summaryrefslogtreecommitdiffstats
path: root/sys/netinet/in.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add kernel support for Protocol Independant Multicast (PIM)mcbride2005-01-141-2/+2
| | | | | | | | Information: http://netweb.usc.edu/pim/ From Pavlin Radoslavov <pavlin@icir.org> ok deraadt@ brad@
* Multicast routing cleanup from Pavlin Radoslavovmcbride2004-11-241-1/+3
| | | | | | | | | | - sync ip_mroute.c with NetBSD - import some FreeBSD changes to MFC entry handling - set im->im_vif correctly when sending IGMPMSG_WRONGVIF - increment mrtstat.mrts_upcalls correctly - return error from get_sg_cnt() if there is no matching forwarding entry ok henning@ brad@ naddy@
* extend routing table to be able to match and route packets based oncedric2004-06-061-1/+12
| | | | | | | | their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@
* switch to sysctl_int_arr(); ok itojun, henning, miod, deraadtmarkus2004-02-151-1/+33
|
* Change pfsync IP protocol and multicast group numbers.mcbride2003-12-171-3/+3
| | | | | | | IPPROTO_PFSYNC -> 240 INADDR_PFSYNC_GROUP -> 224.0.0.240 ok deraadt@
* Add initial support for pf state synchronization over the network.mcbride2003-12-151-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@
* Common Address Redundancy Protocolmcbride2003-10-171-2/+8
| | | | | | | | | | Allows multiple hosts to share an IP address, providing high availability and load balancing. Based on code by mickey@, with additional help from markus@ and Marco_Pfatschbacher@genua.de ok deraadt@
* Remove the advertising clause in the UCB license which Berkeleymillert2003-06-021-6/+2
| | | | rescinded 22 July 1999. Proofed by myself and Theo.
* First round of __P removal in sysmillert2002-03-141-11/+11
|
* send igmp v2 leave messages to allrouters address (PR#2164)jakob2001-11-061-1/+2
| | | | patch based on parts from NetBSD submitted by goeran@cdg.chalmers.se
* Styleangelos2001-07-051-2/+2
|
* IPComp itself (include files). angelos@ ok.jjbg2001-07-051-3/+18
|
* Use in_cksum_phdr() rather than in_cksum() -- from NetBSDangelos2001-06-251-8/+8
|
* Import in_cksum_phdr() and in_cksum_addword() from NetBSD.angelos2001-06-241-1/+48
|
* Import in_delayed_cksum() and convert to using it; also, don't doangelos2001-06-241-1/+2
| | | | TCP/UDP HW checksumming if doing IP fragmentation. From NetBSD
* Typo.angelos2001-06-231-2/+2
|
* Prototype for in4_cksum()angelos2001-06-231-1/+2
|
* IPsec setsockopts.angelos2001-06-121-2/+3
|
* Inclusion protection.angelos2001-06-091-3/+3
|
* Add some IPsec-related IP-level socket options.angelos2001-05-271-1/+6
|
* convert mbuf and cluster allocation to pool, mostly from NetBSDprovos2001-05-171-1/+4
| | | | okay art@ miod@
* remove duplicated def of INET_ADDRSTRLEN.itojun2000-12-091-3/+1
|
* Lots and lots of changes.angelos2000-09-191-5/+3
|
* Path MTU discovery based on NetBSD but with the decision to use the DFprovos2000-09-181-2/+6
| | | | | flag delayed to ip_output(). That halves the code and reduces most of the route lookups. okay deraadt@
* for mcdonald-simple-ipsec-api get/setsockopt, variable size was mixed up.itojun2000-06-181-4/+4
| | | | | | | | in some place sizeof(u_char), and in some place sizeof(int) were used. previous code can cause problem in big endian machines. now it always uses "int" (isakmpd uses int, so it should be okay) set m_len properly on mcdonald-simple-ipsec-api getsockopt.
* net.inet.ip.gif_ttl (and IPv6 counterpart) is never used.itojun2000-05-251-2/+4
| | | | enforce type checking on IN6_ARE_ADDR_EQUAL.
* improve RFC2553/2292 conformance. netinet6/{ip6,icmp6,in6}.h should notitojun2000-02-091-1/+3
| | | | | | be included. neitnet6/{ip6,icmp6}.h includes #error statements only - i'll remove them couple of days later.
* new bindresvport() semantics that itojun, shin, jean-luc and i have agreed on, which will be happy for the future. bindresvport_sa() for sockaddr *, too. docs later..deraadt2000-01-261-2/+2
|
* Rename the ip4_* routines to ipip_*, make it so GIF tunnels are notangelos2000-01-211-2/+2
| | | | | affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input.
* Bump IPPROTO_MAX to include IPPROTO_MOBILE and IPPROTO_ETHERIP.angelos2000-01-181-2/+2
|
* Remove ifdef'ed out definitions.angelos2000-01-111-175/+1
|
* Add 10 new ipsec-related sysctl variables...they are currently underangelos2000-01-101-2/+24
| | | | | net.inet.ip; perhaps they should be moved under net.inet.ipsec or some such.
* Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theangelos2000-01-101-3/+5
| | | | | | amount of time embryonic SAs will be kept before they have to be initialized by key management (this only affects automated key management).
* Add a sysctl for IPsec ingress access control (better explanation on aangelos2000-01-091-2/+4
| | | | follow-up commit).
* Forgot the names here...angelos2000-01-071-3/+3
|
* IPPROTO_GRE and IPPROTO_MOBILE definitions (from NetBSD)angelos2000-01-071-5/+7
|
* too much software forgets to include sys/socket.h, SIGHderaadt1999-12-181-1/+2
|
* rresvport_af() and bindresvport_af()deraadt1999-12-161-1/+2
|
* bring in KAME IPv6 code, dated 19991208.itojun1999-12-081-2/+33
| | | | | | | | | replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).
* Add etherip.allow sysctl node entry.angelos1999-10-281-1/+47
|
* Define IPPROTO_ETHERIP.angelos1999-10-281-1/+2
|
* Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.niklas1999-04-111-5/+36
| | | | | | If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too.
* The kernel parts of a sysctl that can switch on/off IP-in-IP (protocol 4)niklas1999-04-091-2/+2
| | | | | | | support, when IPSEC is compiled in. The default is disabled. Turn on with: sysctl -w net.inet.ip4.allow=1 ***Only*** do this if you are really knowing what you do! This control does not control the tunnel modes of ESP and AH.
* add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingprovos1999-03-271-1/+3
| | | | | | | | | SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
* Removed old NRL convention in6a_words virtual-field from struct in6_addr.cmetz1999-03-241-2/+1
| | | | Let's not encourage the use of an obsolete convention.
* Added in.h definitions required by IPv6 Basic API and Advanced API specs, andcmetz1999-02-241-7/+169
| | | | | | a few extras that are just plain useful. Note that I used u_intxx_t instead of the POSIX p1003.1g uintxx_t that those specs mandate, so as to not increase the number of outside symbol definitions that in.h depends on.
* add fragment flood protection; configureable using sysctl ip.maxqueuederaadt1999-02-171-2/+4
|
* merge INPROTO_* tablesderaadt1999-01-101-5/+10
|
* update for ipv6deraadt1999-01-071-1/+3
|
* use int8_t, not char in c++ case for consistency and fix indentationmillert1999-01-031-2/+2
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.