lukem
8a931fcdd8
Ensure that you can only bind a more specific address when it is done by the
...
same uid or by root.
This code is from FreeBSD. (Whilst it was originally obtained from OpenBSD,
FreeBSD fixed it to work with multicast. To quote the commit message:
- Don't bother checking for conflicting sockets if we're binding to a
multicast address.
- Don't return an error if we're binding to INADDR_ANY, the conflicting
socket is bound to INADDR_ANY, and the conflicting socket has
SO_REUSEPORT set.
)
1999-03-23 10:45:37 +00:00
bad
a5283c98c0
Add support for Token-Ring source routes in the ARP cache.
...
By Onno van der Linden.
1999-03-22 22:30:42 +00:00
perry
d446fb449c
exterminate ovbcopy. patches provided by Erik Bertelsen, pr-7145
1999-03-12 22:42:30 +00:00
mycroft
c6d172438d
Minor cleanup to use LONG_SUM() and CALC_SUMD() more.
1999-03-05 07:27:09 +00:00
explorer
cff4c9630b
Don't mix in data just to stir the rnd pool. Extracting data will do that,
...
any network packets received might, too, so this is already taken care of.
1999-02-28 13:41:24 +00:00
drochner
918dfd95e1
-always do an RARP if revarpwhoarewe() is called, it might be for another
...
interface or the server's configuration has changed
-g/c revarpwhoami()
1999-02-21 15:17:14 +00:00
matt
7ebd19d744
According to Dave Borman, the iss should be using snd_nxt and not rcv_nxt
...
(from tcp_impl mailing-list).
1999-02-05 22:37:24 +00:00
explorer
25d32ef34d
REALLY only update the window when we get an ACK. (the old code seemed broken)
1999-02-04 22:58:37 +00:00
cjs
8befad84b1
Remove SCCS markers and make these compile in $NetBSD$ IDs.
1999-02-02 19:57:30 +00:00
thorpej
a350d7b28b
Set the tunnel destination address correctly. Should fix PR #6899 .
1999-02-02 07:20:13 +00:00
marc
5f688e6632
remove gre_softc declaration; the symbol is no longer used in this
...
file.
1999-02-02 07:10:45 +00:00
mycroft
5e373d307f
Clear mfchashtbl after it's deallocated, to kill a stray pointer. Fixes PR
...
5400.
1999-02-01 15:09:46 +00:00
thorpej
a22cfcf3d4
Make programs that use raw IP work again; trim the header length from ip_len
...
before handing the packet off to the socket.
1999-01-30 21:43:16 +00:00
itohy
7751c2e2eb
~htons(...) is always negative.
1999-01-28 21:29:27 +00:00
thorpej
6c30816c15
Fix a slight error in previous. Rearrange some code in tcp_respond() so
...
that a DIAGNOSTIC check against the destination address is actually
checking the destination address. "oops."
1999-01-26 08:28:50 +00:00
mycroft
8ede79f2b4
One more tweak to the checksum hack, and I promise I'm done. B-)
1999-01-25 15:53:29 +00:00
mycroft
50438b6df0
Absolutely minor tweak to generate better code.
1999-01-25 15:36:50 +00:00
mycroft
70e6acdfef
Update the comment about the checksum hack. It was way out of date.
1999-01-24 13:34:35 +00:00
mycroft
94895652e1
Modify the checksum slightly so that the htons()s can all be combined.
1999-01-24 12:57:38 +00:00
thorpej
a58f271406
Oops, forgot to update copyright notice in previous.
1999-01-24 01:21:18 +00:00
thorpej
86e2c3fbc6
* Completely rewrite syn_cache_respond().
...
- Don't use tcp_respond(), instead create the tcp/ip header from scratch,
and send it ourself.
- Reuse the mbuf that carried the SYN, or allocate one if that is not
available.
- Cache the route we look up to do the Path MTU Discovery check, and
transfer the reference to that route to the inpcb when the connection
completes.
* Macro'ize a small, but often repeated code fragment.
1999-01-24 01:19:28 +00:00
mycroft
b790730226
Fix problems with fr_tcpsum() that prevented the FTP proxy from working.
1999-01-23 08:50:52 +00:00
thorpej
a43786143f
Fix a problem pointed out by Charles Hannum; DF wasn't being set in
...
SYN,ACK packets during Path MTU Discovery. Fix tcp_respond() to do the
appropriate route lookup and set DF as appropriate.
Also, fixup similar code in tcp_output() to relookup the route if it
is down.
1999-01-20 03:39:54 +00:00
mycroft
231a906c71
There's just no plausible reason to byte-swap ip_id internally. It's opaque.
1999-01-19 23:39:56 +00:00
mycroft
7eeb5a04da
Don't screw with ip_len; just subtract from it where we actually use the
...
value.
1999-01-19 23:03:20 +00:00
mycroft
d3ea3de1af
Fix byte-swapping of ip_len in returned IP header.
1999-01-19 22:10:42 +00:00
mycroft
fc1211a6ab
Don't overwrite the checksum fields when checking them. There's no reason to
...
do this, and it screws up ICMP replies.
XXX The returned IP checksum and length are still wrong.
1999-01-19 21:58:40 +00:00
thorpej
4b0e6bb4dc
Domains are associated with protocol families, not address families.
1999-01-14 01:16:55 +00:00
thorpej
98d3903da8
Use the count supplied to the pseudo-device attach routine to dynamically
...
allocate (once) the ipip_softc array; don't assume NIPIP contains the count.
1999-01-13 23:01:20 +00:00
thorpej
555784ccd5
Fix byte order and ip_len inconsistencies in ICMP reply code. Also, fix
...
some formatting and HTONS(foo) vs. foo = htons(foo) inconsistencies.
PR #6602 , Darren Reed.
1999-01-11 22:35:06 +00:00
thorpej
6ae68b4feb
Pull the IP-in-IP tunneling support out of the GRE code. It's not handled
...
by a separate IP-IP input path.
XXX Should eventually do the same thing for IPPROTO_MOBILE.
1999-01-11 21:32:13 +00:00
thorpej
9508f259bf
Adjust for the new IP-IP input path. mrt_ipip_input() is called from
...
ipip_input(), and returns non-zero if mrt_ipip_input() handled the
packet.
XXX Eventually, the multicast code should probably use regular IP-IP
XXX `interfaces', but mrouted knows about the VIF table, etc.
1999-01-11 21:31:03 +00:00
thorpej
9d996b9e4e
Adjust for the new IP-IP input path.
1999-01-11 21:28:28 +00:00
thorpej
9f9be750f6
Separate out the IP-in-IP implementation from the GRE code. This cleans
...
up the interface to ip_mroute.c somewhat, and properly separates IP-IP
from GRE. (They are similar, but they are different protocols, and should
not be implemented in the same place.)
1999-01-11 21:26:53 +00:00
thorpej
5f69dedb2c
ipip_input() -> mrt_ipip_input().
1998-12-22 02:51:32 +00:00
thorpej
54377d1212
Simplify the tunnel lookup routine.
1998-12-22 01:49:04 +00:00
thorpej
12632ebf71
Reverse the copyright-notice-swap. It went against existing practice.
1998-12-19 02:46:12 +00:00
thorpej
4f177aec90
Add a lock around the TCPCB's sequence queue, to prevent tcp_drain()
...
from corrupting the queue if called from a device's interrupt context.
Similar in nature to the problem reported in PR #5684 .
1998-12-18 21:38:02 +00:00
thorpej
ca15e01c76
Add a lock around the IP fragment reassembly queue, to prevent ip_drain()
...
from corrupting the queue if called from a device's interrupt context.
Should fix PR #5684 .
1998-12-18 21:35:11 +00:00
thorpej
93454aafc6
Delay sending if SS_MORETOCOME is set in so_state. This avoids the case
...
where the user issued a write with a length greater than MLEN but less
than MINCLSIZE, thus causing two mbufs to be used. The loop in sosend()
would then call PRU_SEND twice, causing TCP to transmit 2 packets when
it could have transmitted one.
Suggested by Justin Walker <justin@apple.com> on the freebsd-net
mailing list.
1998-12-16 00:33:14 +00:00
mrg
2f2fd097ef
remove this insanity. appeared with ipfilter 3.2.10...
1998-12-11 23:47:16 +00:00
drochner
914642e439
correction to the previous: protect against _LKM too
...
pointed out by Todd Whitesel <toddpw@best.com>
1998-12-11 11:57:33 +00:00
drochner
36b809fed6
correcton tp previous: don't try to include kernel option headers in
...
userland
fixes PR kern/6561 (Takahiro Kambe)
1998-12-11 09:15:42 +00:00
christos
ce96f9960a
defopt IPFILTER_LOG
1998-12-10 15:50:59 +00:00
christos
c7578c510a
defopt
1998-12-10 11:01:01 +00:00
mrg
a94214bdd0
add a patch from darren reed, to make ipfilter use our cksum routine.
1998-11-26 12:21:47 +00:00
sommerfe
0cdf66e377
Fragments should start with a header mbuf allocated by MGETHDR()
1998-11-25 21:13:58 +00:00
mrg
4dd9bebb58
add two more prototypes. noted missing by mjacob.
1998-11-22 23:30:36 +00:00
mrg
78db9d7d95
merge ipf 3.2.10
1998-11-22 15:17:18 +00:00
lukem
0cd1643609
if INADDR_ANY is given in in_pcbconnect(), choose the ia_addr of the first
...
interface, not the ia_broadaddr. should fix [standards/5645] and [kern/6425]
1998-11-16 05:47:19 +00:00