summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_output.c
AgeCommit message (Collapse)Author
2004-05-18fix size argument to ovbcopy() in ip_pcbopts(), found by Andrei IltchenkoDaniel Hartmeier
(FreeBSD PR 66386), ok markus@, otto@
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-02-10plug mbuf leak (ip_fragment() always free mbuf on error). tested by cedric,Jun-ichiro itojun Hagino
dhartmei ok
2003-11-06the previous change caused invalid checksums in some cases (rdr),Daniel Hartmeier
back it out temporarily, ok cedric@
2003-11-03There is no point in checking NIC capabilities before calling pf_test(),Cedric Berger
since pf_test() can drop the packet or route it through another NIC. ok dhartmei@ mcbride@ comment requested by markus@
2003-10-02correct endian handling of ip->ip_off.Jun-ichiro itojun Hagino
do not try to send incomplete fragments on ENOBUFS case (behavior change from 4.4bsd). dhartmei ok
2003-08-15change arguments to suser. suser now takes the process, and a flagsTed Unangst
argument. old cred only calls user suser_ucred. this will allow future work to more flexibly implement the idea of a root process. looks like something i saw in freebsd, but a little different. use of suser_ucred vs suser in file system code should be looked at again, for the moment semantics remain unchanged. review and input from art@ testing and further review miod@
2003-08-14m_copyback()'s 4th arg is const void *, nuke (caddr_t) casts.Jason Wright
2003-07-09do not flip ip_len/ip_off in netinet stack. deraadt ok.Jun-ichiro itojun Hagino
(please test, especially PF portion)
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-03-14kill vaxismsJason Wright
2003-01-31KNFTheo de Raadt
2002-10-10Missing m_pullup() and mbuf corruption. This potentially causedDaniel Hartmeier
panic: m_copym0: m == 0 and not COPYALL and/or panic: m_copydata: null muf on bridges running pf with scrubbing enabled. Bug report, test vector and confirmation by Jon Morby. ok jason@, jasoni@
2002-06-24skip routing table lookup if multicasting/broadcasting and the outgoingJun-ichiro itojun Hagino
interface is specified by setsockopt. from freebsd4, sync with kame (it makes difference when you run routed with RIPv2 enabled - no need for 224/4 route)
2002-06-04spaces to tabs, remove trailing whitespacejasoni
2002-05-31respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos okJun-ichiro itojun Hagino
2002-05-31Socket-related IPsec sockoptions --- cleanups etc.Angelos D. Keromytis
2002-05-28kill register; ok deraadt@jasoni
2002-05-28Factor out IP fragmentation code into its own function so it can bejasoni
reused. - ok jason@, dhartmei@
2002-03-15Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do thingsTodd C. Miller
the ANSI way.
2002-03-14First round of __P removal in sysTodd C. Miller
2002-01-23disable pmtu for ipsec when the sysctl says so; bug report cjkim2000@yahoo.comNiels Provos
2001-11-26add fastroute options similar to what is found in ipfjasoni
ok dhartmei@, frantzen@
2001-11-24KNFTheo de Raadt
2001-11-02fix multicast loopback checksums; goeran@cdg.chalmers.se, ok angelosTheo de Raadt
2001-08-26Uninitialized variable.Niklas Hallqvist
2001-08-22IPCOMP policy stuff missed the last time roundNiklas Hallqvist
2001-08-21Don't check for BYPASS options in PCB on ip_output/ip6_output --- thisAngelos D. Keromytis
is already done in ip_spd_lookup()
2001-07-17split ip normalization out into a separate file, okay dhartmei@Niels Provos
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-29move pf_test check to happen after checksum calculation - withoutBob Beck
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@)
2001-06-28first stab at packet normalization. includes full ip reassembly.Niels Provos
okay dhartmei@, dugsong@
2001-06-27Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, dependingAngelos D. Keromytis
on how macros should be treated. Code by fgsch@, ok by me and itojun@
2001-06-27Add length to pkthdr.len directly.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
local packets.
2001-06-26no longer pass around **mTheo de Raadt
2001-06-25If a PENDING_TDB tag is attached but no TDB is found, drop the packet.Angelos D. Keromytis
2001-06-25Check the length of the tag (diagnostic)Angelos D. Keromytis
2001-06-25Apply pending TDBs (as indicated by tags). This will be used to handleAngelos D. Keromytis
the case of both the socket and system-wide IPsec policy specifying TDBs to be applied to the same packet.
2001-06-25Don't double-clear M_PKTHDR/tags.Angelos D. Keromytis
2001-06-25Remove unnecessary temporary variable.Angelos D. Keromytis
2001-06-25Always defer output TCP checksumming until ip_output() (or hardware,Angelos D. Keromytis
if it exists). Cuts down on code a bit, and we don't need to look at the routing entry at TCP. Based on NetBSD. UDP case to follow.
2001-06-25put pf before ipsec processing. return error code and free mbuf chainNiels Provos
2001-06-24make it compile w/o pfMichael Shalayeff
2001-06-24Sync in4_cksum() with NetBSD, and change its use in in_delayed_cksum.Angelos D. Keromytis
2001-06-24Import in_delayed_cksum() and convert to using it; also, don't doAngelos D. Keromytis
TCP/UDP HW checksumming if doing IP fragmentation. From NetBSD
2001-06-24Also reset input cached TDB.Angelos D. Keromytis
2001-06-24ResetAngelos D. Keromytis
2001-06-24Initial import of pf, an all-new ipf-compatable packet filter.Kjell Wooding
Insane amounts of work done my dhartmei. Great work!
2001-06-24check if ipsec processing increases packet size above allowable mtu.Niels Provos
store correct mtu in routing table.