summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2010-01-13Remove special bridge code in in_arpinput() this is no longer needed sinceClaudio Jeker
2010-01-13instead of fiddling with the per-interface address lists directly inHenning Brauer
2010-01-13let's admit it's not 1992 any more. CIDR is around for a long time, evenHenning Brauer
2010-01-12Add input and user protocol hook to handle GRE packets by pipex.YASUOKA Masahiko
2010-01-12Unify the various fake ethernet generators as ether_fakeaddr() whichTheo de Raadt
2010-01-12Remove the "bump the advskew to 240 in case of errors" hack.Marco Pfatschbacher
2010-01-12Allow the queueing of multiple fragments on virtual interfaces with aBob Beck
2010-01-12Use M_ZERO in malloc instead of doing a bzeor right afterwards.Claudio Jeker
2010-01-10Fix two bugs in IPsec/HMAC-SHA2:Markus Friedl
2010-01-02uninitalized protocol version for ipv6; from mickey; ok claudioMarkus Friedl
2009-12-23The process's rdomain should be, well, per-process and not per-rthread,Philip Guenthe
2009-12-15Ensure that the interface is valid before trying to access its flags.Joel Sing
2009-12-15Ansify function declarations.Joel Sing
2009-12-15Ensure that the interface is not null before trying to access its flags.Joel Sing
2009-12-11Two cases of IPSEC getsockopt() returning two bytes of uninitialializedTheo de Raadt
2009-12-07do not forward and drop packets with M_MCAST flag set in ip_forward()Joerg Goltermann
2009-11-27Add setrdomain() and getrdomain() system calls. Committing now toPhilip Guenthe
2009-11-21Add a way to bind the tunnel endpoint of a gif/gre interface into aClaudio Jeker
2009-11-20NULL dereference in IPV6_PORTRANGE and IP_IPSEC_*, found by Clement LECIGNE,Philip Guenthe
2009-11-19avoid overflow since protos > IPPROTO_MAX exist. From FreeBSD withOtto Moerbeek
2009-11-13Extend the protosw pr_ctlinput function to include the rdomain. This isClaudio Jeker
2009-11-13Packets generated by ip_fragment() need to inherit the rdomain from theClaudio Jeker
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-10-28*NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,Theo de Raadt
2009-10-25Get rid of unused macro `la_timer'.Michael Knudsen
2009-10-17Allow us to accept gratuitous ARP requests in cases where theMarco Pfatschbacher
2009-10-06Redo the route lookup in the output (and IPv6 forwarding) path if theClaudio Jeker
2009-10-04Add (again) support for divert sockets. They allow you to:Michele Marchetto
2009-09-08I had not enough oks to commit this diff.Michele Marchetto
2009-09-08Add support for divert sockets. They allow you to:Michele Marchetto
2009-08-23revert the icmp error diff again (r1.167-1.169)David Krause
2009-08-20fix indentationAlexander Bluhm
2009-08-12don't confuse chars with strings; ok oga@Martynas Venckus
2009-08-107 years ofHenning Brauer
2009-08-10we need to null mcopy, gotos bite. theo and i both missed them, theo okHenning Brauer
2009-08-10fix previous:Henning Brauer
2009-08-10this is basically a fixed version of r1.165, avoid m_copym of each and everyHenning Brauer
2009-08-10sockets created via a listening socket lose the rdomain and fail to workClaudio Jeker
2009-08-09once again ipsec tries to be clever and plays fast, this time byHenning Brauer
2009-08-01timeout_add -> timeout_add_msecBret Lambert
2009-07-28revert the avoidance of the mbuf copy for the icmp errors (r1.165)David Gwynne
2009-07-27Define the common DiffServ Codepoints so pf(4) can use them.Claudio Jeker
2009-07-26no need to cast the return value of m_freem() to voidThordur I. Bjornsson
2009-07-24for every packet we forwarded, we copied the first 68 bytes of it in caseDavid Gwynne
2009-07-13Get rid of the token bucket filter.Michele Marchetto
2009-07-09Use MAXTTL instead of the hardcoded value.Michele Marchetto
2009-06-17Correctly handle the carp demote counter in all input cases.Marco Pfatschbacher
2009-06-09By default, don't accept IPv4 ICMP redirects. This behaviour can beStuart Henderson
2009-06-08remove stray * from comment, probably a rewrapping artefactStuart Henderson
2009-06-05Initial support for routing domains. This allows to bind interfaces toClaudio Jeker