Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-06-27 | Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, depending | Angelos D. Keromytis | |
on how macros should be treated. Code by fgsch@, ok by me and itojun@ | |||
2001-06-27 | Don't check cached TDBs on the PCB -- always call ipsp_spd_lookup(); | Angelos D. Keromytis | |
this simplifies the logic a bit. | |||
2001-06-25 | If a PENDING_TDB tag is attached but no TDB is found, drop the packet. | Angelos D. Keromytis | |
2001-06-25 | PENDING_TDB tag handling (same as ip_output) | Angelos D. Keromytis | |
2001-06-25 | Don't double-clear M_PKTHDR/tags. | Angelos D. Keromytis | |
2001-06-09 | No need for net/net_osdep.h | Angelos D. Keromytis | |
2001-05-30 | Update for new prototypes. | Angelos D. Keromytis | |
2001-05-28 | Remove unused code. | Angelos D. Keromytis | |
2001-05-28 | Don't check for IPV6_ENCAPSULATED, no longer needed since we have the tags. | Angelos D. Keromytis | |
2001-05-28 | Missed a DPRINTF(). | Angelos D. Keromytis | |
2001-05-28 | Use packet tags to detect loops, same as ip_output() | Angelos D. Keromytis | |
2001-05-26 | Use m_tag_init() to initialize new mbuf m_pkthdr fields, rather than | Angelos D. Keromytis | |
having to change it every time. | |||
2001-05-20 | Convert from tdbi to packet tags. | Angelos D. Keromytis | |
2001-05-16 | No need to check M_WAIT/M_WAITOK malloc return values. (art@ ok) | Hakan Olsson | |
2001-04-14 | Minor changes, preparing for real socket-attached TDBs; also, more | Angelos D. Keromytis | |
information will be stored in the TDB. ok ho@ provos@ | |||
2001-04-11 | disallow userland programs from specifying addresses with IPV6_PKTINFO | Jun-ichiro itojun Hagino | |
setsockopt, if: - the address is not verified by DAD (= not ready) - the address is an anycast address (= not permitted as source) sync with kame | |||
2001-03-30 | enable FAKE_LOOPBACK_IF case by default. | Jun-ichiro itojun Hagino | |
now traffic on loopback interface will be presented to bpf as normal wire format packet (without KAME scopeid in s6_addr16[1]). fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0). sync with kame. | |||
2001-03-28 | Allow tdbi's to appear in mbufs throughout the stack; this allows | Angelos D. Keromytis | |
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs. | |||
2001-03-25 | re-initialize mopt in ip6_insert_jumboopt(). sync with kame | Jun-ichiro itojun Hagino | |
From: csapuntz@stanford.edu | |||
2001-03-21 | set rmx_mtu to L2 interface mtu, instead of 0, on mtudisc timeout. | Jun-ichiro itojun Hagino | |
ip6_output() change is for safety. sync with kame | |||
2001-03-13 | add/clearify spl for ipsec6. sync with kame. reviewed by angelos. | Jun-ichiro itojun Hagino | |
2001-02-16 | get rid of #ifdef IPV6FIREWALL (never used, will never be used) | Jun-ichiro itojun Hagino | |
2001-02-16 | cosmetic/comment sync with kame | Jun-ichiro itojun Hagino | |
2001-02-16 | sync whitespace/comment with kame. to help merge tasks | Jun-ichiro itojun Hagino | |
2001-02-16 | kill register declarations. to sync with kame better. | Jun-ichiro itojun Hagino | |
2001-02-08 | witch raw ip6 socket code from NRL to kame. | Jun-ichiro itojun Hagino | |
makes upgrades/code sharing much easier. | |||
2001-02-06 | bad semicolon after "if" conditional. | Jun-ichiro itojun Hagino | |
2001-02-06 | allow changing number of loopbacks in ukc. | Michael Shalayeff | |
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok | |||
2001-02-02 | avoid panic when packet to nonexistent link-local address is issued. | Jun-ichiro itojun Hagino | |
kame 1.151 -> 1.152. | |||
2000-10-11 | nuke inp_flags bits for controlling IPv4 mapped address. | Jun-ichiro itojun Hagino | |
we don't support IPv4 mapped address, and there are inconsistent bit manipulation code so it's safer to nuke them. | |||
2000-09-19 | Added files, and IPv6-IPsec update. | Angelos D. Keromytis | |
2000-09-16 | repair IPv6 multicasting. INP_IPV6_MCAST is necessary. | Jun-ichiro itojun Hagino | |
(i will try to remove this flag bit later) | |||
2000-08-19 | - upgrade icmp6 node information query support to 06 draft. | Jun-ichiro itojun Hagino | |
- pedant: possible alignment issue in ALIGN > 8 arch (should be okay for now) (sync with kame) | |||
2000-06-20 | confirmed interop of IPv6 AH with KAME (both global and scoped addr). | Jun-ichiro itojun Hagino | |
remove restriction on scoped IPv6 address. TODO: confirm it with other IPv6 AH implementation. since we use very similar logic between KAME IPv6 AH and OpenBSD IPv6 AH, it is possible that both side is making the same mistake or whatever | |||
2000-06-20 | initialize hoplimit field properly on ipsec6 case | Jun-ichiro itojun Hagino | |
2000-06-19 | IPv6 IPsec, outbound direction. | Jun-ichiro itojun Hagino | |
restriction: if there's any extension header (except fragment) and outbound packet matches tdb, we can't encrypt it. packet will not go out of the node (dropped). | |||
2000-06-18 | allow IPsec-related get/setsockopt on IPv6 socket. due to number conflict | Jun-ichiro itojun Hagino | |
they must be IPV6_xx instead of IP_xx. actually, since in_ctloutput() does not check address family of inpcb, getsockopt(IPPROTO_IP, IP_xx) may work - never tested this. | |||
2000-06-18 | correct indentation for IPV6_PORTRANGE | Jun-ichiro itojun Hagino | |
2000-06-03 | deep-copy ip6 header on ip6_mloopback, to avoid overwriting cluster mbuf. | Jun-ichiro itojun Hagino | |
correct frag header append operation. some cosmetic (like do {} while (0) to multiline macro) (sync with kame) | |||
2000-05-19 | correct "telnet fe80::1%lo0". | Jun-ichiro itojun Hagino | |
2000-05-19 | never forward packet with link-local address. | Jun-ichiro itojun Hagino | |
experimental support for new loopback packet handling (with FAKE_LOOPBACK_IF, rcvif will be set to real outgoing interface, not the loopback, to honor scope) sync with kame. | |||
2000-05-19 | NULL != 0. from netbsd-current. | Jun-ichiro itojun Hagino | |
2000-02-07 | fix include file path related to ip6. | Jun-ichiro itojun Hagino | |
1999-12-20 | add missing IPV6_PORTRANGE case. | Jun-ichiro itojun Hagino | |
1999-12-10 | Remove remaining unnecessary ifdefs (itojun will hate me for this :-) | Angelos D. Keromytis | |
1999-12-08 | bring in KAME IPv6 code, dated 19991208. | Jun-ichiro itojun Hagino | |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). |