summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2001-07-08Remove static from func declsNiklas Hallqvist
2001-07-07fix comment to make life easier for my special friend darren.Niels Provos
2001-07-06Don't use enc0 interface for IPComp. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IP6_EXTHDR_GET0 did not check m->m_len (noone was using this macro).Jun-ichiro itojun Hagino
sync with kame
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05IPComp. Just like for deflate earlier, it won't be compiled until everythingJean-Jacques Bernard-Gundol
is in the tree
2001-07-05StyleAngelos D. Keromytis
2001-07-05Typo.Angelos D. Keromytis
2001-07-05StyleAngelos D. Keromytis
2001-07-05IPComp itself (include files). angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-04Make preprocessor happier, don't give it untasty tokens at end of input.Marc Espie
Ok millert@
2001-07-04handle m->m_pkthdr.rcvif == NULL; temporarily ok deraadt@; pending itojun@Daniel Hartmeier
2001-07-04Explicitly list the new ICMP codes.Angelos D. Keromytis
2001-07-04Update with codes, URL, RFCs, from jason@Ackley.NET, closes PR 1919Angelos D. Keromytis
2001-07-03Pointer arithmetic fixes work better when you get the casting right.Angelos D. Keromytis
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not ↵Daniel Hartmeier
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@
2001-06-29move pf_test check to happen after checksum calculation - withoutBob Beck
this packets originating from this host (such as with an rdr to localhost for transparent proxying) do not get checksummed correctly, because the pf code does not have a correct checksum to fix up (ok kjell@)
2001-06-29saner checking in icmp_error; from NetBSD with work by dug and me.Niels Provos
2001-06-28first stab at packet normalization. includes full ip reassembly.Niels Provos
okay dhartmei@, dugsong@
2001-06-27introduce the ALTQ queue macros into sys/net files.Kenjiro Cho
the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt
2001-06-27ALTQ base modifications to the kernel.Kenjiro Cho
- ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface.
2001-06-27Use TAILQ_FOREACH() instead of hand-crafted for loops.Angelos D. Keromytis
2001-06-27When determining whether there's a pending acquire wrt a policy, lookAngelos D. Keromytis
at the acquires associated with the policy only.
2001-06-27Attach IPsec acquire state to policy entries, and relevant cleanups.Angelos D. Keromytis
2001-06-27Also link acquire state to the relevant IPsec policy.Angelos D. Keromytis
2001-06-27Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, dependingAngelos D. Keromytis
on how macros should be treated. Code by fgsch@, ok by me and itojun@
2001-06-27Add length to pkthdr.len directly.Angelos D. Keromytis
2001-06-27Minor nits.Angelos D. Keromytis
2001-06-27Don't cache packets that hit policies -- we'll do that at the PCB forAngelos D. Keromytis
local packets.
2001-06-26Use the ACQUIRE sequence number to "wake up" acquire state kept andAngelos D. Keromytis
cause retransmission of outgoing packets. Also, only store outgoing packets -- just drop incoming packets that cause an SA acquisition. Some comment fixup.
2001-06-26ifdef out some currently unused codeAngelos D. Keromytis
2001-06-26Rewrite ipsp_clear_acquire() to be more readable, after all the KNF'ingAngelos D. Keromytis
2001-06-26Use pool(9) for IPsec acquires too.Angelos D. Keromytis
2001-06-26Use pool(9) for IPsec policy structures.Angelos D. Keromytis
2001-06-26Keep the PFKEY sequence number at the TDB, plus a little bit of KNFAngelos D. Keromytis
2001-06-26no longer pass around **mTheo de Raadt
2001-06-26Appease gcc by not using void pointers in arithmetic operations.Aaron Campbell
2001-06-26Restore inclusion of <sys/systm.h>.Aaron Campbell
2001-06-26KNFAngelos D. Keromytis
2001-06-26More KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-26KNFAngelos D. Keromytis
2001-06-25damn greeks desperate for commits...Bob Beck
2001-06-25KNFAngelos D. Keromytis
2001-06-25If a PENDING_TDB tag is attached but no TDB is found, drop the packet.Angelos D. Keromytis
2001-06-25Build without IPSEC.Artur Grabowski
2001-06-25Check the length of the tag (diagnostic)Angelos D. Keromytis
2001-06-25Apply pending TDBs (as indicated by tags). This will be used to handleAngelos D. Keromytis
the case of both the socket and system-wide IPsec policy specifying TDBs to be applied to the same packet.
2001-06-25Copyright.Angelos D. Keromytis
2001-06-25Don't double-clear M_PKTHDR/tags.Angelos D. Keromytis