summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2004-07-09typo. Bruno RoheeJun-ichiro itojun Hagino
2004-07-06backout rev 1.3, it breaks simultaneous close (no FIN set for retransmits)Markus Friedl
ok deraadt, henning, itojun
2004-06-26use IF_INPUT_ENQUEUEPhilipp Buehler
ok henning@, mcbride@
2004-06-26only add ipcomp headers if we've actually compressed the payload; with jfb@Markus Friedl
ok hshoexer, jfb
2004-06-26Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok.Hakan Olsson
2004-06-25disallow udpencap_port in bind(0); ok ho@Markus Friedl
2004-06-24This moves access to wall and uptime variables in MI code,Thorsten Lockert
encapsulating all such access into wall-defined functions that makes sure locking is done as needed. It also cleans up some uses of wall time vs. uptime some places, but there is sure to be more of these needed as well, particularily in MD code. Also, many current calls to microtime() should probably be changed to getmicrotime(), or to the {,get}microuptime() versions. ok art@ deraadt@ aaron@ matthieu@ beck@ sturm@ millert@ others "Oh, that is not your problem!" from miod@
2004-06-22Add M_LINK0 for net80211; OK markus@ and mcbride@Todd C. Miller
2004-06-22Pull the plug on source-based routing until remaining bugs are eradicated.Cedric Berger
No need to reconfig kernel or rebuild userland stuff. requested deraadt@, help beck@
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
things such that code that only need a second-resolution uptime or wall time, and used to get that from time.tv_secs or mono_time.tv_secs now get this from separate time_t globals time_second and time_uptime. ok art@ niklas@ nordin@
2004-06-21When in_ifinit fails and we've created a new address, clean it up beforeRyan Thomas McBride
returning. ok markus@
2004-06-21don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@Markus Friedl
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
sin6_scope_id, IPsec porion uses embedded form). beck ok
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-21don't leak ipsec pmtu routes; with mpf@Markus Friedl
2004-06-20remove #ifdef TUBAJun-ichiro itojun Hagino
2004-06-16make safe for inclusion in C++ code; ok millert@, deraadt@Christian Weisgerber
2004-06-14Calculate optp (pointer to beginning of TCP options) based on th, notDaniel Hartmeier
mtod(m), since the previous IP6_EXTHDR_GET() only guarantees this part to be continuous. Report from Andreas Bartelt. ok markus@, itojun@
2004-06-14spellingRyan Thomas McBride
2004-06-12support IPV6_USE_MIN_MTU (forgot to commit the file, sorry). noted by AnilJun-ichiro itojun Hagino
2004-06-10zero the cif struct correctly.Ryan Thomas McBride
2004-06-10Plug a memory leak in carp_clone_destroy()Ryan Thomas McBride
From Patrick Latifi
2004-06-08factor out md5 code; ok+tests henning@, djm@, hshoexer@Markus Friedl
2004-06-06extend routing table to be able to match and route packets based onCedric Berger
their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@
2004-06-05set m_pkthdr.len early; ok mcbride, deraadtMarkus Friedl
2004-05-31initialize struct carp_if and let vhif_nvrs counter work. ok mcbride@Marco Pfatschbacher
2004-05-31work around an LP64 problem where we report an excessively large windowBrad Smith
due to incorrect mixing of types. From NetBSD ok cedric@ markus@
2004-05-31simplify; ok henning, itojunMarkus Friedl
2004-05-31clean some copy&paste leftovers from KAME code.Marco Pfatschbacher
ok markus, itojun.
2004-05-30compile without INET6; ok mcbridePeter Valchev
2004-05-29Remove multicast addresses and promiscuous mode when destroying theRyan Thomas McBride
carp interface.
2004-05-29carp_ioctl() happens after ifioctl(); check flags correctly so thatRyan Thomas McBride
'ifconfig carp0 down' and 'ifconfig carp0 up' work as expected.
2004-05-27the tcp header might be in a different mbuf after pulldown();Markus Friedl
fixes tcp corruption on rl(4); ok itojun, cedric
2004-05-26use sa_family not inp; netbsd merge error; ok dhartmeiMarkus Friedl
2004-05-25let sc_counter wrap automatically, ok mcbride@Jolan Luff
2004-05-24Check for sc->sc_ifp != NULL in carp_setroute(). Running dhclient on theRyan Thomas McBride
carp interface won't work, but it doesn't mean we should panic the box!
2004-05-23missing splx; andrushock@korovino.netTheo de Raadt
2004-05-21use 'mss' as lower limit, since 'ifp' might not be set; ok dhartmei@, henning@Markus Friedl
report and test by mpf@
2004-05-18if_ether.hBrad Smith
add ETHER_MAX_LEN_JUMBO, ETHER_VLAN_ENCAP_LEN, ETHER_ALIGN, and ETHERMTU_JUMBO constants. if.h add a few more interface capabilities flags. Some from NetBSD, some from FreeBSD. ok markus@
2004-05-18fix size argument to ovbcopy() in ip_pcbopts(), found by Andrei IltchenkoDaniel Hartmeier
(FreeBSD PR 66386), ok markus@, otto@
2004-05-16When we back off due to problems with the physical interface, advertiseRyan Thomas McBride
the backoff immediately on all of the interfaces instead of waiting for the next scheduled advertisement.
2004-05-16Remove useless test pointed out by Frank Denis <j@pureftpd.org>.Ryan Thomas McBride
2004-05-13Act like our advskew is 240 when receiving packets as well as sending ifRyan Thomas McBride
we're backing off. Makes the backoff actually work like it's supposed to instead of flip-flopping. Problem pointed out by ho@ and jakob@
2004-05-13Add cloned interface destruction to carp (ifconfig carp0 destroy).Ryan Thomas McBride
ok deraadt@
2004-05-13KNFRyan Thomas McBride
2004-05-10Make sure advskew set correctly in advertisement when configured to a valueRyan Thomas McBride
greater than 240. From Frank Denis <j@pureftpd.org>, PR3774.
2004-05-08If a carp interface has more than CARP_SENDAD_MAX_ERRORS failedRyan Thomas McBride
advertisements in a row, back off all the other interfaces, until CARP_SENDAD_MIN_SUCCESS advertisements are successful. This makes carp deal better with ip output errors.
2004-05-07Replace RSA-derived md5 code with code derived from Colin Plumb's PD version.Todd C. Miller
This moves md5.c out of libkern and into sys/crypto where it belongs (as requested by markus@). Note that md5.c is still mandatory (dev/rnd.c uses it). Verified with IPsec + hmac-md5 and tcp md5sig. OK henning@ and hshoexer@
2004-05-05Remove unused #define.Ryan Thomas McBride
2004-05-04The tcp specific routing metrics are almost never used so reduce the routingClaudio Jeker
table from these metrics. struct rt_msghdr used by the routing socket is not affected and so most userland apps don't need to be changed. some man page polishing by jmc@ OK henning@ markus@ theo@