summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2006-05-30with Naddy prodding, claudio's peril sensitive glasses turning black, andTodd T. Fries
msf@'s assistance with hexdumping, this bug was found. do NOT access the wrong union member (sockaddr_in) when using v6 addresses this fixes output errors when displaying v6 encap routes for ipsecctl, route, and recently netstat ok hshoexer@ markus@ claudio@ naddy@
2006-05-28Fix multicast and broadcast over gre(4) tunnels. Clear the M_MCAST and M_BCASTClaudio Jeker
mbuf flags so that the packet is sent out with a normal link local address instead of a multicast or broadcast address. OK brad@
2006-05-28Enable adaptive timeouts by default, with adaptive.start of 60% of theRyan Thomas McBride
state limit and adaptive.end of 120% of the state limit. Explicitly setting the adaptive timeouts will override the default, and it can be disabled by setting both adaptive.start and adaptive.end to 0. ok henning@
2006-05-28Only preemptively increase the replay counter for outbound TDBs.Ryan Thomas McBride
Another ipsec failover fix from nathanael at polymorpheus dot com. ok hshoexer@
2006-05-28check if the interface is active and UP. some, but not all, networkReyk Floeter
drivers report an active link state even if the interface is DOWN. this should fix trunk with various ethernet devices. ok brad@
2006-05-28fix a whitespace error causing confusionHenning Brauer
2006-05-27remove IFCAP_JUMBO_MTU interface capabilities flag and set if_hardmtu in a fewBrad Smith
more drivers. ok reyk@
2006-05-26rename jumbo mtu to if_hardmtu; ok brad reykTheo de Raadt
2006-05-23knf and remove an unneeded debug messageReyk Floeter
2006-05-23addReyk Floeter
2006-05-22Check for NULL cookies before calling hook_disestablish(). Just in caseKenneth R Westerback
the establish calls were bypassed or failed. ok mpf@
2006-05-20bump copyrightReyk Floeter
2006-05-20drop packets received on inactive failover ports without increasing theReyk Floeter
error counter. just silently drop them... figured out by todd@, ok brad@
2006-05-20don't panic if the address familiy is not found in the rt_tablesReyk Floeter
ok henning@
2006-05-19add a if_jumbo_mtu field to the interface structure for driversReyk Floeter
supporting ethernet jumbo frames. there's no standard for the size of jumbo MTUs, so either let the driver set it's own value or use 9000 byte jumbo frames by default. ok brad@
2006-05-17missing rtlabel support in pf_addr_wrap_neq()Henning Brauer
PR5122 Jann Fischer <jfi@openbsd.de>, thanks!
2006-05-16the ifp->if_linkstatehooks may be NULL, add an extra check to avoidReyk Floeter
possible kernel panic. this happened to me by using tun(4) in layer 2 mode (link0 flag) as a trunk port for testing.
2006-05-13Avoid potential hash collisions and increase efficiency by doing an exactRyan Thomas McBride
comparison of the TDB before collapsing multiple updates. Another ipsec failover fix from Nathanael <list-openbsd-tech@polymorpheus.com>
2006-05-09Remove unnecessary check for the parent interface when settingMarco Pfatschbacher
the vlan priority. Relaxes the order of the vlanprio parameter in ifconfig. OK claudio, brad, norby
2006-05-06The SPI in a TDB is actually stored in network order. Make sa synchronisationRyan Thomas McBride
work between little-endian and big-endian machines, and compare the spi against SPI_RESERVED_MAX correctly. Fix from Nathanael <list-openbsd-tech at polymorpheus dot com>
2006-05-06Fix bracketing messed up in KNF commit 1.86, allows sasyncd to reliablyRyan Thomas McBride
set up pfkey promiscuous mode. Diff from Nathanael <list-openbsd-tech at polymorpheus dot com>
2006-05-02fix creation of sub-anchors, e.g. if you create an anchor /foo/bar, createDaniel Hartmeier
only bar under foo, not /bar as well. secondly, when using "load anchor from" from a sub-anchor, the loading point should be relative to the sub-anchor doing the load (unless absolute paths are used, of course). from Boris Polevoy. probably a -stable candidate.
2006-04-26Missed the goto in the error path. This resulted in an access to a NULLClaudio Jeker
pointer and a panic later on. Be more careful Claudio! OK henning@
2006-04-22Routes announced via rt_missmsg() do not have rtm_index set. While in mostClaudio Jeker
cases harmless it is used by the IPv6 code. The result is that bgpd is unable to assigning link local addresses to the correct interface. OK henning@ Fix for PR 5063.
2006-04-16After fragment reassembly/trimming, pf must revalidate the mbuf tag of theChristopher Pascoe
altered chain. The cached tag may have already been freed via m_cat.
2006-04-11on link state changes, copy baudrate (negotiated link speed) from parentHenning Brauer
device. previously this was only done at config time, so vlan if's baudrate could easily get out of sync with parent's. ok camield brad
2006-03-31Add sysctl to retrieve the routing table statisitcs. Will be used by netstatClaudio Jeker
instead of kvm access. OK henning@
2006-03-30In sysctl_dumpentry() pass the rt_refcnt by overloading rmx_rttvar.Claudio Jeker
This new rmx_refcnt can be used by route(8) to produce the same output as netstat(1). OK henning@
2006-03-30Spelling in comment.Claudio Jeker
2006-03-25allow bpf(4) to ignore packets based on their direction (inbound orDamien Miller
outbound), using a new BIOCSDIRFILT ioctl; guidance, feedback and ok canacar@
2006-03-25fixup IP checksum when modifying IP header fields, based on a patch inDaniel Hartmeier
fbsd PR 93849 from Max Laier, ok claudio@
2006-03-22prevent anything outside rote.c from accessing the routing table headsHenning Brauer
directly. rather provide a rt_lookup function for regular lookups, and a rt_gettable for those that need access to the head for some reason. the latter cases should be revisted later probably so that nothing outside the routing core code accesses the heads at all... tested claudio jolan me, ok claudio markus
2006-03-20introduce rt_if_remove which takes care of routing table updates for anHenning Brauer
interface that is removed. use that from if.c and if_tun.c instead of re-implementing in the latter case. ok claudio
2006-03-16Switch tun(4) from encapsualting packets into a long mbuf chain over to useClaudio Jeker
mbuf clusters if the packet is big enough. This should speed up tun(4) and may help in other cases where long mbuf chains hurt. Additionally switch the default tun(4) MTU to a more sane 1500 bytes. TUNMTU is kept because it is used in userland. Input and OK from brad@ and djm@
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@
2006-03-12remove BPF filter support if the bpfilter device is removed.Brad Smith
2006-03-11splimp -> spltty/splnetBrad Smith
ok miod@
2006-03-11Check against GIF_MTU_MIN/GIF_MTU_MAX for the min/max MTU size.Brad Smith
2006-03-11splimp -> splnetBrad Smith
2006-03-07use the cu_bridge_id rather than the cu_rootid for the bridge address.Brad Smith
From: Onno Molenkamp via Andrew Thompson <thompsa at freebsd dot org> ok jason@
2006-03-06get rid of questionable macro gore.Henning Brauer
a 200+ lines diff, but no binary change.
2006-03-06change a questionable multi-level foo ? a : b construct into readableHenning Brauer
code. no binary change.
2006-03-06more cleanup, again no binary change.Henning Brauer
as the previous changes from a train ride to frankfurt a bit over a week ago
2006-03-06cvhange a KASSERT into a if() .. panic() construct so the binary doesn'tHenning Brauer
change every time a line is added or removed. no functional change.
2006-03-06KNF, cleanup etc, no binary changeHenning Brauer
2006-03-05change the interface type from IFF_POINTOPOINT to the more correctBrad Smith
type of IFF_TUNNEL (Encapsulation interface). ok djm@
2006-03-04With the exception of two other small uncommited diffs this movesBrad Smith
the remainder of the network stack from splimp to splnet. ok miod@
2006-02-27add missing break; now filters containing a division can passOtto Moerbeek
validation; from NetBSD; ok deraadt@
2006-02-24Another gem from the the-world-runs-on-i386 departement. Using u_long inClaudio Jeker
a packet format causes some troubles on 64bit archs. This fixes a sppp(4) panic I got on alpha and makes cisco HDLC mode actually work. More cleanup needs to be done post 3.9. OK brad@ looks good canacar@
2006-02-23Until now it was only possible to unset the RTF_JUMBO flag on a RTM_CHANGEClaudio Jeker
request. Extend the "hack" to include more flags (RTF_PROTO[123] flags, RTF_BLACKHOLE, RTF_REJECT and RTF_STATIC). Because rtm_use is "abused" -- rtm_use was replaced long time ago with rtm_rmx->rmx_pksent -- it is now forced to 0 in RTM_GET requests and sysctl_dumpentry(). This is done to prevent false changes because of a reused RTM_GET message. OK henning@, mcbride@, makes sense markus@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-05 02:38:17 +0000