach. |   claudio | 2017-03-13 | 1 | -18/+22 |
| * | Always allocate counters memory using type M_COUNTERS. |   jca | 2017-02-05 | 1 | -2/+2 |
| * | Use CTASSERT instead of KASSERT for a few sysctl that use the counters API | jca | 2017-01-31 | 1 | -2/+2 |
| * | Change the IPv4 pr_input function to the way IPv6 is implemented, | bluhm | 2017-01-29 | 1 | -21/+14 |
| * | Reduce the difference between struct protosw and ip6protosw. The | bluhm | 2017-01-26 | 1 | -9/+8 |
| * | Since raw_input() and route_input() are gone from pr_input, we can | bluhm | 2017-01-25 | 1 | -8/+3 |
| * | Remove redundant splsoftnet(). | mpi | 2016-12-19 | 1 | -3/+1 |
| * | Introduce the NET_LOCK() a rwlock used to serialize accesses to the parts | mpi | 2016-12-19 | 1 | -2/+2 |
| * | Pass the correct offset of the next protocol field for the given IP |   patrick | 2016-12-10 | 1 | -3/+9 |
| * | Allow to build kernels without IPSEC but with PIPEX. | mpi | 2016-11-28 | 1 | -2/+4 |
| * | Enforce that pr_usrreq functions are called at IPL_SOFTNET. | mpi | 2016-11-21 | 1 | -7/+3 |
| * | turn ipstat into a set of percpu counters. | dlg | 2016-11-18 | 1 | -23/+44 |
| * | Remove obsolete vxlan_lookup return value handling |   mikeb | 2016-11-03 | 1 | -7/+2 |
| * | Add support for a multipoint-to-multipoint mode in vxlan(4). In this |   reyk | 2016-09-03 | 1 | -3/+19 |
| * | Add IP_SENDSRCADDR cmsg for UDP sockets. As suggested by sthen@, |   vgross | 2016-08-16 | 1 | -3/+28 |
| * | Commit in6_selectsrc() split again, with missing assignment fixed. | vgross | 2016-08-04 | 1 | -3/+2 |
| * | Revert in_selectsrc() refactoring, it breaks IPv6. | mpi | 2016-07-22 | 1 | -2/+3 |
| * | Split in6_selectsrc() into a low-level part and a pcb-level part, and | vgross | 2016-07-20 | 1 | -3/+2 |
| * | Add UDP unicast and multicast support for IP_MINTTL/IPV6_MINHOPCOUNT | jca | 2016-06-28 | 1 | -3/+24 |
| * | Add net.inet.{tcp,udp}.rootonly sysctl, to mark which ports | vgross | 2016-06-18 | 1 | -1/+7 |
| * | Fix typo from rebase : extra parenthese | vgross | 2016-06-15 | 1 | -2/+2 |
| * | Move the cmsg handling code on top of udp_output(), to make | vgross | 2016-06-15 | 1 | -40/+42 |
| * | Merge in_pcbbind() and in6_pcbbind(), and change every call to | vgross | 2016-03-23 | 1 | -7/+2 |
