summaryrefslogtreecommitdiffstats
path: root/sys/netinet6/ip6_var.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* g/c ip6_flow_seq. found by mcbride. mcbride okitojun2004-10-181-2/+1
|
* use random number generator to generate IPv6 fragment ID/flowlabel.itojun2003-10-011-2/+4
| | | | cleanup IPv6 flowlabel handling. deraadt ok
* make net.inet6.ip6.redirect actually work. from kameitojun2003-08-071-1/+2
|
* Remove the advertising clause in the UCB license which Berkeleymillert2003-06-021-6/+2
| | | | rescinded 22 July 1999. Proofed by myself and Theo.
* From Andrushock, s/sucess/success/gmillert2002-12-091-2/+2
|
* fix pointer signedness mixup. sync w/kameitojun2002-09-111-2/+2
|
* sync with latest KAME in6_ifaddr/prefix/default router manipulation.itojun2002-06-081-4/+9
| | | | | | | behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up.
* move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs.itojun2002-06-071-1/+2
| | | | rip6 stats. sync w/kame
* just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB,itojun2002-06-071-1/+2
| | | | as well as set/getsockopt(IPV6_V6ONLY).
* force fragment to minimum link MTU (1280) when needed (when PMTUD doesitojun2002-05-291-1/+2
| | | | not take effect) - like icmp6 responses or foo-over-IPv6 tunnel.
* limit number of IPv6 fragments (not the fragment queue size) toitojun2002-05-281-1/+3
| | | | fight against lots-of-frags DoS attacks. sync w/kame
* First round of __P removal in sysmillert2002-03-141-37/+37
|
* Deprecated IPV6_ENCAPSULATEDangelos2001-05-281-2/+1
|
* witch raw ip6 socket code from NRL to kame.itojun2001-02-081-1/+3
| | | | makes upgrades/code sharing much easier.
* remove m_pulldown statistics, which is highly experimentalitojun2000-07-121-15/+1
|
* - more icmp6/ip6 stats.itojun2000-07-061-8/+7
| | | | | | | | | - protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution).
* IPv6 IPsec, outbound direction.itojun2000-06-191-1/+2
| | | | | | restriction: if there's any extension header (except fragment) and outbound packet matches tdb, we can't encrypt it. packet will not go out of the node (dropped).
* net.inet.ip.gif_ttl (and IPv6 counterpart) is never used.itojun2000-05-251-2/+1
| | | | enforce type checking on IN6_ARE_ADDR_EQUAL.
* aintroduce ip6_{next,last}hdr which lets us parse IPv6 header chain correctly.itojun2000-03-221-2/+4
| | | | use it from icmp6 code.
* - check raw socket icmp6 filter only if the packet is icmp6.itojun2000-02-281-1/+2
| | | | | | - allow setting raw socket icmp6 filter only if it is IPPROTO_ICMPV6 socket. (cmetz may object about above two items...) - add rip6_ctlinput, to flush cached router properly on redirects.
* bring in recent KAME changes (only important and stable ones, as usual).itojun2000-02-281-1/+36
| | | | | | | | | | | | | | | | | | - remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case)
* make IPv6 reass work on alpha. NetBSD PR 9340.itojun2000-02-041-27/+26
|
* remove never-visited function icmp6_ctloutput().itojun2000-01-081-3/+1
| | | | for openbsd, this is integrated into rip6_ctloutput().
* Remove remaining unnecessary ifdefs (itojun will hate me for this :-)angelos1999-12-101-31/+1
|
* bring in KAME IPv6 code, dated 19991208.itojun1999-12-081-0/+289
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).