Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-05-28 | limit number of IPv6 fragments (not the fragment queue size) to | Jun-ichiro itojun Hagino | |
fight against lots-of-frags DoS attacks. sync w/kame | |||
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-01-21 | remove couple of #if 0'ed portion we will never use | Jun-ichiro itojun Hagino | |
2002-01-02 | at least ; required after label or case; openbsd@davidkrause.com | Theo de Raadt | |
2001-12-16 | - Call pf_test6() after we have checked header length and protocol version. | jasoni | |
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@ | |||
2001-12-07 | whitespace/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
ok dhartmei@, frantzen@ | |||
2001-11-06 | Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary. | Miod Vallat | |
(Look ma, I might have broken the tree) | |||
2001-11-02 | do not return value that overruns mbuf length from ip6_nexthdr. | Jun-ichiro itojun Hagino | |
2001-09-15 | IPv6 support from Ryan McBride (mcbride@countersiege.com) | Mike Frantzen | |
2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
2001-06-09 | No need for net/net_osdep.h | Angelos D. Keromytis | |
2001-05-11 | Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ ok | Aaron Campbell | |
2001-03-30 | enable FAKE_LOOPBACK_IF case by default. | Jun-ichiro itojun Hagino | |
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame. | |||
2001-03-16 | drop packets with link-local addresses, | Jun-ichiro itojun Hagino | |
if (internally-used) interface ID portion is already filled. sync with kame | |||
2001-02-16 | get rid of #ifdef IPV6FIREWALL (never used, will never be used) | Jun-ichiro itojun Hagino | |
2001-02-16 | pull in new pcb notification code from kame. better handling of scope address. | Jun-ichiro itojun Hagino | |
2001-02-16 | cosmetic/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-02-16 | sync whitespace/comment with kame. to help merge tasks | Jun-ichiro itojun Hagino | |
2001-02-16 | kill register declarations. to sync with kame better. | Jun-ichiro itojun Hagino | |
2001-02-08 | use timeout_xx() throughout sys/netinet6. sync with kame. | Jun-ichiro itojun Hagino | |
2001-02-07 | by default, don't bark on inbound ND messages, as outsider may be able to | Jun-ichiro itojun Hagino | |
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats. | |||
2001-02-06 | allow changing number of loopbacks in ukc. | Michael Shalayeff | |
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok | |||
2000-08-31 | add missing \n to log(). sync with kame. | Jun-ichiro itojun Hagino | |
2000-07-06 | - more icmp6/ip6 stats. | Jun-ichiro itojun Hagino | |
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution). | |||
2000-07-02 | drop packet to tentative/duplicated interface address earlier. sync w/kame | Jun-ichiro itojun Hagino | |
2000-06-18 | try to avoid useless m_pullup2 | Jun-ichiro itojun Hagino | |
2000-06-18 | move m_pullup2() equivalent for KAME requirement into ip6_input(). | Jun-ichiro itojun Hagino | |
it was in looutput() to make KAME ipsec4 happy. however, since we don't have KAME ipsec4 in openbsd, we don't need it in looutput(). | |||
2000-06-18 | less mbuf alignment change in extension header processing. | Jun-ichiro itojun Hagino | |
(so that we can be more PULLDONW_TEST friendly) | |||
2000-06-13 | do not use cached route if it goes !RTF_UP. | Jun-ichiro itojun Hagino | |
make validation of jumbo payload more strict. | |||
2000-05-25 | net.inet.ip.gif_ttl (and IPv6 counterpart) is never used. | Jun-ichiro itojun Hagino | |
enforce type checking on IN6_ARE_ADDR_EQUAL. | |||
2000-05-19 | correct "telnet fe80::1%lo0". | Jun-ichiro itojun Hagino | |
2000-04-17 | revisit in6_ifattach(). (1) make it more persistent about initializaing an | Jun-ichiro itojun Hagino | |
interface (2) cleanup interface id selection. run NUD on p2p interface (required by spec for bidir p2p interface). add "ndp -i interface" (can tweak per-interface ND flag). (sync with more recent kame) | |||
2000-03-22 | aintroduce ip6_{next,last}hdr which lets us parse IPv6 header chain correctly. | Jun-ichiro itojun Hagino | |
use it from icmp6 code. | |||
2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino | |
2000-01-08 | use arc4random() instead of random for two reasons. | Theo de Raadt | |
1) on some architectures, random() should only be used by the scheduler (ie. statintr() because it is uniformly distributed 2) arc4random() is actually strong, random() is not at all | |||
2000-01-06 | add missing net.inet6.ip6.rr_prune case. | Jun-ichiro itojun Hagino | |
1999-12-30 | initialize lo0 automatically. kame ipv6 code assumes that there's ::1, | Jun-ichiro itojun Hagino | |
for various reasons ("goto ours" speedup, multicast group mgmt, and others). should fix PR1012. | |||
1999-12-09 | do not perform IPv6 initialization for loopback interface. | Jun-ichiro itojun Hagino | |
MUST make lo0 up before any IPv6 operations. it will be considered a pilot error if you don't. (I prefer to have lo0 initialized automatically) | |||
1999-12-09 | Bogus include file crept in. | Angelos D. Keromytis | |
1999-12-09 | Shrink... | Angelos D. Keromytis | |
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino | |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). |