Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-10-18 | g/c ip6_flow_seq. found by mcbride. mcbride ok | Jun-ichiro itojun Hagino | |
2004-06-21 | Get rid of pf_test_eh() wrapper. | Ryan Thomas McBride | |
ok cedric@ henning@ | |||
2004-06-01 | there's no use in checking curproc privilege in input path. | Jun-ichiro itojun Hagino | |
equivalent to http://orange.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ip6_input.c.diff?r1=1.344&r2=1.345. jinmei@kame | |||
2004-02-15 | switch to sysctl_int_arr(); ok itojun, henning, miod, deraadt | Markus Friedl | |
2003-12-08 | move pf_test6() call below loopback (and mapped-ipv4) tests, so rdr -> ::1 | Daniel Hartmeier | |
works without additional route-to lo0, just like for ipv4. ok itojun@, henning@ | |||
2003-10-14 | oops, i did not mean to commit this portion (IPSEC mod), sorry | Jun-ichiro itojun Hagino | |
2003-10-14 | IP6F_OFF_MASK is already endian-flipped; sync w/ kame | Jun-ichiro itojun Hagino | |
2003-06-30 | initialize srcrt properly (so that it won't go mad when NPF==0). cedric | Jun-ichiro itojun Hagino | |
2003-06-30 | do not generate icmp6 redirect if PF rewrote the destination address. | Jun-ichiro itojun Hagino | |
requeested by cedric | |||
2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-05-14 | KNF | Jun-ichiro itojun Hagino | |
2003-05-14 | make PULLDOWN_TEST codepath the default (has been default for a long time). | Jun-ichiro itojun Hagino | |
markus ok | |||
2003-05-14 | remove obsolete comments | Jun-ichiro itojun Hagino | |
2003-01-07 | remove the altq classifier code which is replaced by pf and no longer used. | Kenjiro Cho | |
ok henning@, deraadt@ | |||
2002-09-11 | fix pointer signedness mixup. sync w/kame | Jun-ichiro itojun Hagino | |
2002-09-11 | KNF - return is not a function. sync w/kame | Jun-ichiro itojun Hagino | |
2002-06-08 | sync with latest KAME in6_ifaddr/prefix/default router manipulation. | Jun-ichiro itojun Hagino | |
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up. | |||
2002-06-07 | just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB, | Jun-ichiro itojun Hagino | |
as well as set/getsockopt(IPV6_V6ONLY). | |||
2002-05-28 | limit number of IPv6 fragments (not the fragment queue size) to | Jun-ichiro itojun Hagino | |
fight against lots-of-frags DoS attacks. sync w/kame | |||
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-01-21 | remove couple of #if 0'ed portion we will never use | Jun-ichiro itojun Hagino | |
2002-01-02 | at least ; required after label or case; openbsd@davidkrause.com | Theo de Raadt | |
2001-12-16 | - Call pf_test6() after we have checked header length and protocol version. | jasoni | |
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@ | |||
2001-12-07 | whitespace/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
ok dhartmei@, frantzen@ | |||
2001-11-06 | Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary. | Miod Vallat | |
(Look ma, I might have broken the tree) | |||
2001-11-02 | do not return value that overruns mbuf length from ip6_nexthdr. | Jun-ichiro itojun Hagino | |
2001-09-15 | IPv6 support from Ryan McBride (mcbride@countersiege.com) | Mike Frantzen | |
2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
2001-06-09 | No need for net/net_osdep.h | Angelos D. Keromytis | |
2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell | |
2001-03-30 | enable FAKE_LOOPBACK_IF case by default. | Jun-ichiro itojun Hagino | |
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame. | |||
2001-03-16 | drop packets with link-local addresses, | Jun-ichiro itojun Hagino | |
if (internally-used) interface ID portion is already filled. sync with kame | |||
2001-02-16 | get rid of #ifdef IPV6FIREWALL (never used, will never be used) | Jun-ichiro itojun Hagino | |
2001-02-16 | pull in new pcb notification code from kame. better handling of scope address. | Jun-ichiro itojun Hagino | |
2001-02-16 | cosmetic/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-02-16 | sync whitespace/comment with kame. to help merge tasks | Jun-ichiro itojun Hagino | |
2001-02-16 | kill register declarations. to sync with kame better. | Jun-ichiro itojun Hagino | |
2001-02-08 | use timeout_xx() throughout sys/netinet6. sync with kame. | Jun-ichiro itojun Hagino | |
2001-02-07 | by default, don't bark on inbound ND messages, as outsider may be able to | Jun-ichiro itojun Hagino | |
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats. | |||
2001-02-06 | allow changing number of loopbacks in ukc. | Michael Shalayeff | |
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok | |||
2000-08-31 | add missing \n to log(). sync with kame. | Jun-ichiro itojun Hagino | |
2000-07-06 | - more icmp6/ip6 stats. | Jun-ichiro itojun Hagino | |
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution). | |||
2000-07-02 | drop packet to tentative/duplicated interface address earlier. sync w/kame | Jun-ichiro itojun Hagino | |
2000-06-18 | try to avoid useless m_pullup2 | Jun-ichiro itojun Hagino | |
2000-06-18 | move m_pullup2() equivalent for KAME requirement into ip6_input(). | Jun-ichiro itojun Hagino | |
it was in looutput() to make KAME ipsec4 happy. however, since we don't have KAME ipsec4 in openbsd, we don't need it in looutput(). | |||
2000-06-18 | less mbuf alignment change in extension header processing. | Jun-ichiro itojun Hagino | |
(so that we can be more PULLDONW_TEST friendly) | |||
2000-06-13 | do not use cached route if it goes !RTF_UP. | Jun-ichiro itojun Hagino | |
make validation of jumbo payload more strict. | |||
2000-05-25 | net.inet.ip.gif_ttl (and IPv6 counterpart) is never used. | Jun-ichiro itojun Hagino | |
enforce type checking on IN6_ARE_ADDR_EQUAL. | |||
2000-05-19 | correct "telnet fe80::1%lo0". | Jun-ichiro itojun Hagino | |