Age | Commit message (Collapse) | Author | |
---|---|---|---|
1999-01-11 | netinet merge of NRL stuff. some indent and shrinkage needed; NRL/cmetz | Theo de Raadt | |
1999-01-08 | remove NRL debugging goop; cmetz | Theo de Raadt | |
1999-01-07 | INET6 support | Theo de Raadt | |
1999-01-07 | in_pcblookup() now takes ptr to both ip address arguments | Theo de Raadt | |
1999-01-07 | rename baddynamic() to in_baddynamic(), and export it | Theo de Raadt | |
1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos | |
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy. | |||
1998-02-14 | wildcard ifaces; finally, after HE said it's ok | Michael Shalayeff | |
1998-02-14 | add seperate so_euid & so_ruid to struct socket, so that identd is still ↵ | Theo de Raadt | |
fast.. Sigh. I will change this again later | |||
1998-02-01 | undo wildcard loopback stuff; it was not checked by other developers | Theo de Raadt | |
1998-02-01 | support wildcard loopbacks. that is, setting up lo1 like: | Michael Shalayeff | |
ifconfig lo1 inet 192.168.1.1 netmask 255.255.255.0 link1 would force it to act like all the addresses from net 192.168.1 were added to the interface. todo: man lo | |||
1997-11-30 | hmm. If out of ports, return EADDRNOTAVAIL | Theo de Raadt | |
1997-08-09 | The list of tcp/udp ports not to allocate dynamically is now | Todd C. Miller | |
a bitmask configurable via sysctl([38]). The default values have not changed. If one wants to change the list it should be done early on in /etc/rc. | |||
1997-07-27 | hardcode list of ports to not randomly allocate; will add configuration later | Theo de Raadt | |
1997-04-17 | make unconnected sockets get a random port #, too | Theo de Raadt | |
1997-02-28 | Moved IPsec socket state to the PCB. | Angelos D. Keromytis | |
1997-02-05 | use arc4random() | Theo de Raadt | |
1997-01-15 | prevent warning: | kstailey | |
in_pcb.c:182: warning: `old' might be used uninitialized in this function | |||
1996-08-24 | change to so_uid, also fix a missing credential found by dm | Theo de Raadt | |
1996-08-05 | stupid typo, going to bed in penance | Theo de Raadt | |
1996-08-05 | only check for takeover permission if non-root | Theo de Raadt | |
1996-08-05 | struct socket gets so_ucred; permit only same uid or root to do port takeover. | Theo de Raadt | |
1996-07-29 | Fix stupid logic error in bind(). | Jason Downs | |
1996-07-29 | Make 600, instead of 512, the lower limit for reserved ports. | Jason Downs | |
1996-07-29 | Fix a small bug and change the logic of the bind() port choosing: | Jason Downs | |
Use a random starting point the first time through the loop. | |||
1996-07-29 | From FreeBSD (with slightly different sysctl names): | Jason Downs | |
"... Allow the user to nominate one of three ranges of port numbers as candidates for selecting a local address to replace a zero port number. The ranges are selected via a setsockopt(s, IPPROTO_IP, IP_PORTRANGE, &arg) call. The three ranges are: default, high (to bypass firewalls) and low (to get a port below 1024). The default and high port ranges are sysctl settable under sysctl net.inet.ip.portrange.* [net.inet.ip.portfirst, net.inet.ip.portlast, net.inet.ip.porthifirst, and net.inet.ip.porthilast currently in OpenBSD.] This code also fixes a potential deadlock if the system accidently ran out of local port addresses. It'd drop into an infinite while loop. The secure port selection (for root) should reduce overheads and increase reliability of rlogin/rlogind/rsh/rshd if they are modified to take advantage of it." | |||
1996-05-14 | non-root bind() to 2049 gets EADDRINUSE | Theo de Raadt | |
1996-03-14 | From Lite2; we should fail a malloc, not block waiting for memory to become | Thorsten Lockert | |
available in in_pcballoc() | |||
1996-03-03 | From NetBSD: 960217 merge | Niklas Hallqvist | |
1995-10-18 | initial import of NetBSD tree | Theo de Raadt | |