Bjoern A. Zeeb afa47e51aa Only add the IPcomp header if crypto reported success and we have a lower ...

payload size.  Before we had always added the header, no matter if we
actually send out compressed data or not.

With this, after the opencrypto/deflate changes, IPcomp starts to work
apart from edge cases.  Leave it disabled by default until those are
fixed as well.

PR:		kern/123587
MFC after:	5 days

2009-11-29 10:53:34 +00:00

..

ah_var.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

ah.h

…

esp_var.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

esp.h

…

ipcomp_var.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

ipcomp.h

…

ipip_var.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

ipsec6.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

ipsec_input.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

ipsec_mbuf.c

Correct a typo.

2009-11-28 21:01:26 +00:00

ipsec_output.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

ipsec.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

ipsec.h

Correct typo in comment.

2009-09-06 07:30:21 +00:00

key_debug.c

Build on Jeff Roberson's linker-set based dynamic per-CPU allocator

2009-07-14 22:48:30 +00:00

key_debug.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

key_var.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

key.c

fixed two race conditions when inserting/removing SAs via PFKey,

2009-11-17 16:00:41 +00:00

key.h

Added support for NAT-Traversal (RFC 3948) in IPsec stack.

2009-06-12 15:44:35 +00:00

keydb.h

Added support for NAT-Traversal (RFC 3948) in IPsec stack.

2009-06-12 15:44:35 +00:00

keysock.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

keysock.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

xform_ah.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

xform_esp.c

Changed an IPSEC_ASSERT to a simple test, as such invalid packets

2009-10-01 15:33:53 +00:00

xform_ipcomp.c

Only add the IPcomp header if crypto reported success and we have a lower

2009-11-29 10:53:34 +00:00

xform_ipip.c

Rework global locks for interface list and index management, correcting

2009-08-23 20:40:19 +00:00

xform_tcp.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

xform.h

Add sysctls to if_enc(4) to control whether the firewalls or

2007-11-28 22:33:53 +00:00