| Age | Commit message (Expand) | Author |
| 2003-12-04 | Dynamic sysctl. | atatat |
| 2003-11-17 | Revert the (default) ip_id algorithm to the pre-randomid algorithm, | jonathan |
| 2003-10-03 | no need to clear mbuf flags here; sync w/kame | itojun |
| 2003-10-03 | when dropping M_PKTHDR, need to free m_tag associated with it. | itojun |
| 2003-10-03 | use in6_{embed,recover}scope for scoped address manipulation | itojun |
| 2003-10-02 | permit tunnel mode over link-local address. (outer header is link-local) | itojun |
| 2003-10-02 | handle link-local address in ipsec6_tunnel_validate(). from iij seli team | itojun |
| 2003-09-22 | mark security policy that should persist in the system "persistent". | itojun |
| 2003-09-12 | remove extra blank line | itojun |
| 2003-09-12 | make synchronization w/ PF tag support code easier | itojun |
| 2003-09-12 | make it possible to SADB_DUMP via sysctl. request by mrg | itojun |
| 2003-09-10 | record socket * associated with secpolicy | itojun |
| 2003-09-07 | - prepare for RFC2401bis 64bit sequence number (no behavior change yet) | itojun |
| 2003-09-06 | committed by mistake, sorry | itojun |
| 2003-09-06 | correct comment | itojun |
| 2003-09-06 | randomize IPv4/v6 fragment ID and IPv6 flowlabel. avoids predictability | itojun |
| 2003-08-22 | remove ipsec_set/getsocket. now we explicitly pass socket * to ip{,6}_output. | itojun |
| 2003-08-22 | allow userland to specify SPD ID. more readable debugging messages. | itojun |
| 2003-07-22 | unifdef -U_IP_VHL | itojun |
| 2003-05-10 | bring a small amount of code out of an if() statement that was doing | darrenr |
| 2003-01-17 | switch from kame-based m_aux mbuf auxiliary data, to openbsd m_tag | itojun |
| 2002-09-27 | remove trailing \n in panic(). approved perry. | provos |
| 2002-09-11 | KNF - return is not a function. sync w/kame. | itojun |
| 2002-09-11 | correct signedness mixup in pointer passing. sync w/kame | itojun |
| 2002-08-14 | avoid swapping endian of ip_len and ip_off on mbuf, to meet with M_LEADINGSPACE | itojun |
| 2002-08-01 | typo. From: Arto Selonen <arto@selonen.org>, sync w/kame | itojun |
| 2002-07-18 | Spell 'should' correctly. | wiz |
| 2002-06-27 | reduce kernel stack usage by separating struct secasindex. sync w/kame | itojun |
| 2002-06-22 | move sanity check upwards. sync w/kame | itojun |
| 2002-06-22 | avoid listening socket from mistakenly use incorrect cached policy. | itojun |
| 2002-06-21 | sizeof mistake in DIAGNOSTIC path. sync w/kame | itojun |
| 2002-06-16 | previous commit cached pcb policy too much (when pcb points to | itojun |
| 2002-06-14 | cache pcb policy as much as possible. in fact, if policy is not | itojun |
| 2002-06-14 | remove redundant line | itojun |
| 2002-06-13 | free secpolicy on deepcopy failure | itojun |
| 2002-06-12 | deep-copy pcb policy if it is an ipsec policy. assign ID field to all | itojun |
| 2002-06-12 | do not copy policy-on-socket at all. avoid copying packet header value to | itojun |
| 2002-06-11 | share policy-on-pcb for listening socket. sync w/kame | itojun |
| 2002-06-11 | avoid variable name confusion. sync w/kame | itojun |
| 2002-06-09 | whitespace cleanup | itojun |
| 2002-06-08 | whitespace cleanup | itojun |
| 2002-05-25 | re-enable ipsec policy caching onto pcb. refcnt fix and workarounds based on... | itojun |
| 2002-05-19 | in sp caching code, check if sp is still alive. sync w/kame | itojun |
| 2002-05-10 | disable ipsec policy caching on pcb, as it seems that there's some reference- | itojun |
| 2002-05-10 | remove unneeded #ifdef __FreeBSD__ portion. | itojun |
| 2002-04-28 | Use M_READONLY() rathern than testing to see if ext_free is set | thorpej |
| 2001-11-21 | update outgoing ifp, only if tunnel mode ipsec is used. this is to | itojun |
| 2001-11-13 | add RCSIDs | lukem |
| 2001-10-29 | Don't need to include <uvm/uvm_extern.h> just to include <sys/sysctl.h> | simonb |
| 2001-10-16 | more whitespace/comment sync with kame | itojun |