summaryrefslogtreecommitdiff
path: root/sys/netinet6/nd6.c
AgeCommit message (Collapse)Author
2000-07-06- more icmp6/ip6 stats.Jun-ichiro itojun Hagino
- protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution).
2000-06-16take MIN/MAX from param.h, okay theo@Niels Provos
2000-05-19never forward packet with link-local address.Jun-ichiro itojun Hagino
experimental support for new loopback packet handling (with FAKE_LOOPBACK_IF, rcvif will be set to real outgoing interface, not the loopback, to honor scope) sync with kame.
2000-05-15perform NUD on p2p link, only if the destination/gateway is real neighbor.Jun-ichiro itojun Hagino
this removes temporary workaround (no NUD on p2p link). KAME PR 245.
2000-05-15use IFAFREE, not ifa_refcnt--.Jun-ichiro itojun Hagino
2000-04-27disable NUD for point-to-point devices. KAME PR 245 (temporary workaround)Jun-ichiro itojun Hagino
2000-04-19add boundary check for nd_ifinfo[]. (sync with kame)Jun-ichiro itojun Hagino
2000-04-17revisit in6_ifattach(). (1) make it more persistent about initializaing anJun-ichiro itojun Hagino
interface (2) cleanup interface id selection. run NUD on p2p interface (required by spec for bidir p2p interface). add "ndp -i interface" (can tweak per-interface ND flag). (sync with more recent kame)
2000-04-13add comment on sanity checkJun-ichiro itojun Hagino
2000-04-13bark if sdl_alen == 0. test code for KAME PR 235.Jun-ichiro itojun Hagino
2000-04-13even if nd6_nud_hint is called, do not change a neighbor's statusJun-ichiro itojun Hagino
unless the old status is probably reachable (i.e. the link-layer address has already been resolved). KAME PR 235.
2000-02-28bring in recent KAME changes (only important and stable ones, as usual).Jun-ichiro itojun Hagino
- remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case)
2000-02-07fix include file path related to ip6.Jun-ichiro itojun Hagino
2000-02-04more coverage of in6_ifdetach()'s cleanup process.Jun-ichiro itojun Hagino
bug fix in SIOCGIFADDR_IN6 (point to point case).
2000-01-08Missing rndvar.hAngelos D. Keromytis
1999-12-10a critical fix from kame: add missing splx().Jun-ichiro itojun Hagino
1999-12-10Remove remaining unnecessary ifdefs (itojun will hate me for this :-)Angelos D. Keromytis
1999-12-08bring in KAME IPv6 code, dated 19991208.Jun-ichiro itojun Hagino
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).