summaryrefslogtreecommitdiff
path: root/sys/netinet6/ip6_input.c
AgeCommit message (Collapse)Author
2002-05-28limit number of IPv6 fragments (not the fragment queue size) toJun-ichiro itojun Hagino
fight against lots-of-frags DoS attacks. sync w/kame
2002-03-14First round of __P removal in sysTodd C. Miller
2002-01-21remove couple of #if 0'ed portion we will never useJun-ichiro itojun Hagino
2002-01-02at least ; required after label or case; openbsd@davidkrause.comTheo de Raadt
2001-12-16- Call pf_test6() after we have checked header length and protocol version.jasoni
- If pf_test6 returns a NULL mbuf, just return. - Reinitialize pointer to header after pf_test6(). ok frantzen@
2001-12-07whitespace/comment sync with kameJun-ichiro itojun Hagino
2001-11-26add fastroute options similar to what is found in ipfjasoni
ok dhartmei@, frantzen@
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
(Look ma, I might have broken the tree)
2001-11-02do not return value that overruns mbuf length from ip6_nexthdr.Jun-ichiro itojun Hagino
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface.
2001-06-09No need for net/net_osdep.hAngelos D. Keromytis
2001-05-11Check m_pullup() and m_pullup2() return for NULL, not 0; itojun@ okAaron Campbell
2001-03-30enable FAKE_LOOPBACK_IF case by default.Jun-ichiro itojun Hagino
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame.
2001-03-16drop packets with link-local addresses,Jun-ichiro itojun Hagino
if (internally-used) interface ID portion is already filled. sync with kame
2001-02-16get rid of #ifdef IPV6FIREWALL (never used, will never be used)Jun-ichiro itojun Hagino
2001-02-16pull in new pcb notification code from kame. better handling of scope address.Jun-ichiro itojun Hagino
2001-02-16cosmetic/comment sync with kameJun-ichiro itojun Hagino
2001-02-16sync whitespace/comment with kame. to help merge tasksJun-ichiro itojun Hagino
2001-02-16kill register declarations. to sync with kame better.Jun-ichiro itojun Hagino
2001-02-08use timeout_xx() throughout sys/netinet6. sync with kame.Jun-ichiro itojun Hagino
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-02-06allow changing number of loopbacks in ukc.Michael Shalayeff
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok
2000-08-31add missing \n to log(). sync with kame.Jun-ichiro itojun Hagino
2000-07-06- more icmp6/ip6 stats.Jun-ichiro itojun Hagino
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution).
2000-07-02drop packet to tentative/duplicated interface address earlier. sync w/kameJun-ichiro itojun Hagino
2000-06-18try to avoid useless m_pullup2Jun-ichiro itojun Hagino
2000-06-18move m_pullup2() equivalent for KAME requirement into ip6_input().Jun-ichiro itojun Hagino
it was in looutput() to make KAME ipsec4 happy. however, since we don't have KAME ipsec4 in openbsd, we don't need it in looutput().
2000-06-18less mbuf alignment change in extension header processing.Jun-ichiro itojun Hagino
(so that we can be more PULLDONW_TEST friendly)
2000-06-13do not use cached route if it goes !RTF_UP.Jun-ichiro itojun Hagino
make validation of jumbo payload more strict.
2000-05-25net.inet.ip.gif_ttl (and IPv6 counterpart) is never used.Jun-ichiro itojun Hagino
enforce type checking on IN6_ARE_ADDR_EQUAL.
2000-05-19correct "telnet fe80::1%lo0".Jun-ichiro itojun Hagino
2000-04-17revisit in6_ifattach(). (1) make it more persistent about initializaing anJun-ichiro itojun Hagino
interface (2) cleanup interface id selection. run NUD on p2p interface (required by spec for bidir p2p interface). add "ndp -i interface" (can tweak per-interface ND flag). (sync with more recent kame)
2000-03-22aintroduce ip6_{next,last}hdr which lets us parse IPv6 header chain correctly.Jun-ichiro itojun Hagino
use it from icmp6 code.
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-01-08use arc4random() instead of random for two reasons.Theo de Raadt
1) on some architectures, random() should only be used by the scheduler (ie. statintr() because it is uniformly distributed 2) arc4random() is actually strong, random() is not at all
2000-01-06add missing net.inet6.ip6.rr_prune case.Jun-ichiro itojun Hagino
1999-12-30initialize lo0 automatically. kame ipv6 code assumes that there's ::1,Jun-ichiro itojun Hagino
for various reasons ("goto ours" speedup, multicast group mgmt, and others). should fix PR1012.
1999-12-09do not perform IPv6 initialization for loopback interface.Jun-ichiro itojun Hagino
MUST make lo0 up before any IPv6 operations. it will be considered a pilot error if you don't. (I prefer to have lo0 initialized automatically)
1999-12-09Bogus include file crept in.Angelos D. Keromytis
1999-12-09Shrink...Angelos D. Keromytis
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).