summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2020-04-29remove some trailing whitespace. no functional change.David Gwynne
2020-04-23Add support for autmatically moving traffic between rdomains on ipsec(4)tobhe
2020-04-12Stop processing packets under non-exclusive (read) netlock.Martin Pieuchot
2020-03-15Guard SIOCDELMULTI if_ioctl calls with KERNEL_LOCK() where the call isVisa Hankala
2020-03-06Fix uninitialized use of variable 'len'.tobhe
2020-01-26add define for IPTOS_DSCP_LE; "low effort" DSCP codepoint standardisedDamien Miller
2019-12-23rdr-to with loopback destination should work even thoughAlexandr Nedvedicky
2019-12-10Make bundled IPcomp/ESP policies work with IPSEC_LEVEL_REQUIRE.tobhe
2019-12-09always pull in if_types.h, to unbreak ramdisksTheo de Raadt
2019-12-08Make sure packet destination address matches interface address,Alexandr Nedvedicky
2019-12-06Checking the IPsec policy is expensive. Check only when IPsec is used.tobhe
2019-12-01Don't require a valid sa_len for a bunch of IPv4 "get" ioctlsJeremie Courreges-Anglas
2019-11-29Change the default security level for incoming IPsec flows fromtobhe
2019-11-28Although ifconfig(8) checks it already, enforce contiguous inetAlexander Bluhm
2019-11-13Add DoT 853 to DEFBADDYNAMICPORTS_TCP. This port will be increasinglyTheo de Raadt
2019-11-11Prevent underflows in tp->snd_wnd if the remote side ACKs more thanAlexander Bluhm
2019-11-08void being too clever about setting/clearing ifpromisc on the parent.David Gwynne
2019-11-08convert interface address change hooks to tasks and a task_list.David Gwynne
2019-11-07Do propper kernel input validation for in_control() ioctl(2)Alexander Bluhm
2019-11-07Avoid NULL dereference in arpinvalidate() and nd6_invalidate() byKenneth R Westerback
2019-11-07turn the linkstate hooks into a task list, like the detach hooks.David Gwynne
2019-11-06replace the hooks used with if_detachhooks with a task list.David Gwynne
2019-11-04remove mobileip(4)David Gwynne
2019-10-25make whitespace in the IPPROTO defines consistent. no functional change.David Gwynne
2019-10-25+#define IPPROTO_UDPLITE 136, as per RFC 3828 and the IANA allocationDavid Gwynne
2019-10-23Kernel is missing propper input validation when configuring addresses.Alexander Bluhm
2019-10-17in6_setsockaddr and in6_setpeeraddr can't fail, so let them return void.David Gwynne
2019-10-16tsleep(9) -> tsleep_nsec(9)Martin Pieuchot
2019-10-07ip_ether.c is empty, and now unlinked from the build.David Gwynne
2019-10-04gif shouldn't include netinet/ip_ether.h, cos gif doesnt do etherip.David Gwynne
2019-10-04get rid of prototypes for mplsip_input and mplsip_output. they don't exist.David Gwynne
2019-09-30remove the "copy function" argument to bpf_mtap_hdr.David Gwynne
2019-09-02Fix a route use after free in multicast route. Move the rt_mcast_del()Alexander Bluhm
2019-08-06When we needed the kernel lock for local IP packet delivery, mpi@Alexander Bluhm
2019-07-25Add IFXF_AUTOCONF4 to if_xflags to match IFXF_AUTOCONF6. LetKenneth R Westerback
2019-07-17Introduce ETHER_IS_BROADCAST/ANYADDR/EQ() and use them where appropriate.Martin Pieuchot
2019-07-15Initialize struct inpcb pool not on demand, but during initialization.Alexander Bluhm
2019-07-12Count the number of TCP SACK options that were dropped due to theAlexander Bluhm
2019-07-10Received SACK options are managed by a linked list at the TCP socket.Alexander Bluhm
2019-07-08free(9) sizes for M_RTABLE.Martin Pieuchot
2019-07-05add ac_trunkport to arpcom so trunks can coordinate owning an interfaceDavid Gwynne
2019-06-21Prevent recursions by not deleting entries inside rtable_walk(9).Martin Pieuchot
2019-06-13In arp_rtrequest and nd6_rtrequest return early if the RTF_MPLS flag isClaudio Jeker
2019-06-13Copy the user provided sockaddr into a normalized sockaddr in rtrequest()Claudio Jeker
2019-06-10use m_microtime instead of microtime for SO_TIMESTAMP socketopt handlingDavid Gwynne
2019-06-10Use mallocarray(9) & put some free(9) sizes for M_IPMOPTS allocations.Martin Pieuchot
2019-06-04Add missing NULL check for the protocol control block (pcb) pointer inanton
2019-05-11unbreak the build without IPSEC.Sebastian Benoit
2019-04-28Removes the KERNEL_LOCK() from bridge(4)'s output fast-path.Martin Pieuchot
2019-04-23a first cut at converting some virtual ethernet interfaces to if_vinputDavid Gwynne