ab492849bc
implement net.inet.icmp.errppslimit.
...
make default value for net.inet.icmp.erratelimit to 0, as < 10ms value
does not do the right thing.
2000-07-10 09:31:29 +00:00
8a661b9beb
be more cautious about tcp option length field. drop bogus ones earlier.
...
not sure if there is a real threat or not, but it seems that there's
possibility for overrun/underrun (like non-NOP option with optlen > cnt).
2000-07-09 12:49:08 +00:00
ec67eee51f
sync with kame.
...
introduce in6_{recover,embed}scope, for in-kernel scoped-address manipulation.
improve in6_pcbnotify.
2000-07-07 15:54:16 +00:00
210a3e2f80
remove unnecessary #include <netkey/key_debug.h>. from kame.
2000-07-06 12:51:39 +00:00
0a1e211454
- do not use bitfield for router renumbering header.
...
- add protection mechanism against ND cache corruption due to bad NUD hints.
- more stats
- icmp6 pps limitation. TOOD: should implement ppsratecheck(9).
2000-07-06 12:36:18 +00:00
70140a566d
Some slight cleanup.
2000-07-06 04:34:26 +00:00
9c86b65a92
Fix an omission in the gre cloning changes.
2000-07-05 22:45:25 +00:00
6a900bc9ff
Fix some zero-vs-NULL confusion.
2000-07-05 21:45:14 +00:00
f77f419c50
Make that note that we really should be checking the viftable
...
in ip_mroute.c for duplicate tunnel entries, too. Well, what
really needs to happen is that the mrouting code needs to be
changed to work w/ `gif' tunnels... but...
2000-07-05 21:32:51 +00:00
4348603862
RFCs 1853, 2003, 2401 -- copy the DF bit.
2000-07-05 21:01:38 +00:00
e5c397199f
Use LIST_HEAD_INITIALIZER(), for correctness sake.
2000-07-05 18:45:26 +00:00
f142d4254d
added a linted comment about non-portable bitfields. Unfortunately it cannot
...
be fixed portably.
2000-07-05 02:45:03 +00:00
f0d7296dc1
typo in previous
2000-07-02 21:25:41 +00:00
e29fba4ba7
do not touch struct ip6stat on non-INET6 compilation.
...
From: Paul Goyette <paul@whooppee.com>
2000-07-02 21:05:41 +00:00
8ff902fca1
repair kernel faithd(8) support. there were two mistakes:
...
(1) tcp6_input dropped packets for translation
(2) in6_pcblookup_connect was too strict
2000-07-02 08:04:10 +00:00
8f2d5e3219
Don't rate-limit ICMP errors from packets we send to ourselves.
...
The dns resolver depends on reliably receiving errors to allow it to
quickly detect a dead local nameserver.
2000-07-01 21:46:40 +00:00
c8875e6066
Pass the correct destination address for the route-to-gateway case.
...
From Zdenek Salvet, kern/10483.
2000-06-30 19:43:53 +00:00
23f6a4f4e8
remove old mbuf assumption (ip header and tcp header are on the same mbuf).
...
this is for m_pulldown use. (sync with kame)
2000-06-30 16:44:33 +00:00
cf594a3f4d
<vm/vm.h> -> <uvm/uvm_extern.h>
2000-06-28 03:01:16 +00:00
5ec6fd267b
remove include of <vm/vm.h>
2000-06-28 02:59:32 +00:00
d2787dad27
XNS5.2: define sa_family_t and use it where specified by the standard.
2000-06-26 15:48:19 +00:00
2f159a1bac
remove/move more mach vm header files:
...
<vm/pglist.h> -> <uvm/uvm_pglist.h>
<vm/vm_inherit.h> -> <uvm/uvm_inherit.h>
<vm/vm_kern.h> -> into <uvm/uvm_extern.h>
<vm/vm_object.h> -> nothing
<vm/vm_pager.h> -> into <uvm/uvm_pager.h>
also includes a bunch of <vm/vm_page.h> include removals (due to redudancy
with <vm/vm.h>), and a scattering of other similar headers.
2000-06-26 14:20:25 +00:00
e21a3d997c
Don't copy M_EXT mbufs unless in "dhcp" mode. Do a mtod after the pullup
...
to make sure the ip pointer is still valid.
2000-06-16 20:21:26 +00:00
07098cd363
better conformance to draft-ietf-ipngwg-icmp-name-lookups-05.
...
the old code was chimera of 03 and 05 draft.
-n by default, since IPv6 reverse lookup takes too much time.
use -H to enable reverse name lookup.
2000-06-12 16:21:02 +00:00
ecbf42696a
Remove a duplicated check for the NetBSD callout (I think it is a mistake
...
from a previous conflict resolve which doesn't cause harm).
2000-06-12 10:41:36 +00:00
886013b9e7
Ups, forgot to resolve one place.
2000-06-12 10:29:36 +00:00
d6dd29c882
Resolve conflicts.
2000-06-12 10:28:20 +00:00
bae005d1db
add icmpreturndatabytes kernel variable (default 8) which specifies the
...
number of extra data bytes to return in ICMP error messages. This is
also available via sysctl as net.icmp.returndatabytes and is limited to
[8,512].
2000-06-10 12:39:19 +00:00
8987054176
pass struct proc * down to udp6_output and in6_pcbbind.
2000-06-05 06:38:22 +00:00
c02ef5cc85
Resolve conflicts.
2000-05-23 06:07:42 +00:00
5de72de121
disallow negative numbers for ratelimit interval (tcp, icmp, icmp6).
2000-05-22 12:08:43 +00:00
b0c4d85748
Add a missing ; at the end of a line.
2000-05-21 18:47:00 +00:00
4c4ad1d1a5
Resolve conflicts.
2000-05-21 18:45:53 +00:00
ca31d672e2
Install "show arptab" (db_show_arptab) in the ddb command tree.
...
Move prototype from netinet/if_inarp.h to ddb/db_interface.h.
Change function to have standard ddb parameters (though they're
ignored).
2000-05-20 03:08:41 +00:00
8db28cd918
Resolve conflicts and fix a compile error in ip_ftp_pxy.c.
2000-05-11 19:46:05 +00:00
8a0fabf8cf
add missing boundary checks to ip options processing.
...
correct timestamp option validation (len and ptr upper/lower bound
based on RFC791).
fill "pointer" field for parameter problem in timestamp option processing.
2000-05-10 03:31:30 +00:00
b3c4ed6cf7
correct more out-of-bounds memory access, if cnt == 1 and optlen > 1.
2000-05-10 01:19:44 +00:00
4a12628c71
correct out-of-bound access when hlen == 1 and opt > 1.
...
reviewed by darren, darren committed to freebsd fil.c (1.12 -> 1.13)
so it should be correct enough.
2000-05-10 00:08:03 +00:00
90f481ef3f
Handle large offsets with very small options correctly.
2000-05-06 16:35:14 +00:00
176e840713
GC in_interfaces.
2000-05-06 02:41:32 +00:00
650107086a
remove superfluous test (snd_una is always > iss since th_ack must > iss
...
(first test at start of case) and th_ack is assigned to snd_una).
2000-05-05 15:05:29 +00:00
5a6e4c896c
From PR #3733 : Only disarm timer if SYN contained the ACK bit since if
...
it didn't it would be a crossing/simultaneous SYN and doesn't mean the
remote TCP received our SYN.
2000-05-05 14:51:46 +00:00
21dea2100c
Resolve conflicts.
2000-05-03 11:12:03 +00:00
a5ff71cecc
One more __attribute__((__packed__)) to dissuade egcs from making
...
unwarranted asumptions about the structure's alignment.
2000-05-02 14:15:07 +00:00
3075a916cc
sync with more recent kame. defer inclusion of net/if_gif.h.
2000-04-26 05:36:41 +00:00
c63f06acd3
IN_MULTICAST() takes in_addr.s_addr as argument, not pointer to it.
2000-04-20 01:59:22 +00:00
d300ce3942
add net/if_stf.h and netinet/ip_encap.h (almost noone will include them though)
2000-04-19 06:39:15 +00:00
3909133548
introduce sys/netinet/ip_encap.c, to dispatch inbound packets
...
to protocol handlers, based on src/dst (for ip proto #4/41).
see comment in ip_encap.c for details of the problem we have.
there are too many protocol specs for ip proto #4/41.
backward compatibility with MROUTING case is now provided in ip_encap.c.
fix ipip to work with gif (using ip_encap.c). sorry for breakage.
gif now uses ip_encap.c.
introduce stf pseudo interface (implements 6to4, another IPv6-over-IPv4 code
with ip proto #41 ).
2000-04-19 06:30:51 +00:00
e34eb900c0
remove an LBL ifdef that we can't turn on anyway.
2000-04-16 20:59:49 +00:00
46faa6bb58
remove ifdefs to skip htons() on some big-endian platforms.
2000-04-16 20:58:52 +00:00
itojun