summaryrefslogtreecommitdiff
path: root/sys/netinet6/ip6_output.c
AgeCommit message (Collapse)Author
2001-06-27Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, dependingAngelos D. Keromytis
on how macros should be treated. Code by fgsch@, ok by me and itojun@
2001-06-27Don't check cached TDBs on the PCB -- always call ipsp_spd_lookup();Angelos D. Keromytis
this simplifies the logic a bit.
2001-06-25If a PENDING_TDB tag is attached but no TDB is found, drop the packet.Angelos D. Keromytis
2001-06-25PENDING_TDB tag handling (same as ip_output)Angelos D. Keromytis
2001-06-25Don't double-clear M_PKTHDR/tags.Angelos D. Keromytis
2001-06-09No need for net/net_osdep.hAngelos D. Keromytis
2001-05-30Update for new prototypes.Angelos D. Keromytis
2001-05-28Remove unused code.Angelos D. Keromytis
2001-05-28Don't check for IPV6_ENCAPSULATED, no longer needed since we have the tags.Angelos D. Keromytis
2001-05-28Missed a DPRINTF().Angelos D. Keromytis
2001-05-28Use packet tags to detect loops, same as ip_output()Angelos D. Keromytis
2001-05-26Use m_tag_init() to initialize new mbuf m_pkthdr fields, rather thanAngelos D. Keromytis
having to change it every time.
2001-05-20Convert from tdbi to packet tags.Angelos D. Keromytis
2001-05-16No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok)Hakan Olsson
2001-04-14Minor changes, preparing for real socket-attached TDBs; also, moreAngelos D. Keromytis
information will be stored in the TDB. ok ho@ provos@
2001-04-11disallow userland programs from specifying addresses with IPV6_PKTINFOJun-ichiro itojun Hagino
setsockopt, if: - the address is not verified by DAD (= not ready) - the address is an anycast address (= not permitted as source) sync with kame
2001-03-30enable FAKE_LOOPBACK_IF case by default.Jun-ichiro itojun Hagino
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame.
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs.
2001-03-25re-initialize mopt in ip6_insert_jumboopt(). sync with kameJun-ichiro itojun Hagino
From: csapuntz@stanford.edu
2001-03-21set rmx_mtu to L2 interface mtu, instead of 0, on mtudisc timeout.Jun-ichiro itojun Hagino
ip6_output() change is for safety. sync with kame
2001-03-13add/clearify spl for ipsec6. sync with kame. reviewed by angelos.Jun-ichiro itojun Hagino
2001-02-16get rid of #ifdef IPV6FIREWALL (never used, will never be used)Jun-ichiro itojun Hagino
2001-02-16cosmetic/comment sync with kameJun-ichiro itojun Hagino
2001-02-16sync whitespace/comment with kame. to help merge tasksJun-ichiro itojun Hagino
2001-02-16kill register declarations. to sync with kame better.Jun-ichiro itojun Hagino
2001-02-08witch raw ip6 socket code from NRL to kame.Jun-ichiro itojun Hagino
makes upgrades/code sharing much easier.
2001-02-06bad semicolon after "if" conditional.Jun-ichiro itojun Hagino
2001-02-06allow changing number of loopbacks in ukc.Michael Shalayeff
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok
2001-02-02avoid panic when packet to nonexistent link-local address is issued.Jun-ichiro itojun Hagino
kame 1.151 -> 1.152.
2000-10-11nuke inp_flags bits for controlling IPv4 mapped address.Jun-ichiro itojun Hagino
we don't support IPv4 mapped address, and there are inconsistent bit manipulation code so it's safer to nuke them.
2000-09-19Added files, and IPv6-IPsec update.Angelos D. Keromytis
2000-09-16repair IPv6 multicasting. INP_IPV6_MCAST is necessary.Jun-ichiro itojun Hagino
(i will try to remove this flag bit later)
2000-08-19- upgrade icmp6 node information query support to 06 draft.Jun-ichiro itojun Hagino
- pedant: possible alignment issue in ALIGN > 8 arch (should be okay for now) (sync with kame)
2000-06-20confirmed interop of IPv6 AH with KAME (both global and scoped addr).Jun-ichiro itojun Hagino
remove restriction on scoped IPv6 address. TODO: confirm it with other IPv6 AH implementation. since we use very similar logic between KAME IPv6 AH and OpenBSD IPv6 AH, it is possible that both side is making the same mistake or whatever
2000-06-20initialize hoplimit field properly on ipsec6 caseJun-ichiro itojun Hagino
2000-06-19IPv6 IPsec, outbound direction.Jun-ichiro itojun Hagino
restriction: if there's any extension header (except fragment) and outbound packet matches tdb, we can't encrypt it. packet will not go out of the node (dropped).
2000-06-18allow IPsec-related get/setsockopt on IPv6 socket. due to number conflictJun-ichiro itojun Hagino
they must be IPV6_xx instead of IP_xx. actually, since in_ctloutput() does not check address family of inpcb, getsockopt(IPPROTO_IP, IP_xx) may work - never tested this.
2000-06-18correct indentation for IPV6_PORTRANGEJun-ichiro itojun Hagino
2000-06-03deep-copy ip6 header on ip6_mloopback, to avoid overwriting cluster mbuf.Jun-ichiro itojun Hagino
correct frag header append operation. some cosmetic (like do {} while (0) to multiline macro) (sync with kame)
2000-05-19correct "telnet fe80::1%lo0".Jun-ichiro itojun Hagino
2000-05-19never forward packet with link-local address.Jun-ichiro itojun Hagino
experimental support for new loopback packet handling (with FAKE_LOOPBACK_IF, rcvif will be set to real outgoing interface, not the loopback, to honor scope) sync with kame.
2000-05-19NULL != 0. from netbsd-current.Jun-ichiro itojun Hagino
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
1999-12-20add missing IPV6_PORTRANGE case.Jun-ichiro itojun Hagino
1999-12-10Remove remaining unnecessary ifdefs (itojun will hate me for this :-)Angelos D. Keromytis
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).