Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-10-23 | use the correct idiom for NFOO things which come from "foo.h" files | Theo de Raadt | |
ok dlg | |||
2008-06-14 | Include "pf.h" so we get NPF. | Joel Sing | |
ok reyk@ | |||
2008-05-23 | Deal with the situation when TCP nfs mounts timeout and processes | Thordur I. Bjornsson | |
get hung in nfs_reconnect() because they do not have the proper privilages to bind to a socket, by adding a struct proc * argument to sobind() (and the *_usrreq() routines, and finally in{6}_pcbbind) and do the sobind() with proc0 in nfs_connect. OK markus@, blambert@. "go ahead" deraadt@. Fixes an issue reported by bernd@ (Tested by bernd@). Fixes PR5135 too. | |||
2008-05-09 | Add SO_BINDANY socket option from BSD/OS. | Markus Friedl | |
The option allows a socket to be bound to addresses which are not local to the machine. In order to receive packets for these addresses SO_BINDANY needs to be combined with matching outgoing pf(4) divert rules, see pf.conf(5). ok beck@ | |||
2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl | |
makes transparent proxies much easier; ok beck@, feedback claudio@ | |||
2008-05-02 | Make the SO_TIMESTAMP sockopt work. When set, this allows the user to | Chris Kuethe | |
get a timestamp of when the datagram was accepted (by udp(4), for example) rather than having to take a timestamp with gettimeofday(2) when recv(2) returns - possibly several hundreds of microseconds later. May be of use to those interested in precision network timing schemes or QoS for media applications. Tested on alpha, amd64, i386 and sparc64. manpage suggestions from jmc, ok deraadt | |||
2006-11-25 | Remove unneeded branch, no need to check if opts is != NULL just set it to | Claudio Jeker | |
NULL in any case. | |||
2006-05-29 | Make savecontrol functions more generic and use them now for raw IP too. | Claudio Jeker | |
Additionally add the IP_RECVIF option which returns the interface a packet was received on. OK markus@ norby@ | |||
2006-03-05 | Use more queue macros rather than doing it by hand; ok otto@ krw@ | Miod Vallat | |
2005-05-27 | Experimental support for opportunitic use of jumbograms where only some hosts | Ryan Thomas McBride | |
on the local network support them. This adds a new socket option, SO_JUMBO, and a new route flag, RTF_JUMBO. If _both_ the socket option is set and the route for the host has RTF_JUMBO set, ip_output will fragment the packet to the largest possible size for the link, ignoring the card's MTU. The semantics of this feature will be evolving rapidly; talk to us if you intend to use it. ok deraadt@ marius@ | |||
2005-01-14 | Add kernel support for Protocol Independant Multicast (PIM) | Ryan Thomas McBride | |
Information: http://netweb.usc.edu/pim/ From Pavlin Radoslavov <pavlin@icir.org> ok deraadt@ brad@ | |||
2004-12-08 | allow ToS to be set on raw ip sockets | Henning Brauer | |
From: "Esben Norby (ST/LMD)" <esben.norby@ericsson.com> ok hshoexer markus millert | |||
2004-11-25 | use ttl from setsockopt(), similar to bsd/os; ok henning, mcbride, fgsch | Markus Friedl | |
2004-11-24 | Multicast routing cleanup from Pavlin Radoslavov | Ryan Thomas McBride | |
- sync ip_mroute.c with NetBSD - import some FreeBSD changes to MFC entry handling - set im->im_vif correctly when sending IGMPMSG_WRONGVIF - increment mrtstat.mrts_upcalls correctly - return error from get_sg_cnt() if there is no matching forwarding entry ok henning@ brad@ naddy@ | |||
2003-12-21 | use CIRCLEQ* for pcb's; ok deraadt, henning, mcbride, with help from canacar | Markus Friedl | |
2003-12-10 | de-register. deraadt ok | Jun-ichiro itojun Hagino | |
2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino | |
(please test, especially PF portion) | |||
2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-05-27 | don't use M_WAIT here. we could be in splnet, and caller may not be | Jun-ichiro itojun Hagino | |
xx_usrreq. henning ok | |||
2003-02-15 | rip_output: make sure a full ip header is passed for INP_HDRINCL; ok deraadt@ | Markus Friedl | |
2002-06-09 | whitespace | Jun-ichiro itojun Hagino | |
2002-03-15 | Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do things | Todd C. Miller | |
the ANSI way. | |||
2001-06-23 | Remove unneeded ip_id convertions. | Federico G. Schwindt | |
Instead of using HTONS macro in some places, use htons directly in the struct member and save us a few bytes. Fix comment. | |||
2001-06-08 | Cut down on include files. | Angelos D. Keromytis | |
2001-06-05 | repair copyright notices for NRL & cmetz; cmetz | Theo de Raadt | |
2000-09-19 | Lots and lots of changes. | Angelos D. Keromytis | |
1999-12-19 | disallow AF mismatch on inbound. | Jun-ichiro itojun Hagino | |
1999-09-23 | fix same-interface-out-as-in and packet gets corrupted bug noted by | Theo de Raadt | |
james@oaktree.co.uk by re-working icmp embedded-packet code so that ip_forward() m_copy()-aliased packet can be forwarded to ip_output and icmp_error() safely, because no packet tweaking is needed before calling icmp_error() | |||
1999-06-07 | return a ICMP_UNREACH_PROTOCOL for protocols we do not support; discussion ↵ | Theo de Raadt | |
with cmetz | |||
1999-04-20 | messup, learn to test *all* variants of compile options when | Niklas Hallqvist | |
altering the logic round such. | |||
1999-04-20 | Merge MROUTING and IPSEC wrt handling of IP-in-IP tunnelled packets. | Niklas Hallqvist | |
Fix a panic case in the MROUTING code too. Drop M_TUNNEL support, nothing ever uses it. | |||
1999-01-11 | netinet merge of NRL stuff. some indent and shrinkage needed; NRL/cmetz | Theo de Raadt | |
1999-01-08 | dont call ip_randomid() in htons(). | Niels Provos | |
1998-12-26 | make ip_id random but ensure that ids dont repeat for some period. | Niels Provos | |
1998-12-15 | check for valid ip_hl too; route@infonexus.com | Theo de Raadt | |
1998-05-18 | first step to the setsockopt/getsockopt interface as described in | Niels Provos | |
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy. | |||
1997-07-24 | cmd is a u_long | Theo de Raadt | |
1997-01-30 | for IP_HDRINCL option, use ip_len/ip_off in network order; lidl@va.pubnix.com | Theo de Raadt | |
1997-01-26 | Make ip_len and ip_off unsigned values; don't transmit or accept packets | Thorsten Lockert | |
larger than the maximum IP packet size. From NetBSD. | |||
1996-08-14 | restrict some raw ip packets that may crash ip_output(); from freebsd | Theo de Raadt | |
1996-03-15 | Fix bogosity in import of Lite2 fix | Thorsten Lockert | |
1996-03-14 | From Lite2; improve handling of socket options on raw datagrams and multi- | Thorsten Lockert | |
cast routing commands | |||
1996-03-04 | From NetBSD: Fix PR/2095 options MROUTING did not compile. | Niklas Hallqvist | |
1996-03-03 | From NetBSD: 960217 merge | Niklas Hallqvist | |
1995-12-14 | from netbsd: | Theo de Raadt | |
make netinet work on systems where pointers and longs are 64 bits (like the alpha). Biggest problem: IP headers were overlayed with structure which included pointers, and which therefore didn't overlay properly on 64-bit machines. Solution: instead of threading pointers through IP header overlays, add a "queue element" structure to do the threading, and point it at the ip headers. | |||
1995-10-18 | initial import of NetBSD tree | Theo de Raadt | |