summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2001-02-28Handle failures more gracefully.Angelos D. Keromytis
2001-02-28Keep the last packet sent or received that matched an SPD entry, andAngelos D. Keromytis
retransmit if we eventually have an SA setup for that policy.
2001-02-28If net.inet.ipip.allow is set to 2, don't check for loopback addressAngelos D. Keromytis
spoofing of encapsulated packets (useful for single-machinet testing of isakmpd)
2001-02-27Remove superfluous printf in Angelos last commitNiklas Hallqvist
2001-02-20tighten IPv4 option header processing (we may want to do more).Jun-ichiro itojun Hagino
reviewed by angelos.
2001-02-16remove IPv6 case from udp_output. now we have separate udp6_output.Jun-ichiro itojun Hagino
2001-02-16pull in new pcb notification code from kame. better handling of scope address.Jun-ichiro itojun Hagino
2001-02-16amove in6_{embed,recover}scope prototypes to in6_var.h (kernel only).Jun-ichiro itojun Hagino
add in6_clearscope. sync better with kame
2001-02-16sync whitespace/comment with kame. to help merge tasksJun-ichiro itojun Hagino
2001-02-12putting #error into an include file is totally wrongTheo de Raadt
2001-02-11If IPSEC is defined but not CRYPTO, spit an error; angelos@ okFederico G. Schwindt
2001-02-09Fix BPF support.Angelos D. Keromytis
2001-02-08witch raw ip6 socket code from NRL to kame.Jun-ichiro itojun Hagino
makes upgrades/code sharing much easier.
2001-02-07allow gif-less compileMichael Shalayeff
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-02-06ipf/ipnat check the securelevel in the original code, so don't do it twice.Federico G. Schwindt
Also remove uneeded definition of ICMP_UNREACH_FILTER_PROHIB; this isn't needed. Why keep adding things to make diffs harder?
2001-02-06- bridge_input() expects to be called at splnet(), not splsoftnet()Jason Wright
- add a bit more debugging (controlled by ENCDEBUG and encdebug) - turn off several more m_flags that may have been set by the higher layers (so any sharing of mbuf's in the return direction doesn't confuse the upper layers)
2001-02-06allow changing number of loopbacks in ukc.Michael Shalayeff
change rest of the code to use lo0ifp pointing to the corresponding struct ifnet. itojun@ and niklas@ ok
2001-02-05with a bunch of encapsulation layers, eg. (IPsec+IP+EtherIP+ether_header),Jason Wright
the arp data will not necessarily be in the first mbuf: add m_pullup()'s to make it so.
2001-02-03- define and use EtherIP version 3 (2 byte padded header instead of theJason Wright
single byte header used in V2), and drop support for V2. - that done, remove some of the buffer copies that were used as alignment shims
2001-02-03KNFJason Wright
2001-02-02a quick checkpoint:Jason Wright
- add a struct etherip_header (will make switching protocol versions a bit easier and give a base for aligning things correctly) - fix the version/reserved field checking for good this time - don't need to m_copydata to grab the first byte of an mbuf that you know has t hat byte - m_adj() instead of homebrew - fix M_MCAST/M_BCAST setting (cut/pasto) - if_imcasts was being updated on the wrong interface
2001-02-01grr, don't forget to change the reserved field to the upper 4 bits of the ↵Jason Wright
header.
2001-02-01according to the draft-housley-etherip-01, the version is in the low orderJason Wright
4 bits of the header
2001-02-01Ok, more alignment fallout (caused by a single byte header interspersed withJason Wright
nicely aligned headers)... Copy the first MHLEN worth of data into a new buffer and rebuild the mbuf to make sure that the protocol data is nicely aligned.
2001-01-31it's obviously bed time... really avoid mbuf lossage if MGETHDR failsJason Wright
2001-01-31oops, avoid mbuf lossage if MGETHDR failsJason Wright
2001-01-31Allocate a new mbuf for the header info (struct ip + one, stupid, byte).Jason Wright
This works around the fact that M_PREPEND() with a non-word sized length can leave m->m_data pointing to a non-word aligned address.
2001-01-30re-add local ipf changes that were whacked in the 3.4.16 merge. userland to ↵Kjell Wooding
follow
2001-01-30change ip_compat.h to ip_fil_compat.h for clarity. Impending ipf mergeKjell Wooding
2001-01-22fix router renumbering bit decl for little endian. KAME PR 320Jun-ichiro itojun Hagino
2001-01-21sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.Jun-ichiro itojun Hagino
sync with latest kame rtadvd (again). mostly cosmetic.
2001-01-19pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted).Jun-ichiro itojun Hagino
have sys/net/route.c:rtrequest1(), which takes rt_addrinfo * as the argument. pass rt_addrinfo all the way down to rtrequest, and ifa->ifa_rtrequest. 3rd arg of ifa->ifa_rtrequest is now rt_addrinfo * instead of sockaddr * (almost noone is using it anyways). benefit: the follwoing command now works. previously we need two route(8) invocations, "add" then "change". # route add -inet6 default ::1 -ifp gif0 remove unsafe typecast in rtrequest(), from rtentry * to sockaddr *. it was introduced by 4.3BSD-reno and never corrected. XXX is eon_rtrequest() change correct regarding to 3rd arg? eon_rtrequest() and rtrequest() were incorrect since 4.3BSD-reno, so i do not have correct answer in the source code. someone with more clue about netiso-over-ip, please help.
2001-01-17IPF 3.4.16.Federico G. Schwindt
2001-01-17include sys/timeout.h.Federico G. Schwindt
2001-01-17IPF 3.4.15. (IPv6 not working yet).Federico G. Schwindt
Note: before building the userland part you need to do make includes.
2001-01-15Careful with bitmasks (henric@aimnet.com)Angelos D. Keromytis
2001-01-09One-byte EtherIP header, per the relevant draft (soon to be RFC).Angelos D. Keromytis
* * NOTE * * This breaks backward compatibility with 2.7 and 2.8 bridges. * * NOTE * *
2001-01-09Define version number for EtherIP protocol (soon to become RFC).Angelos D. Keromytis
2000-12-31Fix non-NGIF case.Angelos D. Keromytis
2000-12-31Fix non-NBRIDGE caseAngelos D. Keromytis
2000-12-31Remove debugging printf.Angelos D. Keromytis
2000-12-30Use gif* instead of enc* for the bridge.Angelos D. Keromytis
2000-12-30AF_LINK case.Angelos D. Keromytis
2000-12-30Send AF_LINK to etherip_output()Angelos D. Keromytis
2000-12-28export arprequest() and make it use ifnet* as the 1st arg; tested; angelos@ okMichael Shalayeff
2000-12-28Remove unused and confusing reporting line.Angelos D. Keromytis
2000-12-24Extra argument in the function to tdb_walk(), indicating last TDB.Angelos D. Keromytis
2000-12-21correct ipv6 path mtu discovery.Jun-ichiro itojun Hagino
2000-12-18Minor sanity check.Angelos D. Keromytis