Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-12-28 | check if ifqueue has anything queued before doing the dance of | Theo de Raadt | |
splnet/IF_DEQUEUE/splx; ok various people | |||
2006-12-19 | reject (potentially malicious) packets from outside, | Jun-ichiro itojun Hagino | |
with interface-local multicast addr in ip6_dst. by jinmei@kame | |||
2006-12-09 | switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542). | Jun-ichiro itojun Hagino | |
the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt. | |||
2006-12-08 | whitespace | Jun-ichiro itojun Hagino | |
2006-11-27 | make use of multiple routing tables. | Henning Brauer | |
hook up looking up routes in alternate tables to the packet forwarding path. alternate routing tables are mintained with route(8), table selection via pf. mostly hacked on a train ride with ryan some time ago, ok mcbride claudio | |||
2006-11-17 | change semantics of ff01::/16 to interface local multicast | Jun-ichiro itojun Hagino | |
(to sync up with more recent IPv6 spec) ok from: deraadt mcbride | |||
2006-06-18 | Add support for equal-cost multipath IP. | Christopher Pascoe | |
To minimise path disruptions, this implements recommendations made in RFC2992 - the hash-threshold mechanism to select paths based on source/destination IP address pairs, and inserts multipath routes in the middle of the route table. To enable multipath distribution, use: sysctl net.inet.ip.multipath=1 and/or: sysctl net.inet6.ip6.multipath=1 testing norby@ ok claudio@ henning@ hshoexer@ | |||
2006-05-27 | Do the same thing as for IPv4. Use a sysctl to enable/disable mfrowarding | Claudio Jeker | |
and additionaly make the code part of the MROUTING option. Put it in deraadt@ | |||
2006-05-27 | Fix obvious error in code that is currently not compiled. | Claudio Jeker | |
2006-05-24 | fix 2 !foo & bar | Thordur I. Bjornsson | |
"why are you not committing? into the tree, into the tree!" and ok tedu@ | |||
2006-03-05 | Use more queue macros rather than doing it by hand; ok otto@ krw@ | Miod Vallat | |
2006-03-04 | With the exception of two other small uncommited diffs this moves | Brad Smith | |
the remainder of the network stack from splimp to splnet. ok miod@ | |||
2005-08-11 | New counter for not joined IPv4 multicast groups. | Marco Pfatschbacher | |
Don't count link local scope multicast as not forwardable. This stops ips_cantforward growing on carp(4) networks. tested and ok mcbride@, ok markus@. | |||
2005-03-06 | move pf_test6() call slightly up, so pf gets called for incoming packets | Daniel Hartmeier | |
on loopback interfaces, and IPv6 behaves like IPv4 in this regard. only affects packets on loopback. ok itojun@ | |||
2004-10-18 | g/c ip6_flow_seq. found by mcbride. mcbride ok | Jun-ichiro itojun Hagino | |
2004-06-21 | Get rid of pf_test_eh() wrapper. | Ryan Thomas McBride | |
ok cedric@ henning@ | |||
2004-06-01 | there's no use in checking curproc privilege in input path. | Jun-ichiro itojun Hagino | |
equivalent to http://orange.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ip6_input.c.diff?r1=1.344&r2=1.345. jinmei@kame | |||
2004-02-15 | switch to sysctl_int_arr(); ok itojun, henning, miod, deraadt | Markus Friedl | |
2003-12-08 | move pf_test6() call below loopback (and mapped-ipv4) tests, so rdr -> ::1 | Daniel Hartmeier | |
works without additional route-to lo0, just like for ipv4. ok itojun@, henning@ | |||
2003-10-14 | oops, i did not mean to commit this portion (IPSEC mod), sorry | Jun-ichiro itojun Hagino | |
2003-10-14 | IP6F_OFF_MASK is already endian-flipped; sync w/ kame | Jun-ichiro itojun Hagino | |
2003-06-30 | initialize srcrt properly (so that it won't go mad when NPF==0). cedric | Jun-ichiro itojun Hagino | |
2003-06-30 | do not generate icmp6 redirect if PF rewrote the destination address. | Jun-ichiro itojun Hagino | |
requeested by cedric | |||
2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-05-14 | KNF | Jun-ichiro itojun Hagino | |
2003-05-14 | make PULLDOWN_TEST codepath the default (has been default for a long time). | Jun-ichiro itojun Hagino | |
markus ok | |||
2003-05-14 | remove obsolete comments | Jun-ichiro itojun Hagino | |
2003-01-07 | remove the altq classifier code which is replaced by pf and no longer used. | Kenjiro Cho | |
ok henning@, deraadt@ | |||
2002-09-11 | fix pointer signedness mixup. sync w/kame | Jun-ichiro itojun Hagino | |
2002-09-11 | KNF - return is not a function. sync w/kame | Jun-ichiro itojun Hagino | |
2002-06-08 | sync with latest KAME in6_ifaddr/prefix/default router manipulation. | Jun-ichiro itojun Hagino | |
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up. | |||
2002-06-07 | just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB, | Jun-ichiro itojun Hagino | |
as well as set/getsockopt(IPV6_V6ONLY). | |||
2002-05-28 | limit number of IPv6 fragments (not the fragment queue size) to | Jun-ichiro itojun Hagino | |
fight against lots-of-frags DoS attacks. sync w/kame | |||
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-01-21 | remove couple of #if 0'ed portion we will never use | Jun-ichiro itojun Hagino | |
2002-01-02 | at least ; required after label or case; openbsd@davidkrause.com | Theo de Raadt | |
2001-12-16 | - Call pf_test6() after we have checked header length and protocol version. | jasoni | |
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@ | |||
2001-12-07 | whitespace/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
ok dhartmei@, frantzen@ | |||
2001-11-06 | Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary. | Miod Vallat | |
(Look ma, I might have broken the tree) | |||
2001-11-02 | do not return value that overruns mbuf length from ip6_nexthdr. | Jun-ichiro itojun Hagino | |
2001-09-15 | IPv6 support from Ryan McBride (mcbride@countersiege.com) | Mike Frantzen | |
2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
2001-06-09 | No need for net/net_osdep.h | Angelos D. Keromytis | |
2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell | |
2001-03-30 | enable FAKE_LOOPBACK_IF case by default. | Jun-ichiro itojun Hagino | |
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame. | |||
2001-03-16 | drop packets with link-local addresses, | Jun-ichiro itojun Hagino | |
if (internally-used) interface ID portion is already filled. sync with kame | |||
2001-02-16 | get rid of #ifdef IPV6FIREWALL (never used, will never be used) | Jun-ichiro itojun Hagino | |
2001-02-16 | pull in new pcb notification code from kame. better handling of scope address. | Jun-ichiro itojun Hagino | |
2001-02-16 | cosmetic/comment sync with kame | Jun-ichiro itojun Hagino | |