summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
Fix a couple of buglets with ingress flow deletion. tcpdump on enc0 should now show all outgoing packets *before* being processed, and all incoming packets *after* being processed. Good to be in Canada (land of the free commits).
2000-01-25add ethernet MAC filtering capabilityJason Wright
also includes split of bridgeintr() with some optimizations for quicker frame handling
2000-01-25Ok, so setsoftnet is md.Marc Espie
Well, on the amiga, setsoftnet *REQUIRES* machine/cpu.h to work... and no include mentioned in those files pulls machine/cpu.h... Nit-fix: / * INET6 */ -> /* INET6 */
2000-01-23Allow BITMAP_ADDRESS_DST in ADDFLOW messages.Angelos D. Keromytis
2000-01-21Make token_output not static.Federico G. Schwindt
2000-01-17don't need IFF_RUNNING for gif, as no resource is allocated forJun-ichiro itojun Hagino
interface operation.
2000-01-17remove IFF_RUNNING if it becomes !IFF_UP.Jun-ichiro itojun Hagino
pointed out by: deraadt
2000-01-16ETHERTYPE_ATALK -> ETHERTYPE_ATAngelos D. Keromytis
2000-01-15Don't allow enc0 to be added to a bridge, as it's used for allAngelos D. Keromytis
non-bound SAs...
2000-01-15Can't bind SAs to enc0Angelos D. Keromytis
2000-01-15Handle the SNAP encapsulated IP/Non-IP case.Jason Wright
2000-01-13Ingress flow support.Angelos D. Keromytis
2000-01-12Major style cleanup for pfkeyv2.cAngelos D. Keromytis
2000-01-12Remove gif_input() -- not needed anymore.Angelos D. Keromytis
2000-01-11Remove unneeded loout call that uses ipx_thishost.Federico G. Schwindt
2000-01-11Add a recursion depth limit, similar to if_gif.c; also, whenAngelos D. Keromytis
computing the route for the GRE tunnel, verify that it does not point back to ourselves.
2000-01-10Typos.Angelos D. Keromytis
2000-01-10Implement the blocknonip flagAngelos D. Keromytis
2000-01-10Remove unnecessary function prototype.Angelos D. Keromytis
2000-01-10externalize pfkeyv2_acquire()Angelos D. Keromytis
2000-01-09Use rt_maskedcopy() instead of handling netmasks manually.Angelos D. Keromytis
2000-01-09Proper netmask handling.Angelos D. Keromytis
2000-01-09Reduce calllimit from 10 to 3; this should avoid running out of stackAngelos D. Keromytis
when misconfiguring (jinmei@isl.rdc.toshiba.co.jp)
2000-01-08expose ifmedia_matchJason Wright
2000-01-08We don't need a pseudo-header for tcpdump on the output routine.Angelos D. Keromytis
2000-01-07Fix tcpdump -n -i greN (causes a panic in NetBSD)Angelos D. Keromytis
2000-01-07Make some of the GRE-specific ioctls privileged. Remove a lot ofAngelos D. Keromytis
unnecessary include files.
2000-01-07gre interface code, from NetBSD (with some changes)Angelos D. Keromytis
2000-01-07Add missing IF_DROPsAngelos D. Keromytis
2000-01-07ifdef cleanupAngelos D. Keromytis
2000-01-07Cleanup ifdefsAngelos D. Keromytis
2000-01-02Properly handle non-IPSEC case.Angelos D. Keromytis
2000-01-02do in6_if_up() at splsoftnet() instead of splimp(), permitting ↵Theo de Raadt
device-related interrupts during that time. It is believed this is safe
1999-12-31indentTheo de Raadt
1999-12-27Token ring subroutines. For details see next commit.Federico G. Schwindt
1999-12-27Add SRCSA and CLEARSA ioctls.Angelos D. Keromytis
1999-12-27Implement ioctls for binding SAs to enc interfaces (to be used withAngelos D. Keromytis
the bridge).
1999-12-20sockaddr_in6 is padded to 32 bytes.Angelos D. Keromytis
1999-12-18ifdef myip_ifp (kernel/1014, thanks to dne@mayonnaise.net for testingAngelos D. Keromytis
the patch)
1999-12-08s/ipv6intr/ip6intr/Jun-ichiro itojun Hagino
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).
1999-12-04IPv6 address support, get rid of the LOCALFLOW flagAngelos D. Keromytis
1999-11-20ioctl arguments are u_long.Marc Espie
Replaces `undefined' code with `defined' behavior... gcc 2.96 performs switch cases range analysis, warns about unreachable cases, and weeds them out. In switch(i) { case VALUE: } VALUE is first coerced into the type of i. If i is signed, VALUE is unsigned and exceeds i range, you lose... the result of the conversion is undefined.
1999-11-09Add SIOCSIFMEDIA and SIOCGIFMEDIA to the switch in ifioctl(). SIOCSIFMEDIATodd C. Miller
is only allowed if the user is the superuser. Aparently this got missed when the ifmedia support was added in ages ago. More or less based on how NetBSD does it (though it is rather obvious).
1999-11-04Bypass flows can be flushed.Hakan Olsson
(btw, all IPsec bypass flow and gettdb()/spltdb() stuff ok niklas@, angelos@)
1999-11-04New SADB_SATYPE, IPsec bypass tdb.Hakan Olsson
1999-11-04allow 'enc' interfaces to be bridge membersJason Wright
check to make sure rx'd packets aren't from any of our interfaces fix some bogus comments
1999-11-02Fix *stupid* typo/error that was causing the panics in post 2.6, foundAngelos D. Keromytis
by art@
1999-10-29Use enc_softc instead of ifnet for encif.Angelos D. Keromytis
1999-10-29enc_softc definitionAngelos D. Keromytis