Age | Commit message (Collapse) | Author | |
---|---|---|---|
1996-10-08 | Prototype & Stylistic fixes for high -W gcc levels | Niklas Hallqvist | |
1996-09-30 | handle openbsd cases | Theo de Raadt | |
1996-09-25 | Drop unused variable | Niklas Hallqvist | |
1996-09-23 | fix tuba after synbomb fixes | Theo de Raadt | |
1996-09-20 | `solve' the syn bomb problem as well as currently known; add sysctl's for | Theo de Raadt | |
SOMAXCONN (kern.somaxconn), SOMINCONN (kern.sominconn), and TCPTV_KEEP_INIT (net.inet.tcp.keepinittime). when this is not enough (ie. overfull), start doing tail drop, but slightly prefer the same port. | |||
1996-09-12 | Close TCP receive window when we cannot receive data; suggested by Darren | Thorsten Lockert | |
Reed. Also make a conditional easier to read. | |||
1996-09-12 | TCP Persist handling; from 4.4BSD Lite2 (via NetBSD PR 2335) | Thorsten Lockert | |
1996-09-12 | Don't assume other subnets than our own are local to us; from Luigi Rizzo | Thorsten Lockert | |
by way of Jason Downs & Theo de Raadt. Can be overridden in the kernel configuration file by using "option SUBNETSARELOCAL=1" | |||
1996-09-02 | Don't drain the protocol queues at interrupt level. | dm | |
1996-08-24 | change to so_uid, also fix a missing credential found by dm | Theo de Raadt | |
1996-08-14 | restrict some raw ip packets that may crash ip_output(); from freebsd | Theo de Raadt | |
1996-08-14 | ipaddrs are int; like many other things found after spotting a similar ↵ | Theo de Raadt | |
netbsd commit... | |||
1996-08-07 | Partial protection from TCP SYN attacks | Thorsten Lockert | |
1996-08-05 | stupid typo, going to bed in penance | Theo de Raadt | |
1996-08-05 | only check for takeover permission if non-root | Theo de Raadt | |
1996-08-05 | struct socket gets so_ucred; permit only same uid or root to do port takeover. | Theo de Raadt | |
1996-08-02 | ICMP Router Discovery definitions; from FreeBSD | Thorsten Lockert | |
1996-08-02 | Allow viewing of net.inet.ip.sourceroute in secure mode | Thorsten Lockert | |
1996-07-29 | Remove random() prototype, as it's not needed. Besides it was wrong for the ↵ | Niklas Hallqvist | |
alpha :-) | |||
1996-07-29 | Fix stupid logic error in bind(). | Jason Downs | |
1996-07-29 | Make TCP ISS increment by random amounts | Thorsten Lockert | |
1996-07-29 | Make 600, instead of 512, the lower limit for reserved ports. | Jason Downs | |
1996-07-29 | Fix a small bug and change the logic of the bind() port choosing: | Jason Downs | |
Use a random starting point the first time through the loop. | |||
1996-07-29 | From FreeBSD (with slightly different sysctl names): | Jason Downs | |
"... Allow the user to nominate one of three ranges of port numbers as candidates for selecting a local address to replace a zero port number. The ranges are selected via a setsockopt(s, IPPROTO_IP, IP_PORTRANGE, &arg) call. The three ranges are: default, high (to bypass firewalls) and low (to get a port below 1024). The default and high port ranges are sysctl settable under sysctl net.inet.ip.portrange.* [net.inet.ip.portfirst, net.inet.ip.portlast, net.inet.ip.porthifirst, and net.inet.ip.porthilast currently in OpenBSD.] This code also fixes a potential deadlock if the system accidently ran out of local port addresses. It'd drop into an infinite while loop. The secure port selection (for root) should reduce overheads and increase reliability of rlogin/rlogind/rsh/rshd if they are modified to take advantage of it." | |||
1996-07-27 | pad for machines that do not pad structs out | Theo de Raadt | |
1996-07-25 | SS_CONNECTOUT indicates socket was connect()ed at this end, accept()ed at ↵ | Theo de Raadt | |
other end | |||
1996-07-18 | ipfilter 3.1.0 | dm | |
1996-07-05 | release temporary binding if M_PREPEND fails; netbsd pr#2605; ↵ | Theo de Raadt | |
tegge@idt.unit.no; improved by me | |||
1996-07-03 | ported to FreeBSD 2.2-960612-SNAP. | chuck | |
1996-07-03 | prototype ethers(3) functions (inside !_KERNEL), pointed out in | Theo de Raadt | |
netbsd pr#2471, jhawk@mit.edu | |||
1996-06-29 | change: | chuck | |
- change asock to rxhand and adjust all for this [esp atm_input] | |||
1996-06-26 | fixes/new stuff: | chuck | |
[1] if user tries to enter in a bogus PVC don't leave it in the routing table ... remove it [2] change ioctl arg to include rxso for lower layer [3] add hooks (inside "NATM" ifdef) for native mode atm sockets so that they don't clash with IP PVCs. [i am still debugging the native mode atm socket protosw code] | |||
1996-06-21 | use correct copyright | chuck | |
1996-06-21 | network support for ATM networks (ATM == Async Transfer Mode, not | chuck | |
Automatic Teller Machine). Currently supports PVCs only (no ATM ARP either). | |||
1996-06-06 | if_arp is obsolete, now named if_ether | Niklas Hallqvist | |
1996-05-22 | When sending an ARP request, use the interface address for the route, rather | Theo de Raadt | |
than the first address assigned. This gives slightly different behaviour in the presence of aliases. From Bill Fenner, via Pete Bentley. | |||
1996-05-15 | remove unnecessary "XXX it should be sysctl()'ed" | Michael Shalayeff | |
1996-05-15 | fix NetBSD PR#854. | Michael Shalayeff | |
allow to overwrite rfc1323 option in config file. | |||
1996-05-15 | let udpcksum control generation, but not cheking of udp cksums. | Michael Shalayeff | |
1996-05-14 | non-root bind() to 2049 gets EADDRINUSE | Theo de Raadt | |
1996-05-13 | fix return-rst | dm | |
1996-05-10 | ipfilter 3.0.4 | dm | |
1996-05-10 | if_name/if_unit -> if_xname/if_softc | Theo de Raadt | |
1996-05-09 | revert icmp len fix, since i experience 'icmp len' | Michael Shalayeff | |
panics replying to udp. | |||
1996-05-07 | from NetBSD PR#2296: | Michael Shalayeff | |
Laine Stump: some icmp destination unreachable packets contain garbage. | |||
1996-05-02 | udpcksum should never be off in the modern world | Theo de Raadt | |
1996-04-24 | Add IPXIP entry, to not to get cvs confused in the future. | Michael Shalayeff | |
1996-04-21 | partial sync with netbsd 960418, more to come | Theo de Raadt | |
1996-03-15 | Fix bogosity in import of Lite2 fix | Thorsten Lockert | |
1996-03-14 | From Lite2; improve handling of socket options on raw datagrams and multi- | Thorsten Lockert | |
cast routing commands |