summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2002-06-18Fix reference to free'ed location (unreachable condition because ofAngelos D. Keromytis
spl protection, but better safe...) --- pointed out by sam@errno.com
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-13Remove whitespace from the end of the file.Angelos D. Keromytis
2002-06-11splassert where comments tell us to.Artur Grabowski
2002-06-10Split common code which converts a multicast address to an ethernetChris Cappuccio
address from ether_addmulti() and ether_delmulti() into ether_multiaddr(), a'la netbsd. Also clean up some magic numbers. itojun likes it
2002-06-10correct tcpdump on gif interface (inbound). reported by friesJun-ichiro itojun Hagino
2002-06-10prevent mbuf leak on icmp_do_error() failure.Jun-ichiro itojun Hagino
NOTE: under 4.4BSD mbuf coding discipline, once you pass mbuf to a function like f(m), you no longer have ownership of the mbuf. the mbuf will always be freed by the called function f(). by keeping the programming rule you have less chance of memory leak.
2002-06-09whitespaceJun-ichiro itojun Hagino
2002-06-09support published arp entries again. PR 2635 (confirmed by submitter).Jun-ichiro itojun Hagino
2002-06-09typoJun-ichiro itojun Hagino
2002-06-09force FDDI link MTU be FDDI IPv4 MTU. PR 2714. jason okJun-ichiro itojun Hagino
2002-06-09Comment out currently-unused code (it's there for the ethernet-ipsecAngelos D. Keromytis
cards, none of which we support at the moment).
2002-06-09fix the use of "cuz" in the tree; these are all in commentsJason Peel
noticed by aaron@, recommended by deraadt@
2002-06-09Set/clear M_AUTH_AH.Angelos D. Keromytis
2002-06-08Break up icmp_error() so we can have the icmp error mbuf returnedjasoni
instead of it being sent to ip_output().
2002-06-08sync with latest KAME in6_ifaddr/prefix/default router manipulation.Jun-ichiro itojun Hagino
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up.
2002-06-08correctnessChris Cappuccio
2002-06-07kill register; ok with itojunjasoni
2002-06-07use TAILQ_FOREACH macro; ok angelosjasoni
2002-06-07Use LIST macros instead of accessing field members directly; jason@ okAaron Campbell
2002-06-07avoid is_ipv6 construct. a step towards IPv4-less kernelJun-ichiro itojun Hagino
2002-06-07no need for IPv4 mapped addr supportJun-ichiro itojun Hagino
2002-06-07missing bzero! - now linklocal tcp works correctlyJun-ichiro itojun Hagino
2002-06-04spaces to tabs, remove trailing whitespacejasoni
2002-05-31respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos okJun-ichiro itojun Hagino
2002-05-31Socket-specific IPsec policy.Angelos D. Keromytis
2002-05-31Per-socket policies and authentication. Finally.Angelos D. Keromytis
2002-05-31Socket-related IPsec sockoptions --- cleanups etc.Angelos D. Keromytis
2002-05-31Move some common code to separate routines; also, fix the problem ofAngelos D. Keromytis
using the same SA for different traffic classes. Now, different SAs will be renegotiated as needed. XXX It's a sub-optimal (but correct) solution, as it looks for an exact match -- it should be checking for subset/subnet. One of these days...
2002-05-31New fields in policy and TDB.Angelos D. Keromytis
2002-05-31Keep an policy attached to each socket (that needs it), and cleanup asAngelos D. Keromytis
needed on socket tear-down.
2002-05-31Fix a DoS attack whereby an attacker could cause the replay counter toAngelos D. Keromytis
advance with unauthenticated packets, thereby causing valid packets to be discarded as replays. This has been sitting in my tree for a while, and I've forgotten who it was that pointed out the problem.
2002-05-30minor KNF. nuke obsolete IFF_LINK0 support completelyJun-ichiro itojun Hagino
2002-05-29attach nd_ifinfo structure to if_afdata.Jun-ichiro itojun Hagino
split IPv6 MTU (advertised by RA) from real link MTU. sync with kame
2002-05-29move per-interface ip6/icmp6 stat to ifnet->if_afdata. sync w/kameJun-ichiro itojun Hagino
2002-05-28kill register; ok deraadt@jasoni
2002-05-28Factor out IP fragmentation code into its own function so it can bejasoni
reused. - ok jason@, dhartmei@
2002-05-26remove extra spaces, tabs, and semicolon.Federico G. Schwindt
2002-05-24add net.inet.icmp.tstamprepl sysctl for timestamp control; jason@ackley.netTheo de Raadt
2002-05-16bring in ECN support from KAME.Kenjiro Cho
it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@
2002-05-07move ether_crc32_le to if_ethersubr.c. Add ether_crc32_beNathan Binkert
2002-04-24Update IPsec-related comments.Angelos D. Keromytis
2002-04-24Add hooks to struct ifnet that allow to register callbacks that will beDaniel Hartmeier
notified of interface address changes. ok provos@, angelos@
2002-04-03Don't process WCCPv1-style GRE packets, unless allowed (via sysctlAngelos D. Keromytis
variable); GRE processing must also be allowed. From joeycoleman@acm.org, ok deraadt@ niklas@
2002-04-01cleanup in_broadcast. don't consider /32 addrs as broadcast.Jun-ichiro itojun Hagino
2002-03-27suppress "duplicate IP" message when booting machines with no initial IP.Ian Darwin
2002-03-24m_freem(NULL) bad style, ok jason@Niklas Hallqvist
2002-03-24WCCP support (trivial hack, it's not the complete protocol, but it'llAngelos D. Keromytis
accept packets from Cisco boxes) --- from joeycoleman@acm.org
2002-03-19drop TCP connections to broadcast address.Jun-ichiro itojun Hagino
From: "Crist J. Clark" <cjclark@alum.mit.edu>
2002-03-15Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do thingsTodd C. Miller
the ANSI way.