summaryrefslogtreecommitdiff
path: root/sys/netinet6/ip6_input.c
AgeCommit message (Collapse)Author
2006-12-28check if ifqueue has anything queued before doing the dance ofTheo de Raadt
splnet/IF_DEQUEUE/splx; ok various people
2006-12-19reject (potentially malicious) packets from outside,Jun-ichiro itojun Hagino
with interface-local multicast addr in ip6_dst. by jinmei@kame
2006-12-09switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542).Jun-ichiro itojun Hagino
the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt.
2006-12-08whitespaceJun-ichiro itojun Hagino
2006-11-27make use of multiple routing tables.Henning Brauer
hook up looking up routes in alternate tables to the packet forwarding path. alternate routing tables are mintained with route(8), table selection via pf. mostly hacked on a train ride with ryan some time ago, ok mcbride claudio
2006-11-17change semantics of ff01::/16 to interface local multicastJun-ichiro itojun Hagino
(to sync up with more recent IPv6 spec) ok from: deraadt mcbride
2006-06-18Add support for equal-cost multipath IP.Christopher Pascoe
To minimise path disruptions, this implements recommendations made in RFC2992 - the hash-threshold mechanism to select paths based on source/destination IP address pairs, and inserts multipath routes in the middle of the route table. To enable multipath distribution, use: sysctl net.inet.ip.multipath=1 and/or: sysctl net.inet6.ip6.multipath=1 testing norby@ ok claudio@ henning@ hshoexer@
2006-05-27Do the same thing as for IPv4. Use a sysctl to enable/disable mfrowardingClaudio Jeker
and additionaly make the code part of the MROUTING option. Put it in deraadt@
2006-05-27Fix obvious error in code that is currently not compiled.Claudio Jeker
2006-05-24fix 2 !foo & barThordur I. Bjornsson
"why are you not committing? into the tree, into the tree!" and ok tedu@
2006-03-05Use more queue macros rather than doing it by hand; ok otto@ krw@Miod Vallat
2006-03-04With the exception of two other small uncommited diffs this movesBrad Smith
the remainder of the network stack from splimp to splnet. ok miod@
2005-08-11New counter for not joined IPv4 multicast groups.Marco Pfatschbacher
Don't count link local scope multicast as not forwardable. This stops ips_cantforward growing on carp(4) networks. tested and ok mcbride@, ok markus@.
2005-03-06move pf_test6() call slightly up, so pf gets called for incoming packetsDaniel Hartmeier
on loopback interfaces, and IPv6 behaves like IPv4 in this regard. only affects packets on loopback. ok itojun@
2004-10-18g/c ip6_flow_seq. found by mcbride. mcbride okJun-ichiro itojun Hagino
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-01there's no use in checking curproc privilege in input path.Jun-ichiro itojun Hagino
equivalent to http://orange.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ip6_input.c.diff?r1=1.344&r2=1.345. jinmei@kame
2004-02-15switch to sysctl_int_arr(); ok itojun, henning, miod, deraadtMarkus Friedl
2003-12-08move pf_test6() call below loopback (and mapped-ipv4) tests, so rdr -> ::1Daniel Hartmeier
works without additional route-to lo0, just like for ipv4. ok itojun@, henning@
2003-10-14oops, i did not mean to commit this portion (IPSEC mod), sorryJun-ichiro itojun Hagino
2003-10-14IP6F_OFF_MASK is already endian-flipped; sync w/ kameJun-ichiro itojun Hagino
2003-06-30initialize srcrt properly (so that it won't go mad when NPF==0). cedricJun-ichiro itojun Hagino
2003-06-30do not generate icmp6 redirect if PF rewrote the destination address.Jun-ichiro itojun Hagino
requeested by cedric
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-05-14KNFJun-ichiro itojun Hagino
2003-05-14make PULLDOWN_TEST codepath the default (has been default for a long time).Jun-ichiro itojun Hagino
markus ok
2003-05-14remove obsolete commentsJun-ichiro itojun Hagino
2003-01-07remove the altq classifier code which is replaced by pf and no longer used.Kenjiro Cho
ok henning@, deraadt@
2002-09-11fix pointer signedness mixup. sync w/kameJun-ichiro itojun Hagino
2002-09-11KNF - return is not a function. sync w/kameJun-ichiro itojun Hagino
2002-06-08sync with latest KAME in6_ifaddr/prefix/default router manipulation.Jun-ichiro itojun Hagino
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up.
2002-06-07just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB,Jun-ichiro itojun Hagino
as well as set/getsockopt(IPV6_V6ONLY).
2002-05-28limit number of IPv6 fragments (not the fragment queue size) toJun-ichiro itojun Hagino
fight against lots-of-frags DoS attacks. sync w/kame
2002-03-14First round of __P removal in sysTodd C. Miller
2002-01-21remove couple of #if 0'ed portion we will never useJun-ichiro itojun Hagino
2002-01-02at least ; required after label or case; openbsd@davidkrause.comTheo de Raadt
2001-12-16- Call pf_test6() after we have checked header length and protocol version.jasoni
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@
2001-12-07whitespace/comment sync with kameJun-ichiro itojun Hagino
2001-11-26add fastroute options similar to what is found in ipfjasoni
ok dhartmei@, frantzen@
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
(Look ma, I might have broken the tree)
2001-11-02do not return value that overruns mbuf length from ip6_nexthdr.Jun-ichiro itojun Hagino
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface.
2001-06-09No need for net/net_osdep.hAngelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-03-30enable FAKE_LOOPBACK_IF case by default.Jun-ichiro itojun Hagino
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame.
2001-03-16drop packets with link-local addresses,Jun-ichiro itojun Hagino
if (internally-used) interface ID portion is already filled. sync with kame
2001-02-16get rid of #ifdef IPV6FIREWALL (never used, will never be used)Jun-ichiro itojun Hagino
2001-02-16pull in new pcb notification code from kame. better handling of scope address.Jun-ichiro itojun Hagino
2001-02-16cosmetic/comment sync with kameJun-ichiro itojun Hagino