Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
80,334 Commits 606 Branches 0 Tags 3.1 GiB
fc85452e83
Commit Graph

375 Commits

Author SHA1 Message Date
itojun
f4d5905544 there's no need to #if NFAITH here. IN6P_FAITH can be set even on 
NFAITH == 0 kernel, it is safer to always check the condition.
sync with kame.
 2001-05-11 18:38:03 +00:00
itojun
63181d71c1 correct ecn consideration on tunnel encap/decap. sync with kame. 2001-05-10 01:37:42 +00:00
itojun
1bec764d78 correct faith prefix determination. use sys/netinet/if_faith.c:faithprefix() 
to determine.  sync with kame.
(without this change, non-faith socket may mistakenly accept for-faith traffic)
 2001-05-08 10:15:13 +00:00
itojun
d1b6307b88 do not copy TTL field on ipsec tunnel mode encapsulation. sync with kame 2001-04-15 01:55:49 +00:00
thorpej
bf2dcec4f5 Remove the use of splimp() from the NetBSD kernel. splnet() 
and only splnet() is allowed for the protection of data structures
used by network devices.
 2001-04-13 23:29:55 +00:00
itojun
f4e4c674a7 disallow userland programs from specifying addresses with IPV6_PKTINFO 
setsockopt, if:
- the address is not verified by DAD (= not ready)
- the address is an anycast address (= not permitted as source)
sync with kame
 2001-04-11 04:57:53 +00:00
itojun
5ed8fd262b suppress RS/RA log messages (can be re-enabled by net.inet6.icmp6.nd6_debug), 
as they may fill up /var.  sync with kame.
 2001-04-04 06:28:41 +00:00
itojun
2abaa8eae5 make sure rcvif is sane on call to icmp6_reflect 2001-04-04 06:28:40 +00:00
itojun
92969654c0 enable FAKE_LOOPBACK_IF case by default. 
now traffic on loopback interface will be presented to bpf as normal wire
format packet (without KAME scopeid in s6_addr16[1]).

fix KAME PR 250 (host mistakenly accepts packets to fe80::x%lo0).

sync with kame.
 2001-03-30 11:08:56 +00:00
itojun
dbcd4b8d03 fix constness of IN6_{IS,ARE}_xx with RFC2553. sync with kame. 2001-03-30 05:53:52 +00:00
itojun
2fb1887b31 re-initialize mopt in ip6_insert_jumboopt(). sync with kame 
From: csapuntz@stanford.edu
 2001-03-25 09:58:43 +00:00
itojun
0c8d8ae7a0 couple of missing splx. sync with kame. 
From: csapuntz@play-doh.stanford.edu (Constantine Sapuntzakis)
 2001-03-25 09:06:03 +00:00
itojun
3e898c9239 in nd6_cache_lladdr(), set nd6_gctimer to ln_expire just after the state 
transition to STALE.  fixes tahi test breakage.  sync with kame.
 2001-03-21 21:56:29 +00:00
thorpej
20fe4e2d96 Add a protosw flag, PR_ABRTACPTDIS (Abort on Accept of Disconnected 
Socket), and add it to the protocols that use that behavior (all
PR_LISTEN protocols except for PF_LOCAL stream sockets).
 2001-03-21 19:22:27 +00:00
itojun
4ce63adb1e do not inject packets to ipfilter, if the packet went through IPsec tunnel. 
http://www.netbsd.org/Documentation/network/ipsec/#ipf-interaction
 2001-03-21 19:12:56 +00:00
itojun
93b8b31feb set rmx_mtu to L2 interface mtu, instead of 0, on mtudisc timeout. 
ip6_output() change is for safety.  sync with kame
 2001-03-21 07:52:13 +00:00
itojun
e4ecd03f2a drop packets with link-local addresses, 
if (internally-used) interface ID portion is already filled.  sync with kame
 2001-03-16 12:22:34 +00:00
itojun
27a0af5865 nd6_storelladdr() was not consistent about m_freem() policy. 
do not touch RTF_STATIC entries (static ND entries) on ND cache update.
couple of costmetic sync.  sync with kame
 2001-03-08 10:49:32 +00:00
itojun
7695280d34 more missing splx. from kame 2001-03-08 10:48:40 +00:00
itojun
912f42ecda remove bogus rtfree. sync with kame. inspired by openbsd PR 1706. 2001-03-08 00:19:03 +00:00
itojun
4e45315377 missing splx. from aaron@openbsd. sync with kame 2001-03-07 22:50:14 +00:00
itojun
c9e08725bc avoid possible alignment issue. sync with kame 2001-03-04 16:49:17 +00:00
itojun
dc3424f555 pass key to rijndael logic as binary, not hexadecimal string. 
sync with kame
 2001-03-02 15:42:39 +00:00
itojun
f03176a0a8 have comment that refers to kame COVERAGE document. sync with kame 2001-03-02 04:55:40 +00:00
itojun
8c8c2f71a4 the date string in KAME version is getting very meaningless, remove. 2001-03-02 04:52:54 +00:00
itojun
2d6047cff9 make sure to enforce inbound ipsec policy checking, for any protocols on top 
of ip (check it when final header is visited).  sync with kame.
XXX kame team will need to re-check policy engine code
 2001-03-01 16:31:37 +00:00
itojun
233e3963ed make sure to validate packet against ipsec policy. 2001-02-26 07:20:44 +00:00
cgd
023e9f0649 C requires that labels be followed by statements. 2001-02-24 00:01:22 +00:00
itojun
f2a66201fc garbage-collect stale ND entries (default: 1 day). 
RFC 2461 5.3.  sync with kame.
 2001-02-23 08:02:41 +00:00
itojun
e1196a8f6e remove unnecessary state, ND6_LLINFO_WAITDELETE, from neighbor cache 
state machine.
no need for RTF_REJECT on neighbor cache entires, they are leftover from
ARP code.
sync with kame.
 2001-02-23 06:41:50 +00:00
itojun
2df943e652 correct handling of upper limitation to # of reass queue. 2001-02-22 05:04:42 +00:00
itojun
49889b3afd be more more picky about option length parsing. sync with kame 2001-02-22 01:40:25 +00:00
itojun
e1e316562b make validation code more strict for ND6/dest6 variable length headers. 
check duplicated nd6_ifinfo table initialization in a better way.
sync with kame
 2001-02-21 17:23:09 +00:00
itojun
96413230d1 style, to make kame sync easier 2001-02-21 16:28:43 +00:00
itojun
52f2cece9f tighten AH IPv4 option chasing more. drop too short (< 2) option. 
sync with kame.
 2001-02-21 01:27:58 +00:00
itojun
c9928e0ab1 need PR_ADDR|PR_ATOMIC for IPPROTO_EON. fix typo. from chopps, sync with kame 2001-02-21 00:11:53 +00:00
itojun
da8a3f0179 add AF_ISO case to output. from chopps. 2001-02-20 10:41:47 +00:00
itojun
176db3e930 ISO over IPv4/v6 by EON encapsulation. from chopps, sync with kame. 2001-02-20 08:49:15 +00:00
itojun
5bc3f3ff96 correct IPv4 option handling. 2001-02-19 04:24:27 +00:00
itojun
26a76076be correct IPv4 option header chasing. the old code may overrun the buffer 
if the option header is truncated.  sync with kame
 2001-02-19 03:47:01 +00:00
itojun
e6dbed9659 wording in comment. 
is contradict -> "is contradictory", or "contradicts".
 2001-02-16 15:13:40 +00:00
itojun
f99a50f858 protect router list management by splsoftnet properly. sync with kame 2001-02-11 07:12:01 +00:00
itojun
1bc6ca28a1 make sure to clean ln_byhint on reachability confirmation. 2001-02-11 07:00:03 +00:00
itojun
1442c06fae wrap kernel-only #define (kame cross-bsd portability) into _KERNEL. 2001-02-11 06:50:59 +00:00
itojun
bc5a6e2482 pull latest kame pcbnotify code. synchronizes ICMPv6 path mtu discovery 
behavior with other protocols (i.e. validation, use of hiwat/lowat).
 2001-02-11 06:49:49 +00:00
itojun
2390806e17 whitespace sync with kame 2001-02-11 05:25:04 +00:00
itojun
5318e0ee0f remove #ifdef __FreeBSD__. 2001-02-11 05:24:21 +00:00
itojun
37bb4bf58b set frag6_doing_reass properly (for frag6_drain). sync with kame. 2001-02-11 05:05:27 +00:00
itojun
7781d63a92 recover $NetBSD$ (removed by mistake) 2001-02-11 04:53:49 +00:00
itojun
9a9c998cc7 add missing IFAFREE() in error recovery case. 2001-02-11 04:29:30 +00:00