summaryrefslogtreecommitdiff
path: root/sys/netinet6/ip6_input.c
AgeCommit message (Collapse)Author
2004-10-18g/c ip6_flow_seq. found by mcbride. mcbride okJun-ichiro itojun Hagino
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-01there's no use in checking curproc privilege in input path.Jun-ichiro itojun Hagino
equivalent to http://orange.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ip6_input.c.diff?r1=1.344&r2=1.345. jinmei@kame
2004-02-15switch to sysctl_int_arr(); ok itojun, henning, miod, deraadtMarkus Friedl
2003-12-08move pf_test6() call below loopback (and mapped-ipv4) tests, so rdr -> ::1Daniel Hartmeier
works without additional route-to lo0, just like for ipv4. ok itojun@, henning@
2003-10-14oops, i did not mean to commit this portion (IPSEC mod), sorryJun-ichiro itojun Hagino
2003-10-14IP6F_OFF_MASK is already endian-flipped; sync w/ kameJun-ichiro itojun Hagino
2003-06-30initialize srcrt properly (so that it won't go mad when NPF==0). cedricJun-ichiro itojun Hagino
2003-06-30do not generate icmp6 redirect if PF rewrote the destination address.Jun-ichiro itojun Hagino
requeested by cedric
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-05-14KNFJun-ichiro itojun Hagino
2003-05-14make PULLDOWN_TEST codepath the default (has been default for a long time).Jun-ichiro itojun Hagino
markus ok
2003-05-14remove obsolete commentsJun-ichiro itojun Hagino
2003-01-07remove the altq classifier code which is replaced by pf and no longer used.Kenjiro Cho
ok henning@, deraadt@
2002-09-11fix pointer signedness mixup. sync w/kameJun-ichiro itojun Hagino
2002-09-11KNF - return is not a function. sync w/kameJun-ichiro itojun Hagino
2002-06-08sync with latest KAME in6_ifaddr/prefix/default router manipulation.Jun-ichiro itojun Hagino
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up.
2002-06-07just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB,Jun-ichiro itojun Hagino
as well as set/getsockopt(IPV6_V6ONLY).
2002-05-28limit number of IPv6 fragments (not the fragment queue size) toJun-ichiro itojun Hagino
fight against lots-of-frags DoS attacks. sync w/kame
2002-03-14First round of __P removal in sysTodd C. Miller
2002-01-21remove couple of #if 0'ed portion we will never useJun-ichiro itojun Hagino
2002-01-02at least ; required after label or case; openbsd@davidkrause.comTheo de Raadt
2001-12-16- Call pf_test6() after we have checked header length and protocol version.jasoni
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@
2001-12-07whitespace/comment sync with kameJun-ichiro itojun Hagino
2001-11-26add fastroute options similar to what is found in ipfjasoni
ok dhartmei@, frantzen@
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
(Look ma, I might have broken the tree)
2001-11-02do not return value that overruns mbuf length from ip6_nexthdr.Jun-ichiro itojun Hagino
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface.
2001-06-09No need for net/net_osdep.hAngelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-03-30enable FAKE_LOOPBACK_IF case by default.Jun-ichiro itojun Hagino
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame.
2001-03-16drop packets with link-local addresses,Jun-ichiro itojun Hagino
if (internally-used) interface ID portion is already filled. sync with kame
2001-02-16get rid of #ifdef IPV6FIREWALL (never used, will never be used)Jun-ichiro itojun Hagino
2001-02-16pull in new pcb notification code from kame. better handling of scope address.Jun-ichiro itojun Hagino
2001-02-16cosmetic/comment sync with kameJun-ichiro itojun Hagino
2001-02-16sync whitespace/comment with kame. to help merge tasksJun-ichiro itojun Hagino
2001-02-16kill register declarations. to sync with kame better.Jun-ichiro itojun Hagino
2001-02-08use timeout_xx() throughout sys/netinet6. sync with kame.Jun-ichiro itojun Hagino
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-02-06allow changing number of loopbacks in ukc.Michael Shalayeff
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok
2000-08-31add missing \n to log(). sync with kame.Jun-ichiro itojun Hagino
2000-07-06- more icmp6/ip6 stats.Jun-ichiro itojun Hagino
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution).
2000-07-02drop packet to tentative/duplicated interface address earlier. sync w/kameJun-ichiro itojun Hagino
2000-06-18try to avoid useless m_pullup2Jun-ichiro itojun Hagino
2000-06-18move m_pullup2() equivalent for KAME requirement into ip6_input().Jun-ichiro itojun Hagino
it was in looutput() to make KAME ipsec4 happy. however, since we don't have KAME ipsec4 in openbsd, we don't need it in looutput().
2000-06-18less mbuf alignment change in extension header processing.Jun-ichiro itojun Hagino
(so that we can be more PULLDONW_TEST friendly)
2000-06-13do not use cached route if it goes !RTF_UP.Jun-ichiro itojun Hagino
make validation of jumbo payload more strict.
2000-05-25net.inet.ip.gif_ttl (and IPv6 counterpart) is never used.Jun-ichiro itojun Hagino
enforce type checking on IN6_ARE_ADDR_EQUAL.
2000-05-19correct "telnet fe80::1%lo0".Jun-ichiro itojun Hagino