summaryrefslogtreecommitdiff
path: root/sys/netinet6
AgeCommit message (Collapse)Author
2003-12-26Niels Provos kindly agreed to drop clauses 3 and 4 from thewiz
license -- thanks. Based on OpenBSD commit and hints by itojun.
2003-12-17Fix ICMPV6CTL_ND6_[DP]RLIST, they broke with new sysctl.lha
Makes ndp -r/ndp -p work again, patch from atatat
2003-12-10fix cases where pktinfo specifies outgoing interface of "0".itojun
2003-12-10use if_indexlim (instead of if_index) and ifindex2ifnet[x] != NULLitojun
to check if interface exists, as (1) if_index has different meaning (2) ifindex2ifnet could become NULL when interface gets destroyed, since when we have introduced dynamically-created interfaces. from kame
2003-12-10validate set/getsockopt arg more strictly. with previous code privilegeditojun
user can cause kernel crash.
2003-12-10comment from niels provos;itojun
- seed2 is necessary, but use it as "seed2 + x" not "seed2 ^ x". - skipping number is not needed, so disable it for 16bit generator (makes the repetition period to 30000)
2003-12-04Dynamic sysctl.atatat
Gone are the old kern_sysctl(), cpu_sysctl(), hw_sysctl(), vfs_sysctl(), etc, routines, along with sysctl_int() et al. Now all nodes are registered with the tree, and nodes can be added (or removed) easily, and I/O to and from the tree is handled generically. Since the nodes are registered with the tree, the mapping from name to number (and back again) can now be discovered, instead of having to be hard coded. Adding new nodes to the tree is likewise much simpler -- the new infrastructure handles almost all the work for simple types, and just about anything else can be done with a small helper function. All existing nodes are where they were before (numerically speaking), so all existing consumers of sysctl information should notice no difference. PS - I'm sorry, but there's a distinct lack of documentation at the moment. I'm working on sysctl(3/8/9) right now, and I promise to watch out for buses.
2003-12-04netbsd.org -> NetBSD.orgkeihan
This was the last commit of this kind to src/sys, which is now totally "NetBSD.org clean". Thanks for the patiance, and sorry for all the commits.
2003-11-25"seed2" was ruining non-repeating property, so remove it. discussed on tech-netitojun
2003-11-17Revert the (default) ip_id algorithm to the pre-randomid algorithm,jonathan
due to demonstrated low-period repeated IDs from the randomized IP_id code. Consensus is that the low-period repetition (much less than 2^15) is not suitable for general-purpose use. Allocators of new IPv4 IDs should now call the function ip_newid(). Randomized IP_ids is now a config-time option, "options RANDOM_IP_ID". ip_newid() can use ip_random-id()_IP_ID if and only if configured with RANDOM_IP_ID. A sysctl knob should be provided. This API may be reworked in the near future to support linear ip_id counters per (src,dst) IP-address pair.
2003-11-12implement net.inet6.ifqitojun
2003-11-06correct behavior when ipv6mr_interface is 0. Matthias Drochneritojun
2003-11-05use hash table for in6_pcbbind(). similar to in_pcb 1.89 -> 1.90itojun
2003-11-03Revert the change in default value of ipv6_v6only. Further discussionbriggs
on this topic is required. It should be reintroduced and pursued in the IETF.
2003-10-30Remove some assigned-to but otherwise unused variables.simonb
2003-10-29Do a jump optimization that eliminates some uninitialized variable warnings.mycroft
2003-10-28Toggle the default value of ip6_v6only. Also provide a sample sysctl tobriggs
retain the existing behavior.
2003-10-25fix uninitialized variableschristos
2003-10-15backout previous (ENETREST special handlng)itojun
2003-10-15ignore ENETRESET on ADDMULTIitojun
2003-10-15ignore ENETRESET on ADDMULTI.itojun
2003-10-15define struct prf_ra outside of in6_prflags, to be c++ friendly. sync w/kameitojun
2003-10-14fix endian bug in fragment header scanning.itojun
2003-10-03no need to clear mbuf flags here; sync w/kameitojun
2003-10-03when dropping M_PKTHDR, need to free m_tag associated with it.itojun
2003-10-03use in6_{embed,recover}scope for scoped address manipulationitojun
2003-10-03shouldn't check scope match when encapsulating packet into tunnel mode.itojun
iij seil team
2003-10-02do not deref state.ro if it is NULLitojun
2003-10-02correctly look at outer IPv6 header when forwarding packet into ipsec tunnel.itojun
iij seil team
2003-10-02permit tunnel mode over link-local address. (outer header is link-local)itojun
iij seil team
2003-10-02handle link-local address in ipsec6_tunnel_validate(). from iij seli teamitojun
2003-09-30Fix off-by-one in PRC_NCMDS check. From FreeBSD via OpenBSDchristos
2003-09-28Remove some code that breaks AH tunnels completely. The comment describingmycroft
the purpose of this code appears to be on crack -- it's talking about end-to-end authentication, but the purpose of an AH tunnel is NOT end-to-end authentication; it's authentication of the tunnel endpoints. NB: This does not fix the fact that IPsec leaks "packet tags."
2003-09-26Process has only one c. From miod@openbsd.wiz
2003-09-22mark security policy that should persist in the system "persistent".itojun
this should prevent recently-reported kernel panic when "spdflush" is issued.
2003-09-20separate netkey/key* and netipsec/key*itojun
2003-09-16exp is a reserved name under posixitojun
2003-09-15avoid overflow during multiply. David Laightitojun
2003-09-13correct ru_a/ru_b setup for 20bit caseitojun
2003-09-12change confusing filenameitojun
2003-09-12remove extra blank lineitojun
2003-09-12make synchronization w/ PF tag support code easieritojun
2003-09-12make it possible to SADB_DUMP via sysctl. request by mrgitojun
2003-09-10record socket * associated with secpolicyitojun
2003-09-09lintitojun
2003-09-07- prepare for RFC2401bis 64bit sequence number (no behavior change yet)itojun
- use hash for SPI-based SAD entry lookup (should be faster, i hope) - cleanup keydb.c and key.c. key.c is responsible for refcounting secasvar, keydb.c is responsible for alloc/free.
2003-09-07prototype should have no variable nameitojun
2003-09-06correct seed generation. sync w/ kameitojun
2003-09-06fix comment, from kameitojun
2003-09-06committed by mistake, sorryitojun