Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | remove #if 0'ed code (which was experimental and should never be used) | 2005-02-10 | 1 | -26/+1 | |
| | |||||
* | Rewriting the lladdr can now be done without using mbuf tags. | 2005-01-18 | 1 | -9/+1 | |
| | | | | | | | | | | Advertisements run through the carp interface first. So we just take the address from ifp0. While we're there, also remove carp_macmatch6, which isn't used anymore. Proposed by mcbride@ ok mcbride@, pascoe@ | ||||
* | should not check "code" field on icmp6 too big message. from kame | 2005-01-17 | 1 | -3/+1 | |
| | |||||
* | correctly deal with unspecified (zero) interface number in IPV6_MULTICAST_IF, | 2005-01-11 | 1 | -26/+37 | |
| | | | | IPV6_{JOIN,LEAVE}_GROUP ioctls; ok itojun@ | ||||
* | Check that if_type != IFT_CARP before using ifp->if_carp. | 2004-12-21 | 1 | -3/+3 | |
| | |||||
* | Convert carp(4) to behave more like a regular interface, much in the same | 2004-12-07 | 2 | -3/+4 | |
| | | | | | | | | style as vlan(4). carp interfaces no longer require the physical interface to be on the same subnet as the carp interface, or even that the physical interface has an adress at all, so CARP can now be used on /30 networks. ok deraadt@ henning@ | ||||
* | wrong paren. Patrick Latifi | 2004-11-17 | 1 | -3/+3 | |
| | |||||
* | Fix 'netstat -sp pim6' | 2004-11-10 | 2 | -2/+3 | |
| | | | | From Pavlin Radoslavov | ||||
* | treat IFT_CARP like IFT_PROPVIRTUAL, ryan daniel ok | 2004-10-28 | 2 | -2/+4 | |
| | |||||
* | remove onlink assumption behavior (consider destination on-link if default | 2004-10-28 | 1 | -142/+5 | |
| | | | | | | | | router list is empty) based on recent IETF ipv6 discussion (RFC2461 5.2). fix "ndp -I delete". markus ok | ||||
* | g/c ip6_flow_seq. found by mcbride. mcbride ok | 2004-10-18 | 3 | -6/+3 | |
| | |||||
* | missing dohooks(), needed for (em0:network) style notation with v6, was not | 2004-10-07 | 1 | -1/+2 | |
| | | | | updated properly in all cases. from cedric | ||||
* | revert. itojun notes that 128 is ok because of bitlen check. | 2004-08-24 | 1 | -3/+5 | |
| | | | | | add a comment to this effect since many of us were confused. ok deraadt@ | ||||
* | make sure we do not overwrite checksum field on shared mbuf. | 2004-08-23 | 1 | -6/+13 | |
| | | | | markus, henning, deraadt, mcbride ok | ||||
* | correct bounds checks. found at/by Coverity. | 2004-08-21 | 1 | -3/+3 | |
| | | | | ok deraadt@ | ||||
* | completely revert to r1.31, there were still problems on the forwarding | 2004-07-14 | 1 | -20/+15 | |
| | | | | path | ||||
* | remove PF_FORWARD (which was introduced by ipv6 reass-on-scrub). | 2004-07-12 | 1 | -2/+2 | |
| | | | | daniel found it. | ||||
* | IPv6 reassembly on "scrub" directive. | 2004-06-25 | 1 | -16/+21 | |
| | | | | | | | | | | | | | | | | | | caveats: (to be addressed soon) - "scrub in" should queue fragments back into ip6intrq again, but somehow it does not happen - the packet is kept inside reass queue. need investigation - ip6_forwarding path is not tested - does not use red-black tree. somehow red-black tree behaved badly and was not robust. performance issue, the above one is more important. good things: - "scrub out" is perfectly ok - i think now we can inspect upper-layer protocol fields (tcp port) even if ip6 packet is fragmented. - reass queue will be cleaned up properly by timeout (60sec). we might want to impose pool limit as well | ||||
* | "error" could be left uninitialized | 2004-06-24 | 1 | -2/+2 | |
| | |||||
* | First step towards more sane time handling in the kernel -- this changes | 2004-06-21 | 8 | -41/+41 | |
| | | | | | | | | things such that code that only need a second-resolution uptime or wall time, and used to get that from time.tv_secs or mono_time.tv_secs now get this from separate time_t globals time_second and time_uptime. ok art@ niklas@ nordin@ | ||||
* | Get rid of pf_test_eh() wrapper. | 2004-06-21 | 3 | -6/+6 | |
| | | | | ok cedric@ henning@ | ||||
* | correct multicast handling for special groups (like solicited node multicast). | 2004-06-17 | 1 | -72/+56 | |
| | | | | from jinmei@kame | ||||
* | missing paren in macro def. Patrick Latifi | 2004-06-16 | 1 | -2/+2 | |
| | |||||
* | avoid creating multiple multicast filter entry for the same group. | 2004-06-15 | 1 | -40/+54 | |
| | | | | notified from Patrick Latifi, deraadt ok | ||||
* | support IPV6_USE_MIN_MTU, to make BIND9 better. | 2004-06-12 | 4 | -9/+18 | |
| | | | | (sorry about the mess yesterday) | ||||
* | back out tree breakage. Like, come on | 2004-06-11 | 4 | -18/+9 | |
| | |||||
* | support IPV6_USE_MIN_MTU, which is needed to run BIND9 well. from kame | 2004-06-11 | 4 | -9/+18 | |
| | | | | markus ok | ||||
* | there's no use in checking curproc privilege in input path. | 2004-06-01 | 1 | -18/+7 | |
| | | | | equivalent to http://orange.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ip6_input.c.diff?r1=1.344&r2=1.345. jinmei@kame | ||||
* | do not loop on nd6_output() when transmission fails. from kame | 2004-05-19 | 1 | -6/+3 | |
| | |||||
* | Replace RSA-derived md5 code with code derived from Colin Plumb's PD version. | 2004-05-07 | 1 | -2/+3 | |
| | | | | | | This moves md5.c out of libkern and into sys/crypto where it belongs (as requested by markus@). Note that md5.c is still mandatory (dev/rnd.c uses it). Verified with IPsec + hmac-md5 and tcp md5sig. OK henning@ and hshoexer@ | ||||
* | radix tree with multipath support. from kame. deraadt ok | 2004-04-25 | 1 | -1/+8 | |
| | | | | | | | | | | | | | user visible changes: - you can add multiple routes with same key (route add A B then route add A C) - you have to specify gateway address if there are multiple entries on the table (route delete A B, instead of route delete A) kernel change: - radix_node_head has an extra entry - rnh_deladdr takes extra argument TODO: - actually take advantage of multipath (rtalloc -> rtalloc_mpath) | ||||
* | correct arg to in6_cksum. keiichi@kame | 2004-04-22 | 1 | -2/+2 | |
| | |||||
* | Don't use mbuf pointer in error case, when it has been set to NULL. | 2004-03-25 | 1 | -2/+1 | |
| | | | | From Patrick Latifi. ok markus@, henning@, deraadt@ | ||||
* | avoid touching out-of-bound memory if len == 128. | 2004-02-23 | 1 | -2/+3 | |
| | | | | Ted Unangst via Colin Percival | ||||
* | switch to sysctl_int_arr(); ok itojun, henning, miod, deraadt | 2004-02-15 | 3 | -74/+60 | |
| | |||||
* | permit IPv6-only operation (permit AF_INET6 bind(2) without IPv4 address). | 2004-02-06 | 1 | -3/+2 | |
| | | | | found by todd fries. markus ok | ||||
* | remove never-to-be-used codepath (IPv4 mapped address). ok mcbride | 2004-02-05 | 1 | -49/+22 | |
| | |||||
* | typo within comment, deilver -> deliver | 2004-02-04 | 1 | -2/+2 | |
| | |||||
* | remove kludge now that proper IPV6_MMTU handling is in | 2004-02-04 | 1 | -2/+2 | |
| | |||||
* | strictly follow RFC2460 section 5, last paragraph (sender behavior when | 2004-02-04 | 1 | -18/+100 | |
| | | | | path MTU < 1280). bug found by Georgi Guninski. ok dhartmei | ||||
* | make the stack compile if NPF=0. ok deraadt@ markus@ | 2004-02-02 | 2 | -3/+5 | |
| | |||||
* | ignore too small MTUs (below 296 octets), similar to IPv4. | 2004-02-01 | 1 | -2/+2 | |
| | |||||
* | Provide explicit function argument declarations. | 2004-01-15 | 1 | -2/+2 | |
| | |||||
* | Expose in6_ifremloop() and in6_ifaddloop() so that they can be used by carp. | 2004-01-13 | 2 | -4/+6 | |
| | | | | ok henning@ millert@ itojun@ | ||||
* | put an mi wrapper around stdarg.h/varargs.h. gcc3 moved stdarg/varargs macros | 2004-01-03 | 1 | -2/+2 | |
| | | | | | | | to built-ins, so eventually we will have one version of these files. Special adjustments for the kernel to cope: machine/stdarg.h -> sys/stdarg.h and machine/ansi.h needs to have a _BSD_VA_LIST_ for syslog* prototypes. okay millert@, drahn@, miod@. | ||||
* | change in*_pcbnotify to return numbers of matches; ok itojun, mcbride, henning | 2003-12-21 | 1 | -4/+4 | |
| | |||||
* | use CIRCLEQ* for pcb's; ok deraadt, henning, mcbride, with help from canacar | 2003-12-21 | 3 | -14/+8 | |
| | |||||
* | niels kindly dropped clause 3/4 from the license. tnx! | 2003-12-12 | 1 | -6/+1 | |
| | |||||
* | validate set/getsockopt arg more strictly. local privileged user could cause | 2003-12-10 | 1 | -24/+39 | |
| | | | | a kernel panic with previous code. from kame | ||||
* | correct non-repetitive ID code, based on comments from niels provos. | 2003-12-10 | 1 | -6/+3 | |
| | | | | | | - seed2 is necessary, but use it as "seed2 + x" not "seed2 ^ x". - skipping number is not needed, so disable it for 16bit generator (makes the repetition period to 30000) |