Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-10-31 | Add IPv6 support to CARP. | Ryan Thomas McBride | |
ok deraadt@ | |||
2003-08-07 | make net.inet6.ip6.redirect actually work. from kame | Jun-ichiro itojun Hagino | |
2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2002-11-11 | pmtu_probe is not used anywhere (it is used in KAME TCP6-only code). | Jun-ichiro itojun Hagino | |
From: Krister Walfridsson <cato@df.lth.se> | |||
2002-08-20 | set use_deprecated back to 1. sync w/kame | Jun-ichiro itojun Hagino | |
2002-08-17 | set default value for use_deprecated to 0, to avoid consequences with ftpd. | Jun-ichiro itojun Hagino | |
2002-06-09 | whitespace cleanup | Jun-ichiro itojun Hagino | |
2002-06-07 | move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs. | Jun-ichiro itojun Hagino | |
rip6 stats. sync w/kame | |||
2002-06-07 | just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB, | Jun-ichiro itojun Hagino | |
as well as set/getsockopt(IPV6_V6ONLY). | |||
2002-05-29 | move per-interface ip6/icmp6 stat to ifnet->if_afdata. sync w/kame | Jun-ichiro itojun Hagino | |
2002-05-28 | limit number of IPv6 fragments (not the fragment queue size) to | Jun-ichiro itojun Hagino | |
fight against lots-of-frags DoS attacks. sync w/kame | |||
2002-01-08 | correct behavior of IPv4 over IPv6 tunnel (using gif). | Jun-ichiro itojun Hagino | |
http://archives.neohapsis.com/archives/openbsd/2001-09/0165.html From: Alexander Yurchenko <grange@rt.mipt.ru> | |||
2001-08-08 | remove IPCOMP option. deraadt@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-06-09 | No need for net/net_osdep.h | Angelos D. Keromytis | |
2001-05-25 | recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket. | Jun-ichiro itojun Hagino | |
it is to be friendly with postfix daemon-to-daemon communication (not 100% sure if which behavior is correct, specwise). patch similar to netbsd. | |||
2001-04-06 | Move offsetof define into sys/param.h | Constantine Sapuntzakis | |
2000-12-11 | nuke #ifdef TCP6 (no longer supported). | Jun-ichiro itojun Hagino | |
validate ICMPv6 too big messages (pmtud) based on pcb. we accept certain amount of non-validated ones, as IPv6 mandates ICMPv6 (so even for traffic from unconnected pcb, we need pmtud). sync with kame | |||
2000-10-10 | little bit of sync with kame ($KAME, s/u_char/u_int8_t/) | Jun-ichiro itojun Hagino | |
2000-10-10 | do not call tcp_init twice on dualstack machine | Jun-ichiro itojun Hagino | |
2000-07-06 | - more icmp6/ip6 stats. | Jun-ichiro itojun Hagino | |
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution). | |||
2000-06-18 | sync with KAME udp6_output(). udp output logic is very different between | Jun-ichiro itojun Hagino | |
IPv4/v6 so the separation should make more sense. TODO: remove IPv6 case from udp_output() TODO: remove/comment out/#if 0 IPv4 mapped address cases | |||
2000-05-25 | net.inet.ip.gif_ttl (and IPv6 counterpart) is never used. | Jun-ichiro itojun Hagino | |
enforce type checking on IN6_ARE_ADDR_EQUAL. | |||
2000-05-22 | use ratecheck(9) for ICMPv6 rate limitation. sync with netbsd-current. | Jun-ichiro itojun Hagino | |
2000-02-28 | - check raw socket icmp6 filter only if the packet is icmp6. | Jun-ichiro itojun Hagino | |
- allow setting raw socket icmp6 filter only if it is IPPROTO_ICMPV6 socket. (cmetz may object about above two items...) - add rip6_ctlinput, to flush cached router properly on redirects. | |||
2000-02-28 | bring in recent KAME changes (only important and stable ones, as usual). | Jun-ichiro itojun Hagino | |
- remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case) | |||
2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino | |
2000-02-02 | remove never-visited code (#ifdef MAPPED_ADDR_ENABLED) | Jun-ichiro itojun Hagino | |
2000-01-23 | ip4_input -> ip4_input6, and fix typo in comment | Angelos D. Keromytis | |
2000-01-21 | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | Angelos D. Keromytis | |
affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input. | |||
2000-01-13 | We do need netinet/ip_ip4.h after all... | Angelos D. Keromytis | |
2000-01-13 | Align. | Angelos D. Keromytis | |
2000-01-13 | Introduce ip4_input6() with the correct prototype... | Angelos D. Keromytis | |
2000-01-13 | Add include file fixing non-gif inet6 kernels. | Angelos D. Keromytis | |
2000-01-12 | Use netinet/ip_ip4.c routines. | Angelos D. Keromytis | |
2000-01-02 | Replace references to ipsec6_sysctl (code is not yet compiled in) | Angelos D. Keromytis | |
2000-01-02 | implement net.inet6.icmp6.nodeinfo sysctl, which disables | Jun-ichiro itojun Hagino | |
ICMPv6 node information query (and FQDN query - old variant). kame repository has the change as well. | |||
1999-12-10 | Remove remaining unnecessary ifdefs (itojun will hate me for this :-) | Angelos D. Keromytis | |
1999-12-10 | Add RCS tags, remove unused header files and code, remove a few | Angelos D. Keromytis | |
unnecessary ifdefs... | |||
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino | |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). | |||
1999-03-09 | Demangled the INET6 stuff so as not to require any extra options and not to | cmetz | |
be mutually exclusive with the IPSEC option. | |||
1999-02-24 | Synchronized changes needed to integrate into OpenBSD with the NRL source | cmetz | |
tree so we can have a unified netinet6 directory. | |||
1999-01-06 | first few files of NRL ipv6. This NRL release was officially exported | Theo de Raadt | |
to me by US DOD officials, with the crypto already removed. |