4d7a2eb391
correct panic when ip-in-ip encapsulation is used. found by Masanori Kanaoka
2003-01-21 03:23:44 +00:00
f16a426a0f
Remove variables that are only assigned too but not referenced.
2003-01-19 23:57:01 +00:00
40606ab8f2
switch from kame-based m_aux mbuf auxiliary data, to openbsd m_tag
...
implementation. it will simplify porting across *bsd (such as kame/altq),
and make us more synchronized. from Joel Wilsson
2003-01-17 08:11:49 +00:00
617b132aac
Spell output with two ts.
2003-01-04 23:43:02 +00:00
89b889a8a7
Always recompute the IP checksum, otherwise fast-routed packets that
...
also get natted leave with an invalid checksum which can prevent
things from working properly.
2002-12-11 16:33:11 +00:00
0635de35a3
Remove KDIR=, since SYS_INCLUDE=symlinks and KDIR are not supported any more.
2002-11-26 23:30:07 +00:00
85a8258aac
The "osrc" variable in gre_mobile_input() is only ever set but not
...
referenced; remove it.
2002-11-25 23:37:08 +00:00
d6f8cc841d
Avoid strict-alias warnings.
2002-11-25 01:55:21 +00:00
5521093d4b
Quell an uninitialised variable warning.
2002-11-24 10:52:47 +00:00
5b169b8d2e
Fix a genuine uninitialised variable warning.
2002-11-24 10:51:56 +00:00
9a9deae382
Squash a panic: do not try to print the name of a NULL interface.
2002-11-20 03:52:08 +00:00
50a545a34b
remove all entries in rt timer queue on ip_mtudisc change, instead of
...
destroying the queue.
2002-11-12 02:10:13 +00:00
6a151fcce1
ckout previous - doesn't compile
2002-11-12 01:57:07 +00:00
9a8b644578
update ip_mtudisc sysctl change handling.
2002-11-12 01:38:09 +00:00
c8a8326600
make USE_ENCAPCHECK (in netinet*/*gif.c) to global option, GIF_ENCAPCHECK.
...
#ifdef out unneeded code when possible.
From: Krister Walfridsson <cato@df.lth.se>
2002-11-11 18:35:27 +00:00
e80a17da7b
always create pmtud timeout queue, as ip_mtudisc can be tweaked via
...
sysctl at runtime. From lha@stacken.kth.se
2002-11-10 19:52:16 +00:00
55cd2960c9
In the IP_HDRINCL case of rip_output(), if the mbuf is read-only
...
then copy the header into a new mbuf before modifying it.
Fixes PR 18809. Thanks to Chuq Silvers for diagnosing it.
2002-11-07 17:49:08 +00:00
62b2879585
Fix signed/unsigned comparison warnings.
2002-11-07 07:15:19 +00:00
29ef3e950d
improve gif lookup performance, when there are many of those,
...
by using radix tree for lookups. tested by yshimizu@iij.
2002-11-05 16:58:11 +00:00
caee39d926
Add required IPSEC #include files that prevented this from compiling.
2002-11-05 02:07:25 +00:00
61eed162b2
cleanup ipsec.h dependency. commented by perry, sync w/kame
2002-11-02 19:03:44 +00:00
6858187df6
/*CONTCOND*/ while (0)'ed macros
2002-11-02 07:20:42 +00:00
e0cc03a09b
merge kqueue branch into -current
...
kqueue provides a stateful and efficient event notification framework
currently supported events include socket, file, directory, fifo,
pipe, tty and device changes, and monitoring of processes and signals
kqueue is supported by all writable filesystems in NetBSD tree
(with exception of Coda) and all device drivers supporting poll(2)
based on work done by Jonathan Lemon for FreeBSD
initial NetBSD port done by Luke Mewburn and Jason Thorpe
2002-10-23 09:10:23 +00:00
3b5f6123fa
fix typo in previous: s/tip/top/
2002-10-22 07:22:19 +00:00
163bdfc19e
Make sure TF_REQ_TSTMP and TF_REQ_SCALE get set correctly in the new
...
TCPCB in the passive-open case.
Fixes PR 18677.
2002-10-22 04:24:50 +00:00
d79a5f79da
Guard use of "ostate" with #ifdef TCP_DEBUG in tcp_usrreq().
...
Don't put semicolons at the end of "#define token value".
2002-10-22 03:14:16 +00:00
4dd4549b31
Guard use of "so" in tcp_timer_persist() and tcp_timer_2msl() with
...
#ifdef TCP_DEBUG.
2002-10-22 03:11:03 +00:00
ce9de06a5d
In tcp_input():
...
Remove the set-but-not-used "proto" variable.
Guard the "ostate" variable in #ifdef TCP_DEBUG.
Remove the set-but-not-used "parentinpcb" variable in syn_cache_get().
2002-10-22 03:07:06 +00:00
8b9702b758
Micro-optimisation: don't check if the high bit is set and then mask it
...
off - just mask it off anyways. Saves a branch 50% of the time.
2002-10-22 02:53:59 +00:00
ddac8bbac4
Oops, still need the call to va_arg() to advance the args pointer.
2002-10-22 02:44:34 +00:00
da0d919807
"off" in rip_input() is set but not used, remove it.
...
static global "ripsrc" is never used, remove it.
2002-10-22 02:34:47 +00:00
e6a79d25e7
"error" in in_pcbbind() was only ever set but not used, remove it.
2002-10-22 02:31:16 +00:00
dc50de01ff
"newifaddr" in in_control() was set but never used, remove it.
2002-10-22 02:28:47 +00:00
2fffb9beb4
correct log_refused check (TH_SYN, !TH_RST and !TH_ACK). PR 18669
2002-10-16 15:15:28 +00:00
d0eadcfb84
Add missing "needs-flag".
2002-10-11 15:58:20 +00:00
5b2b587c85
Move netinet, netinet6, ipsec, and ipfilter config defns to
...
netinet/files.ipfilter, etinet/files.netinet, netinet6/files.netinet6,
and netinet6/files.netipsec.
XXX There are still a few stragglers in conf/files, which are entangled
with other network protocols.
2002-10-10 22:45:45 +00:00
5aaa8070be
Remove unused ipl_usec.
2002-09-29 17:55:14 +00:00
167b0b8ebd
minor KNF
2002-09-25 11:19:23 +00:00
9d27b7540e
one too many whitespace
2002-09-25 07:37:12 +00:00
15e6ca78da
Fix ipmon problems on 64-bit platforms (PR#17403 and PR#17404).
2002-09-25 06:43:17 +00:00
17aee57321
Relax overly-conservative TCP option parsing used by ipnat when
...
hunting for an MSS option to clamp. The previous code assumed that at least
one more byte of options (such as a TCPOPT_EOL) would follow the MSS
option; now, we allow the MSS option to end on the last byte of the
TCP header.
Packets have been observed "in the wild" with a TCP header length of
'6' (24 bytes.. 20 bytes fixed header, 4 bytes options) with a 4-byte
MSS option exactly filling the 4 bytes of options payload and no
following TCPOPT_EOL.
RFC793 is quite explicit that the EOL byte:
" .. need only be used if the end of the options would not
otherwise coincide with the end of the TCP header."
2002-09-24 14:14:25 +00:00
38e6856368
revert mtudisc_timeout value to the old one if update falis
2002-09-23 13:43:27 +00:00
4e3613273b
Remove breaks after returns, unreachable returns and returns after
...
returns(!).
2002-09-23 05:51:10 +00:00
b69124b84c
Resync with official IPF
2002-09-19 08:12:43 +00:00
87f18f024e
Upgraded IPFilter to 3.4.29
2002-09-19 08:08:14 +00:00
04978010b2
From FreeBSD (1.164) courtesy of Maxim Konovalov:
...
"In rare cases when there is no room for ip options ip_insertoptions()
can fail and corrupt a header length. Initialize len and check what
ip_insertoptions() returns."
2002-09-17 13:10:59 +00:00
129af72834
In the txsegsize bounding code, it is not necessary to adjust for the options
...
length.
2002-09-13 18:26:55 +00:00
9401012487
KNF - return is not a function. sync w/kame.
2002-09-11 02:46:42 +00:00
6dedde045a
correct signedness mixup in pointer passing. sync w/kame
2002-09-11 02:41:19 +00:00
c2428db9db
Make usr.sbin/ipf/ipftest compiles again.
2002-09-07 00:10:24 +00:00
itojun