summaryrefslogtreecommitdiff
path: root/sys/netinet/in_proto.c
AgeCommit message (Collapse)Author
2000-01-27Merge "old" and "new" ESP and AH in two files (one for each).Angelos D. Keromytis
Fix a couple of buglets with ingress flow deletion. tcpdump on enc0 should now show all outgoing packets *before* being processed, and all incoming packets *after* being processed. Good to be in Canada (land of the free commits).
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input.
2000-01-17fix "traceroute -P 41", outgoing side. incoming side needs fix inJun-ichiro itojun Hagino
ip4_input(). Requested from: Niels Provos <provos@citi.umich.edu>
2000-01-11The entry for IP4 should always be there.Angelos D. Keromytis
2000-01-07GRE/MobileIP input routine processing, from NetBSD (with a fewAngelos D. Keromytis
changes). Also, minor cleanup in in_proto.c
2000-01-02Fix non-IPSEC kernel compilation (or part of it).Angelos D. Keromytis
1999-12-21fix non-IPsec compilation. (too complex #ifdef...)Jun-ichiro itojun Hagino
1999-12-21reuse encapsulate/decapsulate routine in ip_ip4.c from gif interfaceJun-ichiro itojun Hagino
(outer=IPv4 case). tested with (inner=IPv6, outer=IPv4) case. BUG ALERT: in_gif_output() assumes about ipe4_output()'s behavior too much. I mean, "tdb" is configured with certain knowledge about ipe4_output()'s behavior.
1999-12-09We can't use the gif interface input routine for IPIP/IP6IPAngelos D. Keromytis
encapsulation.
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).
1999-10-28Add IPPROTO_ETHERIP in the protocol switch; comment out INET6 IPv4-IPv4Angelos D. Keromytis
handling that was re-using ipv4_input() instead of using ip4_input() from netinet/ip_ip4.c
1999-04-20Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets.Niklas Hallqvist
Fix a panic case in the MROUTING code too. Drop M_TUNNEL support, nothing ever uses it.
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too.
1999-04-09The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4)Niklas Hallqvist
support, when IPSEC is compiled in. The default is disabled. Turn on with: sysctl -w net.inet.ip4.allow=1 ***Only*** do this if you are really knowing what you do! This control does not control the tunnel modes of ESP and AH.
1999-02-24Remove encap.h include; saner debugging printfs; fix buglets; work withAngelos D. Keromytis
pfkeyv2.
1999-01-08INET6 hooks; NRL/cmetzTheo de Raadt
1998-07-30Forgot this one with the previous batch of commits; use ip4_input()Angelos D. Keromytis
instead of ipip_input() whenever possible, it seems more stable.
1998-03-18Fix tunnel mode input processing (use ip4_input instead of ipe4_input),Niels Provos
fix some old code leftovers in ah_new_input (adjust to variable hash length), avoid double ip encapsulation in tunnel mode. Problems reportd by Petr Novak <petr@internet.cz>.
1997-02-20IPSEC package by John Ioannidis and Angelos D. Keromytis. Written inTheo de Raadt
Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz
1996-10-08Prototype & Stylistic fixes for high -W gcc levelsNiklas Hallqvist
1996-07-18ipfilter 3.1.0dm
1996-04-24Add IPXIP entry, to not to get cvs confused in the future.Michael Shalayeff
1996-03-04From NetBSD: Fix PR/2095 options MROUTING did not compile.Niklas Hallqvist
1996-03-03From NetBSD: 960217 mergeNiklas Hallqvist
1995-10-18initial import of NetBSD treeTheo de Raadt