summaryrefslogtreecommitdiffstats
path: root/sys/netinet
Commit message (Collapse)AuthorAgeFilesLines
* According to RFC 793, a reset should be honored if the sequence numberjlemon1999-12-112-14/+12
| | | | | | | is within the receive window. Follow this behavior, instead of only allowing resets at last_ack_sent. Pointed out by: jayanth@yahoo-inc.com
* Fix a '&&' that should have been a '&'.archie1999-12-101-1/+1
| | | | Submitted by: Erik Salander <erik@whistle.com>
* Fix several typos.archie1999-12-091-17/+17
| | | | Submitted by: Erik Salander <erik@whistle.com>
* Make this buildable with MROUTING defined.shin1999-12-081-1/+1
| | | | Specified by: eivind, phk
* udp IPv6 support, IPv6/IPv4 tunneling support in kernel,shin1999-12-0714-66/+707
| | | | | | | | | | packet divert at kernel for IPv6/IPv4 translater daemon This includes queue related patch submitted by jburkhol@home.com. Submitted by: queue related patch from jburkhol@home.com Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
* Last minute patch that I forgot to apply: check return code of iplattach()guido1999-12-061-0/+2
|
* Revive mlfk_ipl here. This version is slightly changed fromguido1999-12-066-12/+181
| | | | | | | | | | | | | the old one: an unnecessary define (KLD_MODULE) has been deleted and the initialisation of the module is done after domaininit was called to be sure inet is running. Some slight changed were made to ip_auth.c and ip_state.c in order to assure including of sys/systm.h in case we make a kld Make sure ip_fil does nmot include osreldate in kernel mode Remove mlfk_ipl.c from here: no sources allowed in these directories!
* Miscellaneous fixes/cleanups relating to ipfw and divert(4):archie1999-12-066-192/+235
| | | | | | | | | | | | | - Implement 'ipfw tee' (finally) - Divert packets by calling new function divert_packet() directly instead of going through protosw[]. - Replace kludgey global variable 'ip_divert_port' with a function parameter to divert_packet() - Replace kludgey global variable 'frag_divert_port' with a function parameter to ip_reass() - style(9) fixes Reviewed by: julian, green
* Change the delayed ack time from 200ms to 100ms.jlemon1999-12-021-1/+1
| | | | | | | | This results in closer behavior to earlier versions, where the fixed 200ms timer actually resulted in a delay anywhere from 1..200ms, with the average delay being 100ms. Pointed out by: dg
* RTFREE the correct route entry in dummynet_io(). The previousluigi1999-11-261-3/+3
| | | | | | code failed in handling things like "forward" actions. Reported-and-tested-by: Jean-Hugues ROYER jhroyer@joher.com
* Get rid of useless osreldate include for KLD/LKM modules (sys/param.hguido1999-11-231-2/+0
| | | | | already carries what is needed). This is needed for the KLD support.
* Add kernel parts of revived ipfilter (3.3.3.)guido1999-11-2319-0/+10805
|
* KAME netinet6 basic part(no IPsec,no V6 Multicast Forwarding, no UDP/TCPshin1999-11-227-29/+225
| | | | | | | | | | for IPv6 yet) With this patch, you can assigne IPv6 addr automatically, and can reply to IPv6 ping. Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
* Fix a warning and a potential panic if TCPDEBUG is active. (tp ispeter1999-11-181-0/+2
| | | | a wild pointer and used by TCPDEBUG2())
* The logic for blackhole processing does not free mbufs if thephk1999-11-171-0/+2
| | | | | | | | blackhole flag is set. PR: 14958 Submitted by: Larry Baird <lab@gta.com> Reviewed by: phk
* add two more codes to ICMP error 12 (Parameter Problem).jmb1999-11-151-0/+2
| | | | | | these two are detailed in RFC1700. Reviewed by: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
* Restore sub-chapters order.phantom1999-11-091-19/+16
| | | | | PR: docs/14766 Submitted by: Kazutoshi Kubota <kazu@iworks.co.jp>
* Undo rev 1.10, which took out TH_FIN from the CLOSING state. Thisjlemon1999-11-071-1/+1
| | | | breaks simultaneous closes.
* KAME related header files additions and merges.shin1999-11-0513-35/+120
| | | | | | | (only those which don't affect c source files so much) Reviewed by: cvs-committers Obtained from: KAME project
* Append missing newline to log() message for permanent ARP modificationsheldonh1999-10-181-1/+1
| | | | | | | attempt warning, which was added in rev 1.48 . PR: 14371 Submitted by: sec@pi.musin.de (Stefan `Sec` Zehl)
* Nuke the old antique copy of ipfilter from the tree. This is old enoughpeter1999-10-1018-9034/+0
| | | | | | | | to be dangerous. It will better serve us as a port building a KLD, ala SKIP. The hooks are staying although it would be better to port and use the NetBSD pfil interface rather than have custom hooks.
* Implement RLIMIT_SBSIZE in the kernel. This is a per-uid sockbuf totalgreen1999-10-092-4/+4
| | | | usage limit.
* Properly handle the case when either the aliasing or source address ofru1999-09-271-26/+66
| | | | | | | | | | | | | the link are equal to the default aliasing address. Do not zero them! This will fix the problem with non-working links added with the source and/or aliasing address equal to the default aliasing address, but the default aliasing address is set later, after the link has been set up, like both natd(8) and ppp(8) do (for objective reasons). Reviewed by: Brian Somers <brian@FreeBSD.org>, Eivind Eklund <eivind@FreeBSD.org>, Charles Mott <cmott@srv.net>
* Remove five now unused fields from struct cdevsw. They should neverphk1999-09-251-5/+0
| | | | | | | | have been there in the first place. A GENERIC kernel shrinks almost 1k. Add a slightly different safetybelt under nostop for tty drivers. Add some missing FreeBSD tags
* ReLink() partial links in FindLinkOut() in the same manner as we do itru1999-09-221-7/+15
| | | | | | in FindLinkIn(). This will make TcpMonitorIn()/TcpMonitorOut() happy. Reviewed by: eivind
* Restore previous version of FindLinkIn().ru1999-09-211-9/+8
| | | | | Instead, natd(8) should be fixed to call PacketAliasSetAddress() as part of initialization, as required by libalias(3).
* - Make partially specified permanent links (without `dst_addr' and/orru1999-09-211-11/+25
| | | | | | | | | | | `dst_port') work for outgoing packets. - Make permanent links whose `alias_addr' matches the primary aliasing address `aliasAddress' work for incoming packets. - Typo fixes. Reviewed by: brian, eivind
* sys/errno.h -> errno.hbrian1999-09-211-1/+1
|
* Change so_cred's type to a ucred, not a pcred. THis makes more sense, actually.green1999-09-195-22/+15
| | | | | | Make a sonewconn3() which takes an extra argument (proc) so new sockets created with sonewconn() from a user's system call get the correct credentials, not just the parent's credentials.
* Re-arrange the arp code so that fddi arps work properly.lile1999-09-161-29/+46
|
* Reorder.des1999-09-141-4/+4
|
* Fix some more disordering, as well as the description string for thedes1999-09-142-12/+12
| | | | | net.inet.tcp.drop_synfin sysctl, which for some mysterious reason said "Drop TCP packets with FIN+ACK set" (instead of "...with SYN+FIN set")
* Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctldes1999-09-122-0/+58
| | | | | variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel options, respectively. See the comments in LINT for details.
* - Optimization to the previous (rev 1.15) commit.ru1999-09-101-9/+11
| | | | | | Requested by: eivind Discussed with: eivind Reviewed by: brian, eivind
* Handle TCP reset sequence properly.ru1999-09-091-2/+2
| | | | | | | | | | | | | | | | | | | In the words of originator: :If an incoming connection is initiated through natd and deny_incoming is :not set, then a new alias_link structure is created to handle the link. :If there is nothing listening for the incoming connection, then the kernel :responds with a RST for the connection. However, this is not processed :correctly in libalias/alias.c:TcpMonitor{In,Out} and :libalias/alias_db.c:SetState{In,Out} as it thinks a connection :has been established and therefore applies a timeout of 86400 seconds :to the link. : :If many of these half-connections are initiated (during, for example, a :port scan of the host), then many thousands of unnecessary links are :created and the resident size of natd balloons to 20MB or more. PR: 13639 Reviewed by: brian
* Fix typo.ru1999-09-081-1/+1
|
* Simplify, and return an error if the user attempts to set a TCPjlemon1999-08-311-7/+3
| | | | | | time value which results in < 1 tick. Suggested by: bde
* Remove conversion macros that were used during development.jlemon1999-08-311-9/+1
|
* Add a SYSCTL_PROC so that TCP timer values are now expressed tojlemon1999-08-311-10/+35
| | | | | | the user in ms, while they are stored internally as ticks. Note that there probably are rounding bogons here, especially on the alpha.
* Restructure TCP timeout handling:jlemon1999-08-3011-409/+690
| | | | | | | | | | - eliminate the fast/slow timeout lists for TCP and instead use a callout entry for each timer. - increase the TCP timer granularity to HZ - implement "bad retransmit" recovery, as presented in "On Estimating End-to-End Network Path Properties", by Allman and Paxson. Submitted by: jlemon, wollmann
* Add $FreeBSD$ and spell Eklund properly.billf1999-08-297-1/+14
| | | | Approved by: brian (well, he approved adding $Id$)
* Remove extra indenting of `break' statements introducted in rev 1.89,obrien1999-08-292-18/+26
| | | | | | plus wrap some long lines from that revision. While here, wrap some other long lines.
* Include the correct header for the IPSTEALTH option.des1999-08-291-0/+1
|
* Oops, I missed a cast in rev.1.119.bde1999-08-291-1/+1
|
* It is much easier to arp if you don't truncate your arp-reply's.lile1999-08-281-11/+12
| | | | [affects token-ring only]
* Also make the "other" packets counter resettable.green1999-08-281-1/+3
|
* $Id$ -> $FreeBSD$peter1999-08-2870-71/+71
|
* $Id$ -> $FreeBSD$peter1999-08-285-5/+5
|
* Correction: uid -> gid (comment)green1999-08-271-2/+2
|
* Add readonly OID ``net.inet.tcp.tcbhashsize'' so it is possible tojlemon1999-08-262-2/+12
| | | | discover the size of the TCB hashtable on a running system.
OpenPOWER on IntegriCloud