summaryrefslogtreecommitdiff
path: root/sys/netinet6/in6_proto.c
AgeCommit message (Collapse)Author
2005-10-14bye bye more compile time knobs, use the sysctl to enable v6 forwarding.Brad Smith
ok deraadt@
2004-12-07Convert carp(4) to behave more like a regular interface, much in the sameRyan Thomas McBride
style as vlan(4). carp interfaces no longer require the physical interface to be on the same subnet as the carp interface, or even that the physical interface has an adress at all, so CARP can now be used on /30 networks. ok deraadt@ henning@
2004-10-18g/c ip6_flow_seq. found by mcbride. mcbride okJun-ichiro itojun Hagino
2004-04-25radix tree with multipath support. from kame. deraadt okJun-ichiro itojun Hagino
user visible changes: - you can add multiple routes with same key (route add A B then route add A C) - you have to specify gateway address if there are multiple entries on the table (route delete A B, instead of route delete A) kernel change: - radix_node_head has an extra entry - rnh_deladdr takes extra argument TODO: - actually take advantage of multipath (rtalloc -> rtalloc_mpath)
2003-10-31Add IPv6 support to CARP.Ryan Thomas McBride
ok deraadt@
2003-08-07make net.inet6.ip6.redirect actually work. from kameJun-ichiro itojun Hagino
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2002-11-11pmtu_probe is not used anywhere (it is used in KAME TCP6-only code).Jun-ichiro itojun Hagino
From: Krister Walfridsson <cato@df.lth.se>
2002-08-20set use_deprecated back to 1. sync w/kameJun-ichiro itojun Hagino
2002-08-17set default value for use_deprecated to 0, to avoid consequences with ftpd.Jun-ichiro itojun Hagino
2002-06-09whitespace cleanupJun-ichiro itojun Hagino
2002-06-07move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs.Jun-ichiro itojun Hagino
rip6 stats. sync w/kame
2002-06-07just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB,Jun-ichiro itojun Hagino
as well as set/getsockopt(IPV6_V6ONLY).
2002-05-29move per-interface ip6/icmp6 stat to ifnet->if_afdata. sync w/kameJun-ichiro itojun Hagino
2002-05-28limit number of IPv6 fragments (not the fragment queue size) toJun-ichiro itojun Hagino
fight against lots-of-frags DoS attacks. sync w/kame
2002-01-08correct behavior of IPv4 over IPv6 tunnel (using gif).Jun-ichiro itojun Hagino
http://archives.neohapsis.com/archives/openbsd/2001-09/0165.html From: Alexander Yurchenko <grange@rt.mipt.ru>
2001-08-08remove IPCOMP option. deraadt@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-09No need for net/net_osdep.hAngelos D. Keromytis
2001-05-25recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket.Jun-ichiro itojun Hagino
it is to be friendly with postfix daemon-to-daemon communication (not 100% sure if which behavior is correct, specwise). patch similar to netbsd.
2001-04-06Move offsetof define into sys/param.hConstantine Sapuntzakis
2000-12-11nuke #ifdef TCP6 (no longer supported).Jun-ichiro itojun Hagino
validate ICMPv6 too big messages (pmtud) based on pcb. we accept certain amount of non-validated ones, as IPv6 mandates ICMPv6 (so even for traffic from unconnected pcb, we need pmtud). sync with kame
2000-10-10little bit of sync with kame ($KAME, s/u_char/u_int8_t/)Jun-ichiro itojun Hagino
2000-10-10do not call tcp_init twice on dualstack machineJun-ichiro itojun Hagino
2000-07-06- more icmp6/ip6 stats.Jun-ichiro itojun Hagino
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution).
2000-06-18sync with KAME udp6_output(). udp output logic is very different betweenJun-ichiro itojun Hagino
IPv4/v6 so the separation should make more sense. TODO: remove IPv6 case from udp_output() TODO: remove/comment out/#if 0 IPv4 mapped address cases
2000-05-25net.inet.ip.gif_ttl (and IPv6 counterpart) is never used.Jun-ichiro itojun Hagino
enforce type checking on IN6_ARE_ADDR_EQUAL.
2000-05-22use ratecheck(9) for ICMPv6 rate limitation. sync with netbsd-current.Jun-ichiro itojun Hagino
2000-02-28- check raw socket icmp6 filter only if the packet is icmp6.Jun-ichiro itojun Hagino
- allow setting raw socket icmp6 filter only if it is IPPROTO_ICMPV6 socket. (cmetz may object about above two items...) - add rip6_ctlinput, to flush cached router properly on redirects.
2000-02-28bring in recent KAME changes (only important and stable ones, as usual).Jun-ichiro itojun Hagino
- remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case)
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-02-02remove never-visited code (#ifdef MAPPED_ADDR_ENABLED)Jun-ichiro itojun Hagino
2000-01-23ip4_input -> ip4_input6, and fix typo in commentAngelos D. Keromytis
2000-01-21Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notAngelos D. Keromytis
affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input.
2000-01-13We do need netinet/ip_ip4.h after all...Angelos D. Keromytis
2000-01-13Align.Angelos D. Keromytis
2000-01-13Introduce ip4_input6() with the correct prototype...Angelos D. Keromytis
2000-01-13Add include file fixing non-gif inet6 kernels.Angelos D. Keromytis
2000-01-12Use netinet/ip_ip4.c routines.Angelos D. Keromytis
2000-01-02Replace references to ipsec6_sysctl (code is not yet compiled in)Angelos D. Keromytis
2000-01-02implement net.inet6.icmp6.nodeinfo sysctl, which disablesJun-ichiro itojun Hagino
ICMPv6 node information query (and FQDN query - old variant). kame repository has the change as well.
1999-12-10Remove remaining unnecessary ifdefs (itojun will hate me for this :-)Angelos D. Keromytis
1999-12-10Add RCS tags, remove unused header files and code, remove a fewAngelos D. Keromytis
unnecessary ifdefs...
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).
1999-03-09Demangled the INET6 stuff so as not to require any extra options and not tocmetz
be mutually exclusive with the IPSEC option.
1999-02-24Synchronized changes needed to integrate into OpenBSD with the NRL sourcecmetz
tree so we can have a unified netinet6 directory.
1999-01-06first few files of NRL ipv6. This NRL release was officially exportedTheo de Raadt
to me by US DOD officials, with the crypto already removed.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-17 01:29:15 +0000