summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2000-10-14ASKPOLICY message; used by key management to inquire about policyAngelos D. Keromytis
triggering an ACQUIRE.
2000-10-09AES.Angelos D. Keromytis
2000-10-09AES number.Angelos D. Keromytis
2000-10-09uninitialized variable; spotted by Andrew Lunn <andrew.lunn@ascom.ch>Jason Wright
2000-10-09Properly cleanup IDs when resetting policy.Angelos D. Keromytis
2000-10-07on SIOC*IFPHY*, validate args more correctly.Jun-ichiro itojun Hagino
2000-10-07repair SIOCGIFP*ADDR.Jun-ichiro itojun Hagino
2000-10-05there is no SIOCDIFPHYADDR in openbsd-current yet (in kame, there is)Jun-ichiro itojun Hagino
2000-10-04make sure we have root priv on SIOCSIFPHY*. from thorpej@netbsdJun-ichiro itojun Hagino
2000-09-29Don't use an SA payload for ADDFLOW/DELFLOW.Angelos D. Keromytis
2000-09-21Correctly handle srcid/dstid.Angelos D. Keromytis
2000-09-20Add IDENTITY payloads to flow establishment (and cleanup accordingly)Angelos D. Keromytis
-- this will address one of itojun's question on how are IDs for IKE to be determined (need to add support for this to ipsecadm).
2000-09-20Since ifa_refcnt was bumped to an int and rt_flags is an int too, bumpArtur Grabowski
ifa_flags to int.
2000-09-20Allow IDENTITY payloads in ADDFLOW messages.Angelos D. Keromytis
2000-09-19SA bundles.Angelos D. Keromytis
2000-09-19Still more careful with cleaning up.Angelos D. Keromytis
2000-09-19Better cleanup on invalid ADDFLOW message.Angelos D. Keromytis
2000-09-19SPD-driven IPsec.Angelos D. Keromytis
2000-09-12make it compile with INET6 defined. the old INET6 code was from NRL,Jun-ichiro itojun Hagino
and L2 macros were different. not really tested. sync with kame/ALTQ.
2000-09-07if an interface comes up with a bad ethernet address, change it --Theo de Raadt
setting it to fe:e1:ba:d0:xx where xx is a random number. this avoids various network catastrophies, and also client machines will complain everytime that server is rebooted...
2000-09-04sync w/ netbsdMichael Shalayeff
2000-08-28changing the size of if_data has heavy impact on userland compat. thereTheo de Raadt
was even a u_char slot available for ifi_link_state, which clearly does not need a full 32 bits.
2000-08-26sync mii code with netbsdNathan Binkert
adds detach functionality for phys some code cleanup Nobody really had time to test all of this out, but theo said commit anyway
2000-08-24Fix a problem when deleting a flow via -delete. This only affects flowsFederico G. Schwindt
using -transport; found by riq@core-sdi.com, fix by angelos@.
2000-08-19- upgrade icmp6 node information query support to 06 draft.Jun-ichiro itojun Hagino
- pedant: possible alignment issue in ALIGN > 8 arch (should be okay for now) (sync with kame)
2000-08-15Increase if_obytes and if_omcasts in the output routine,Chris Cappuccio
as it replaces ether_output and ether_output does this... (peter.jeremy@alcatel.com.au FreeBSD PR 20611)
2000-08-08Big oops -- lucky us BLF and CAST are not used by anyone else (on theAngelos D. Keromytis
other hand, the problem would have been noticed much earlier) -- noticed by bugfix@163.net
2000-06-30Convert to use new timeout API.Artur Grabowski
2000-06-26timeout is in seconds, not ticks.Artur Grabowski
2000-06-26New timeouts.Artur Grabowski
2000-06-22Convert to new timeouts.Artur Grabowski
2000-06-20Convert if_slowtimo to use new timeouts.Artur Grabowski
2000-06-20knfJason Wright
2000-06-20initialize mtu/hlim for enc interface at encattach().Jun-ichiro itojun Hagino
backgronud: inbound ipsec packet will have enc* as m->m_pkthdr.rcvif. when we try to reflect the packet back in the kernel (like icmp6 echo), we'd generate packet toward enc* interface. icmp6_reflect() will take hoplimit value from nd_ifinfo[enc*], which was not initialized by the old code. XXX the change to m->m_pkthdr.rcvif violates IPv6 scoped routing. we will need to disable it, for at least IPv6.
2000-06-19de-#ifdef-izeJason Wright
2000-06-18move m_pullup2() equivalent for KAME requirement into ip6_input().Jun-ichiro itojun Hagino
it was in looutput() to make KAME ipsec4 happy. however, since we don't have KAME ipsec4 in openbsd, we don't need it in looutput().
2000-06-18increase my commit count by 1, because after telling niels three times that ↵Theo de Raadt
he has an indentation flaw, he has not fixed it, so i get a commit, thanks niels
2000-06-17fix commentsNiels Provos
2000-06-17on ifconfig down ignore all routes pointing to the downed interface.Niels Provos
okay itojun@ deraadt@
2000-06-16take MIN/MAX from param.h, okay theo@Niels Provos
2000-06-16use memcmp() instead of bcmp(), memcmp is <,=,> but bcmp is =,!=Theo de Raadt
2000-06-08Add explicit inclusions of signalvar.h to files actually using syms definedNiklas Hallqvist
there but relying on an indirect inclusion
2000-06-02vlan was consuming all vlan frames before they had a chance to be bridged.Jason Wright
Change the order of operations to be: ether_input() -> bridge_input() -> vlan_input() Also, only process vlan frames that are unicast for us or bcast/mcast.
2000-06-02On input if the packet matches one of the member interface MAC addresses,Jason Wright
set the receiving interface to be that interface for further processing; thanks to dorcula@uncool.org for reporting and testing.
2000-05-25on packets incoming to the bridge machine itself, respect theJason Wright
LEARNING flag on the receiving interface (ie. don't learn when you're not supposed to).
2000-05-21deleting some routes created by imcp redirects could result in panicNiels Provos
fix from NetBSD: Delay clearing of RTF_UP until after deleting rt_gwroute.
2000-05-17crank rt_refcnt to 32 bits, no userland effectsTheo de Raadt
2000-05-15Check to make sure vlan tag is valid (12bit) in SIOCSETVLANChris Cappuccio
2000-05-05cope with interface detach (like pcmcia card removal). remove anyJun-ichiro itojun Hagino
IPv6 addresses assigned to the interface. reported by ho, bunch of help from niklas. KAME PR 231.
2000-04-27Fix SIOCSIFMTUChris Cappuccio