summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2001-10-03If the TDB doesn't have an attached src/dst ID, it can be used for anyAngelos D. Keromytis
type of traffic.
2001-09-26bring back the old copyright noticeTheo de Raadt
2001-09-24Reset the error return value if the cached TDB matches theAngelos D. Keromytis
policy. Pointed out by jdmcbride@iol.ie
2001-09-18Avoid memory leak when disabling PMTU, rt_timer_queue_destroy() expects theAaron Campbell
caller to free the structure.
2001-09-05use %ll instead of %qTheo de Raadt
2001-09-04Make it compile without option BPF.Angelos D. Keromytis
2001-08-26Uninitialized variable.Niklas Hallqvist
2001-08-22IPCOMP policy stuff missed the last time roundNiklas Hallqvist
2001-08-21Don't check for BYPASS options in PCB on ip_output/ip6_output --- thisAngelos D. Keromytis
is already done in ip_spd_lookup()
2001-08-21When the outgoing socket has BYPASS set, don't bother calling theAngelos D. Keromytis
PCB-checking routine.
2001-08-19More old timeouts removal, mainly affected unused/unmaintained code.Miod Vallat
2001-08-19Pass the interface (if any) to ipip_input(), so it can be used inAngelos D. Keromytis
BPF. Closes PR 2000.
2001-08-15bcmp done wrong, detected at bakeoff. Hint: always useNiklas Hallqvist
relational operators when using *cmp APIs in conditional expressions.
2001-08-09Don't check the source address on the packet vs. the one on the SA, asAngelos D. Keromytis
this prevents use of ESP in mobility; pointed out on the IETF mailing list by Francis Dupont.
2001-08-08Remove IPCOMP option, it's now part of IPSEC option. You still need toJean-Jacques Bernard-Gundol
enable ipcomp via sysctl to use it. deraadt@ ok.
2001-08-07enable ah & esp by default, now that we trust the code moreTheo de Raadt
2001-08-06Don't drop packets if we're using an ACQUIRE policy and some errorAngelos D. Keromytis
occurs while notifying key mgmt; also, always check for new TDBs for policies where the destination gateway is left unspecified (end-to-end IPsec case), to avoid asking for new SAs from key mgmt.
2001-07-27variable name "gif" is way too generic - use "gif_softc". sync with kameJun-ichiro itojun Hagino
2001-07-27do not check in_dstaddr in rtinitflags() macro, otherwiseJun-ichiro itojun Hagino
linklocal address manipulation codepath will choke. sync with kame
2001-07-23improve IFA_ROUTE handling. do not lose connected route on primaryJun-ichiro itojun Hagino
interface address removals.
2001-07-21repair IPv6 TCP. th_sum has to be initialized to 0 on template.Jun-ichiro itojun Hagino
(older code had "th_sum = 0" at the bottom of the function, which was removed during TCP hardware checksumming change)
2001-07-18zero tcp checksum field before calculating new value.Marco S Hyman
Fixes problem with bad checksums on keepalives OK provos@
2001-07-17split ip normalization out into a separate file, okay dhartmei@Niels Provos
2001-07-17Use 64 bits integer for ipcomps_ibytes and ipcomps_obytes. 32 bits wasJean-Jacques Bernard-Gundol
used and it gave strange results with netstat -s. Reported by art@
2001-07-16Move altq after pf; suggested by aaron@, kjc@ ok.Federico G. Schwindt
2001-07-08Remove static from func declsNiklas Hallqvist
2001-07-07fix comment to make life easier for my special friend darren.Niels Provos
2001-07-06Don't use enc0 interface for IPComp. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IP6_EXTHDR_GET0 did not check m->m_len (noone was using this macro).Jun-ichiro itojun Hagino
sync with kame
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IPComp. Just like for deflate earlier, it won't be compiled until everythingJean-Jacques Bernard-Gundol
is in the tree
2001-07-05StyleAngelos D. Keromytis
2001-07-05Typo.Angelos D. Keromytis
2001-07-05StyleAngelos D. Keromytis
2001-07-05IPComp itself (include files). angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-04Make preprocessor happier, don't give it untasty tokens at end of input.Marc Espie
Ok millert@
2001-07-04handle m->m_pkthdr.rcvif == NULL; temporarily ok deraadt@; pending itojun@Daniel Hartmeier
2001-07-04Explicitly list the new ICMP codes.Angelos D. Keromytis
2001-07-04Update with codes, URL, RFCs, from jason@Ackley.NET, closes PR 1919Angelos D. Keromytis
2001-07-03Pointer arithmetic fixes work better when you get the casting right.Angelos D. Keromytis
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not ↵Daniel Hartmeier
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@
2001-06-29move pf_test check to happen after checksum calculation - withoutBob Beck
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@)
2001-06-29saner checking in icmp_error; from NetBSD with work by dug and me.Niels Provos
2001-06-28first stab at packet normalization. includes full ip reassembly.Niels Provos
okay dhartmei@, dugsong@
2001-06-27introduce the ALTQ queue macros into sys/net files.Kenjiro Cho
the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface.
2001-06-27Use TAILQ_FOREACH() instead of hand-crafted for loops.Angelos D. Keromytis
2001-06-27When determining whether there's a pending acquire wrt a policy, lookAngelos D. Keromytis
at the acquires associated with the policy only.
2001-06-27Attach IPsec acquire state to policy entries, and relevant cleanups.Angelos D. Keromytis
2001-06-27Also link acquire state to the relevant IPsec policy.Angelos D. Keromytis