summaryrefslogtreecommitdiffstats
path: root/sys/netinet
Commit message (Collapse)AuthorAgeFilesLines
* Dike out some obsolete defines which referenced ih_next and ih_prev fromdfr1998-09-261-3/+1
| | | | | struct ipovly (they don't exist anymore because they don't work when pointers are 64bit).
* Fix the bind security fix introduced in rev 1.38 to work with multicast:fenner1998-09-171-3/+9
| | | | | | | | | | - Don't bother checking for conflicting sockets if we're binding to a multicast address. - Don't return an error if we're binding to INADDR_ANY, the conflicting socket is bound to INADDR_ANY, and the conflicting socket has SO_REUSEPORT set. PR: kern/7713
* Prevent modification of permanent ARP entries (PR kern/7649)fenner1998-09-171-4/+21
| | | | | Ignore ARP replies from the wrong interface (discussion on mailing list) Add interface name to a couple of error messages
* Turn off replies to ICMP echo requests for broadcast and multicastjkoshy1998-09-151-2/+2
| | | | | | | | | | | | | addresses by default. Add a knob "icmp_bmcastecho" to "rc.network" to allow this behaviour to be controlled from "rc.conf". Document the controlling sysctl variable "net.inet.icmp.bmcastecho" in sysctl(3). Reviewed by: dg, jkh Reminded on -hackers by: Steinar Haug <sthaug@nethelp.no>
* Bring in new files for dummynet supportluigi1998-09-122-0/+709
|
* Fix RST validation.wollman1998-09-112-84/+224
| | | | | PR: 7892 Submitted by: Don.Lewis@tsc.tdk.com
* Ensure that m_nextpkt is set to NULL after reassembling fragments.dfr1998-09-101-1/+3
|
* RFC 1644 has the status "Experimental Protocol", which means:phk1998-09-062-4/+4
| | | | | | | | | | 4.1.4. Experimental Protocol A system should not implement an experimental protocol unless it is participating in the experiment and has coordinated its use of the protocol with the developer of the protocol. Pointed out by: Steinar Haug <sthaug@nethelp.no>
* Widen and change the layout of the IPFW structures flag element.phk1998-09-021-29/+29
| | | | | | This will allow us to add dummynet to 3.0 Recompile /sbin/ipfw AND your kernel.
* Properly fragment multicast packets.wollman1998-09-021-1/+2
| | | | | PR: 7802 Submitted by: Steve McCanne <mccanne@cs.berkeley.edu>
* Remove OpenBSD build support - let the Makefile vary perbrian1998-08-311-10/+5
| | | | | | | | OS rather than making it a mess and potentially screwing up cross builds. Suggested by: bde Add Id keyword.
* Add OpenBSD build supportbrian1998-08-301-3/+9
|
* Re-implement tcp and ip fragment reassembly to not store pointers in thedfr1998-08-248-247/+210
| | | | | | ip header which can't work on alpha since pointers are too big. Reviewed by: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
* Yow! Completely change the way socket options are handled, eliminatingwollman1998-08-2312-664/+684
| | | | | | another specialized mbuf type in the process. Also clean up some of the cruft surrounding IPFW, multicast routing, RSVP, and other ill-explored corners.
* Fixed printf format errors.bde1998-08-173-42/+46
|
* Made some disgusting ifdefs even more disgusting to enable the supportbde1998-08-155-11/+11
| | | | | for `u_long cmd' ioctl args if __FreeBSD_version >= 300003. Some ioctls were broken on machines with 32-bit ints and 64-bit longs.
* Fixed printf format errors (ntohl() returns in_addr_t = u_int32_t != longbde1998-08-111-5/+6
| | | | | on some 64-bit systems). print_ip() should use inet_ntoa() instead of bloated inline code with 4 ntohl()s.
* Converted the last instance of hzto() to tvtohz().bde1998-08-051-3/+3
|
* Use explicitly sized types when digging through packet headers.dfr1998-08-031-9/+9
| | | | Reviewed by: Julian Elischer <julian@whistle.com>
* Fix a compile error if IPFIREWALL_FORWARD active without IPDIVERT.peter1998-08-011-3/+2
|
* update ATM driver. (base version: midway.c 1.67 --> 1.68)kjc1998-07-291-1/+2
| | | | | | | | | | | | | | | | | | | | | | | several new features are added: - support vc/vp shaping - support pvc shadow interface code cleanup: - remove WMAYBE related code. ENI WMAYBE DMA doen't work. - remove updating if_lastchange for every packet. - BPF related code is moved to midway.c as it should be. (bpfwrite should work if atm_pseudohdr and LLC/SNAP are prepended.) - BPF link type is changed to DLT_ATM_RFC1483. BPF now understands only LLC/SNAP!! (because bpf can't handle variable link header length.) It is recommended to use LLC/SNAP instead of NULL encapsulation for various reasons. (BPF, IPv6, interoperability, etc.) the code has been used for months in ALTQ and KAME IPv6. OKed by phk long time ago.
* Don't log ICMP type and subtype for non-zero offset packet fragments.alex1998-07-181-2/+5
|
* Removed a bogus forward struct declaration.bde1998-07-131-4/+4
| | | | Cleaned up ifdefs.
* Fixed some longs that should have been fixed-sized types.bde1998-07-132-4/+4
|
* Fixed overflow and sign extension bugs inbde1998-07-131-4/+4
| | | | | | | | | | | `len = min(so->so_snd.sb_cc, win) - off;'. min() has type u_int and `off' has type int, so when min() is 0 and `off' is 1, the RHS overflows to 0U - 1 = UINT_MAX. `len' has type long, so when sizeof(long) == sizeof(int), the LHS normally overflows to to the correct value of -1, but when sizeof(long) > sizeof(int), the LHS is UINT_MAX. Fixed some u_long's that should have been fixed-sized types.
* Declare tcp_seq and tcp_cc as fixed-size types. Half fixed typebde1998-07-132-5/+5
| | | | | | mismatches exposed by this (the prototype for tcp_respond() didn't match the function definition lexically, and still depends on a gcc feature to match if ints have more than 32 bits).
* Declare id_mask as a fixed-size type.bde1998-07-131-2/+2
|
* Declare n_short, n_long and n_time as fixed-sized types. Don't ifdefbde1998-07-131-15/+4
| | | | n_long or n_short specially for alphas.
* When not acting as a router (ipforwarding=0), silently discard sourcedg1998-07-081-10/+21
| | | | | routed packets that aren't destined for us, as required by RFC-1122. PR: 7191
* oops ended comment before the comment ended..julian1998-07-061-2/+2
|
* Bring back some slight cleanups from 2.2julian1998-07-062-6/+21
|
* Don't expect the new code to be used without the right option file beingjulian1998-07-061-1/+2
| | | | included.
* Fix braino in switching to TAILQ macro.julian1998-07-062-4/+4
|
* Support for IPFW based transparent forwarding.julian1998-07-068-30/+288
| | | | | | | | | | | | | | Any packet that can be matched by a ipfw rule can be redirected transparently to another port or machine. Redirection to another port mostly makes sense with tcp, where a session can be set up between a proxy and an unsuspecting client. Redirection to another machine requires that the other machine also be expecting to receive the forwarded packets, as their headers will not have been modified. /sbin/ipfw must be recompiled!!! Reviewed by: Peter Wemm <peter@freebsd.org> Submitted by: Chrisy Luke <chrisy@flix.net>
* Remove out of date comment.julian1998-07-021-4/+1
|
* Remove the option to keep IPFW diversion backwards compatiblejulian1998-07-023-48/+5
| | | | | WRT diversion reinjection. No-one has been bitten by the new behaviour that I know of.
* Byte count statistics of multicast vifs are invalid.phk1998-06-301-2/+2
| | | | | | | The problem is caused by a wrong endianess in the sum. PR: 7115 Submitted by: Joao Carlos Mendes Luis <jonny@jonny.eng.br>
* Only make struct xtcpcb visable if _NETINET_IN_PCB_H_ and _SYS_SOCKETVAR_H_jhay1998-06-271-4/+4
| | | | | are defined. Reviewed by: bde
* Add CUSEEME support. This has *not* been tested, norbrian1998-06-244-2/+131
| | | | | could I find anyone to test it, so please report any problems to me.
* Removed unused includes.bde1998-06-213-13/+3
|
* Merge ipfilter 3.2.3 -> 3.2.7 changes onto mainline.peter1998-06-208-87/+218
|
* This commit was generated by cvs2svn to compensate for changes in r37071,peter1998-06-205-14/+32
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import ipfilter 3.2.7 kernel componentspeter1998-06-2014-102/+251
| |
* | fix another typojulian1998-06-151-2/+2
| |
* | Try narrow down the culprit sending undefined packet types through the loopbackjulian1998-06-141-1/+9
| |
* | Remove 3 occurances of __FUNCTION__julian1998-06-121-2/+2
| |
* | Go through the loopback code with a broom..julian1998-06-123-21/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove lots'o'hacks. looutput is now static. Other callers who want to use loopback to allow shortcutting should call the special entrypoint for this, if_simloop(), which is specifically designed for this purpose. Using looutput for this purpose was problematic, particularly with bpf and trying to keep track of whether one should be using the charateristics of the loopback interface or the interface (e.g. if_ethersubr.c) that was requesting the loopback. There was a whole class of errors due to this mis-use each of which had hacks to cover them up. Consists largly of hack removal :-)
* | include opt_ipdivert.h so we get correct optionsjulian1998-06-121-1/+2
| |
* | Allow diverted packets from the transmit side to remember if theyjulian1998-06-121-27/+26
| | | | | | | | | | had a recv interface and allow that state to be available after re-injection for further tests.
* | Quieten gcc 2.8.1brian1998-06-101-2/+2
| |
OpenPOWER on IntegriCloud