Age | Commit message (Collapse) | Author | |
---|---|---|---|
1997-02-05 | use arc4random() | Theo de Raadt | |
1997-02-05 | #define ICMP_UNREACH_FILTER -> ICMP_UNREACH_FILTER_PROHIB to match ↵ | kstailey | |
tcpdump/print_icmp.c which had it first | |||
1997-02-04 | changed comment to reflect RFC-1812 | kstailey | |
1997-02-04 | Changed ICMP "unreachable" code #defines to match the ones in | kstailey | |
tcpdump/print-icmp.c since they were in BSD first. | |||
1997-01-30 | for IP_HDRINCL option, use ip_len/ip_off in network order; lidl@va.pubnix.com | Theo de Raadt | |
1997-01-30 | Added ICMP Destination Unreachable codes from RFC-1812: | kstailey | |
14 = Host Precedence Violation. Sent by the first hop router to a host to indicate that a requested precedence is not permitted for the particular combination of source/destination host or 15 = Precedence cutoff in effect. The network operators have imposed a minimum level of precedence required for operation, the datagram was sent with a precedence below this level; | |||
1997-01-30 | added #define for Communication Administratively Prohibited | kstailey | |
as in RFC-1812 Section 5.2.7.1 Destination Unreachable | |||
1997-01-26 | Make ip_len and ip_off unsigned values; don't transmit or accept packets | Thorsten Lockert | |
larger than the maximum IP packet size. From NetBSD. | |||
1997-01-18 | syslog.h -> sys/syslog.h | Jason Downs | |
THIS IS THE KERNEL, DAMNIT. | |||
1997-01-15 | prevent warning: | kstailey | |
in_pcb.c:182: warning: `old' might be used uninitialized in this function | |||
1996-10-27 | record route is not a problem; thanks bitblt | Theo de Raadt | |
1996-10-24 | <sys/dir.h> is for use as a compatibility interface only. Warn if | Thorsten Lockert | |
included by kernel modules, and also remove use from any modules that currently attempt to use it. | |||
1996-10-18 | Do not run IP defragmentation routines unneccecarily; NetBSD PR# 2772 | Thorsten Lockert | |
1996-10-08 | Prototype & Stylistic fixes for high -W gcc levels | Niklas Hallqvist | |
1996-09-30 | handle openbsd cases | Theo de Raadt | |
1996-09-25 | Drop unused variable | Niklas Hallqvist | |
1996-09-23 | fix tuba after synbomb fixes | Theo de Raadt | |
1996-09-20 | `solve' the syn bomb problem as well as currently known; add sysctl's for | Theo de Raadt | |
SOMAXCONN (kern.somaxconn), SOMINCONN (kern.sominconn), and TCPTV_KEEP_INIT (net.inet.tcp.keepinittime). when this is not enough (ie. overfull), start doing tail drop, but slightly prefer the same port. | |||
1996-09-12 | Close TCP receive window when we cannot receive data; suggested by Darren | Thorsten Lockert | |
Reed. Also make a conditional easier to read. | |||
1996-09-12 | TCP Persist handling; from 4.4BSD Lite2 (via NetBSD PR 2335) | Thorsten Lockert | |
1996-09-12 | Don't assume other subnets than our own are local to us; from Luigi Rizzo | Thorsten Lockert | |
by way of Jason Downs & Theo de Raadt. Can be overridden in the kernel configuration file by using "option SUBNETSARELOCAL=1" | |||
1996-09-02 | Don't drain the protocol queues at interrupt level. | dm | |
1996-08-24 | change to so_uid, also fix a missing credential found by dm | Theo de Raadt | |
1996-08-14 | restrict some raw ip packets that may crash ip_output(); from freebsd | Theo de Raadt | |
1996-08-14 | ipaddrs are int; like many other things found after spotting a similar ↵ | Theo de Raadt | |
netbsd commit... | |||
1996-08-07 | Partial protection from TCP SYN attacks | Thorsten Lockert | |
1996-08-05 | stupid typo, going to bed in penance | Theo de Raadt | |
1996-08-05 | only check for takeover permission if non-root | Theo de Raadt | |
1996-08-05 | struct socket gets so_ucred; permit only same uid or root to do port takeover. | Theo de Raadt | |
1996-08-02 | ICMP Router Discovery definitions; from FreeBSD | Thorsten Lockert | |
1996-08-02 | Allow viewing of net.inet.ip.sourceroute in secure mode | Thorsten Lockert | |
1996-07-29 | Remove random() prototype, as it's not needed. Besides it was wrong for the ↵ | Niklas Hallqvist | |
alpha :-) | |||
1996-07-29 | Fix stupid logic error in bind(). | Jason Downs | |
1996-07-29 | Make TCP ISS increment by random amounts | Thorsten Lockert | |
1996-07-29 | Make 600, instead of 512, the lower limit for reserved ports. | Jason Downs | |
1996-07-29 | Fix a small bug and change the logic of the bind() port choosing: | Jason Downs | |
Use a random starting point the first time through the loop. | |||
1996-07-29 | From FreeBSD (with slightly different sysctl names): | Jason Downs | |
"... Allow the user to nominate one of three ranges of port numbers as candidates for selecting a local address to replace a zero port number. The ranges are selected via a setsockopt(s, IPPROTO_IP, IP_PORTRANGE, &arg) call. The three ranges are: default, high (to bypass firewalls) and low (to get a port below 1024). The default and high port ranges are sysctl settable under sysctl net.inet.ip.portrange.* [net.inet.ip.portfirst, net.inet.ip.portlast, net.inet.ip.porthifirst, and net.inet.ip.porthilast currently in OpenBSD.] This code also fixes a potential deadlock if the system accidently ran out of local port addresses. It'd drop into an infinite while loop. The secure port selection (for root) should reduce overheads and increase reliability of rlogin/rlogind/rsh/rshd if they are modified to take advantage of it." | |||
1996-07-27 | pad for machines that do not pad structs out | Theo de Raadt | |
1996-07-25 | SS_CONNECTOUT indicates socket was connect()ed at this end, accept()ed at ↵ | Theo de Raadt | |
other end | |||
1996-07-18 | ipfilter 3.1.0 | dm | |
1996-07-05 | release temporary binding if M_PREPEND fails; netbsd pr#2605; ↵ | Theo de Raadt | |
tegge@idt.unit.no; improved by me | |||
1996-07-03 | ported to FreeBSD 2.2-960612-SNAP. | chuck | |
1996-07-03 | prototype ethers(3) functions (inside !_KERNEL), pointed out in | Theo de Raadt | |
netbsd pr#2471, jhawk@mit.edu | |||
1996-06-29 | change: | chuck | |
- change asock to rxhand and adjust all for this [esp atm_input] | |||
1996-06-26 | fixes/new stuff: | chuck | |
[1] if user tries to enter in a bogus PVC don't leave it in the routing table ... remove it [2] change ioctl arg to include rxso for lower layer [3] add hooks (inside "NATM" ifdef) for native mode atm sockets so that they don't clash with IP PVCs. [i am still debugging the native mode atm socket protosw code] | |||
1996-06-21 | use correct copyright | chuck | |
1996-06-21 | network support for ATM networks (ATM == Async Transfer Mode, not | chuck | |
Automatic Teller Machine). Currently supports PVCs only (no ATM ARP either). | |||
1996-06-06 | if_arp is obsolete, now named if_ether | Niklas Hallqvist | |
1996-05-22 | When sending an ARP request, use the interface address for the route, rather | Theo de Raadt | |
than the first address assigned. This gives slightly different behaviour in the presence of aliases. From Bill Fenner, via Pete Bentley. | |||
1996-05-15 | remove unnecessary "XXX it should be sysctl()'ed" | Michael Shalayeff | |