summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2008-07-25Comment out the 'do' and 'while (0)' from KEY_CHKSASTATE().dsl
2008-07-01Ignore freed rtcache entries.mlelstv
2008-06-27Kill caddr_t introduced in the previous revisiondegroote
2008-06-27Verify icmp type and code in IPSEC rules.mlelstv
2008-05-04Simplify the interface to netstat_sysctl() and allocate space forthorpej
2008-05-03In key_do_allocsa_policy, fix a bad usage of key_setsadbmsg. The third argumentdegroote
2008-04-28Remove clause 3 and 4 from TNF licensesmartin
2008-04-28Fix a stupid typo. In ipsec6_process_packet, reinject the packet in AF_INET6,degroote
2008-04-27Fix some fallout from socket locking patch :degroote
2008-04-24Merge the socket locking patch:ad
2008-04-23PF_KEY stats for IPSEC and FAST_IPSEC are now per-CPU.thorpej
2008-04-23Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> andthorpej
2008-04-15Make ip6 and icmp6 stats per-cpu.thorpej
2008-04-08Change IPv6 stats from a structure to an array of uint64_t's.thorpej
2008-02-10Fix build of FAST_IPSEC after the change of ip_newid prototypedegroote
2008-02-04Rework opencrypto to use a spin mutex (crypto_mtx) instead of "splcrypto"tls
2008-01-20Now that __HAVE_TIMECOUNTER and __HAVE_GENERIC_TODR are invariants,joerg
2007-12-29Fix the ipsec processing in case of USE rules with no SA installed.degroote
2007-12-29Add some statistics for case where compression is not usefuldegroote
2007-12-29Simplify the FAST_IPSEC output pathdegroote
2007-12-14- Remove remain <= MHLEN restriction in m_makespace()seanb
2007-12-11use __KERNEL_RCSID()lukem
2007-12-09Kill _IP_VHL ifdef (from netinet/ip.h history, it has never been used in NetB...degroote
2007-12-07Use struct initializers. No functional change.elad
2007-12-07Let this code compile.elad
2007-12-04Use IFNET_FOREACH() and IFADDR_FOREACH().dyoung
2007-11-16defflag IPSEC_DEBUGchristos
2007-10-28The function ipsec4_get_ulp assumes that ip_off is in host order. This resultsadrianp
2007-10-19machine/{bus,cpu,intr}.h -> sys/{bus,cpu,intr}.had
2007-09-22Fix my previous stupid caddr_t fix.degroote
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-07-07Ansifydegroote
2007-06-27Add support for options IPSEC_NAT_T (RFC 3947 and 3948) for fast_ipsec(4).degroote
2007-05-08Always compute the sp index even if we don't have any sp in spd. It willdegroote
2007-05-08Increase the refcount for the default ipv6 policy so nobody can reclaim itdegroote
2007-04-15Choose the good default policy, depending of the adress family of thedegroote
2007-04-11Add sysctl tree to modify the fast_ipsec options related to ipv6. Similardegroote
2007-04-11When we construct an answer for SADB_X_SPDGET, don't use an hardcoded 0 for s...degroote
2007-04-11In spddelete2, if we can't find the sp by this id, return after sending an er...degroote
2007-04-09Fix a memleak in key_spdget.degroote
2007-03-25Honor the ip4_ah_offsetmask bits (clear or not the ip->ip_off field for ahdegroote
2007-03-25Use ip4_ah_cleartos instead of ah_cleartos for consistencydegroote
2007-03-25Make an exact match when we are looking for a cached sp for an unconnecteddegroote
2007-03-21Call key_checkspidup with spi in network bit order in order to make correctdegroote
2007-03-09Allow to build without INET6liamjfoy
2007-03-07Add IPv6 Fast Forward:liamjfoy
2007-03-04Remove useless castdegroote
2007-03-04Fix fallout from caddr_t changesdegroote
2007-03-04Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.christos
2007-02-23Oops, I forgot to commit some bits last timedegroote