| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Reported by: hsu
|
|
|
|
|
|
|
|
|
| |
associated with the syncache entry: in case tcp_close() has been
called on the corresponding listening socket, the lock has been
destroyed as a side effect of in_pcbdetach(), causing a panic when
we attempt to lock on it.
Reviewed by: hsu
|
|
|
|
|
| |
just added; this tries to maintain the same behaviour vis a vis printing
the rate-limiting messages but need tweaking
|
|
|
|
| |
Fix some line breaks.
|
|
|
|
| |
Remove an unneeded local variable.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
the mbuf allocator flags {M_TRYWAIT, M_DONTWAIT}.
o Fix a bpf_compat issue where malloc() was defined to just call
bpf_alloc() and pass the 'canwait' flag(s) along. It's been changed
to call bpf_alloc() but pass the corresponding M_TRYWAIT or M_DONTWAIT
flag (and only one of those two).
Submitted by: Hiten Pandya <hiten@unixdaemons.com> (hiten->commit_count++)
|
| |
|
| |
|
| |
|
|
|
|
| |
MFC after: 1 week
|
|
|
|
|
| |
Reviewed by: luigi
MFC after: 1 week
|
|
|
|
|
|
|
| |
The bug does not affect anything because M_NOWAIT == M_DONTWAIT.
Reviewed by: luigi
MFC after: 1 week
|
|
|
|
|
|
|
| |
PR: kern/45964
Submitted by: Sascha Blank <sblank@tiscali.de>
Reviewed by: luigi
MFC after: 1 week
|
|
|
|
|
|
|
| |
a sysctl for the stabilization value for the bandwidth delay product (inflight)
algorithm and document it.
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
| |
apparent ack-on-ack problem with FreeBSD. Prof. Jacobson noticed a
case in our TCP stack which would acknowledge a received ack-only packet,
which is not legal in TCP.
Submitted by: Van Jacobson <van@packetdesign.com>,
bmah@packetdesign.com (Bruce A. Mah)
MFC after: 7 days
|
|
|
|
| |
Approved by: re
|
|
|
|
|
|
|
|
|
| |
bridge.c nor if_ethersubr.c depend on IPFIREWALL.
Restore the use of fw_one_pass in if_ethersubr.c
ipfw.8 will be updated with a separate commit.
Approved by: re
|
|
|
|
|
|
|
| |
I will put them back in after 5.0 is out.
Requested by: sam
Approved by: re
|
|
|
|
|
|
|
| |
I will put it back in in a better form after 5.0 is out.
Requested by: sam, rwatson, luigi (on second thought)
Approved by: re
|
|
|
|
|
|
|
|
| |
and set it to 0 by default.
Partially obtained from: NetBSD
Suggested by: David Gilbert
MFC after: 5 days
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
so that it can be reused elsewhere (there is a number of places
where it can be useful). This also trims some 200 lines from
the body of ip_output(), which helps readability a bit.
(This change was discussed a few weeks ago on the mailing lists,
Julian agreed, silence from others. It is not a functional change,
so i expect it to be ok to commit it now but i am happy to back it
out if there are objections).
While at it, fix some function headers and replace m_copy() with
m_copypacket() where applicable.
MFC after: 1 week
|
|
|
|
|
|
|
| |
Replace m_copy() with m_copypacket() where applicable.
While at it, fix some function headers and remove 'register' from
variable declarations.
|
|
|
|
|
|
|
|
|
|
|
|
| |
Replace m_copy() with m_copypacket() where applicable.
Replace "if (a.s_addr ...)" with "if (a.s_addr != INADDR_ANY ...)"
to make it clear what the code means.
While at it, fix some function headers and remove 'register' from
variable declarations.
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
No functional changes, but:
+ the mrouting module now should behave the same as the compiled-in
version (it did not before, some of the rsvp code was not loaded
properly);
+ netinet/ip_mroute.c is now truly optional;
+ removed some redundant/unused code;
+ changed many instances of '0' to NULL and INADDR_ANY as appropriate;
+ removed several static variables to make the code more SMP-friendly;
+ fixed some minor bugs in the mrouting code (mostly, incorrect return
values from functions).
This commit is also a prerequisite to the addition of support for PIM,
which i would like to put in before DP2 (it does not change any of
the existing APIs, anyways).
Note, in the process we found out that some device drivers fail to
properly handle changes in IFF_ALLMULTI, leading to interesting
behaviour when a multicast router is started. This bug is not
corrected by this commit, and will be fixed with a separate commit.
Detailed changes:
--------------------
netinet/ip_mroute.c all the above.
conf/files make ip_mroute.c optional
net/route.c fix mrt_ioctl hook
netinet/ip_input.c fix ip_mforward hook, move rsvp_input() here
together with other rsvp code, and a couple
of indentation fixes.
netinet/ip_output.c fix ip_mforward and ip_mcast_src hooks
netinet/ip_var.h rsvp function hooks
netinet/raw_ip.c hooks for mrouting and rsvp functions, plus
interface cleanup.
netinet/ip_mroute.h remove an unused and optional field from a struct
Most of the code is from Pavlin Radoslavov and the XORP project
Reviewed by: sam
MFC after: 1 week
|
|
|
|
|
| |
Reviewed by: many
Approved by: re
|
|
|
|
|
| |
Reviewed by: many
Approved by: re
|
|
|
|
|
|
|
|
|
|
| |
ipfw_flow_id structure actual size and bcmp(3) may fail to compare
them properly. Compare members of these structures instead.
PR: kern/44078
Submitted by: Oleg Bulyzhin <oleg@rinet.ru>
Reviewed by: luigi
MFC after: 2 weeks
|
|
|
|
| |
intentionally locks two inp records simultaneously.
|
|
|
|
| |
Submitted by: Jeffrey Hsu <hsu@FreeBSD.org>
|
|
|
|
| |
Verified by: md5
|
|
|
|
| |
will correct this before 5.0 release
|
|
|
|
|
|
|
|
|
|
|
| |
o fix #ifdef typo
o must use "bounce functions" when dispatched from the protosw table
don't know how this stuff was missed in my testing; must've committed
the wrong bits
Pointy hat: sam
Submitted by: "Doug Ambrisko" <ambrisko@verniernetworks.com>
|
| |
|
|
|
|
|
|
| |
contents of the SA, not the SP
Submitted by: "Doug Ambrisko" <ambrisko@verniernetworks.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
prediction code. Previously, 2GB worth of header predicted data
could leave these variables too far out of sequence which would cause
problems after receiving a packet that did not match the header
prediction.
Submitted by: Bill Baumann <bbaumann@isilon.com>
Sponsored by: Isilon Systems, Inc.
Reviewed by: hsu, pete@isilon.com, neal@isilon.com, aaronp@isilon.com
|
|
|
|
|
| |
Don't need to protect isipv6 conditional with INET6.
Fix leading indentation in 2 lines.
|
|
|
|
|
|
|
|
|
|
|
| |
This allows socket() to return an error when the kernel is not built
with IPDIVERT, and doesn't prevent future applications from using the
"borrowed" IP protocol number. The sysctl net.inet.raw.olddiverterror
controls whether opening a socket with the "borrowed" IP protocol
fails with an accompanying kernel printf; this code should last only a
couple of releases.
Approved by: re
|
|
|
|
|
| |
Requested by: Eugene Grosbein <eugen@kuzbass.ru>
MFC after: 3 days
|
|
|
|
| |
for ipfw2 panics on sparc64.
|
|
|
|
|
|
|
|
|
|
| |
Quoting luigi:
In order to make the userland code fully 64-bit clean it may
be necessary to commit other changes that may or may not cause
a minor change in the ABI.
Reviewed by: luigi
|
|
|
|
| |
commands. Use the correct one. Also affects ipfw2 in -stable.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to the primary local IP address when doing a TCP connect(). The
tcp_connect() code was relying on in_pcbconnect (actually in_pcbladdr)
modifying the passed-in sockaddr, and I failed to notice this in
the recent change that added in_pcbconnect_setup(). As a result,
tcp_connect() was ending up using the unmodified sockaddr address
instead of the munged version.
There are two cases to handle: if in_pcbconnect_setup() succeeds,
then the PCB has already been updated with the correct destination
address as we pass it pointers to inp_faddr and inp_fport directly.
If in_pcbconnect_setup() fails due to an existing but dead connection,
then copy the destination address from the old connection.
|
|
|
|
|
| |
Approved by: luigi
MFC after: 1 week
|
|
|
|
|
|
| |
Suggested by: Eugene Grosbein <eugen@kuzbass.ru>
Approved by: luigi
MFC after: 1 week
|
|
|
|
| |
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
|
|
| |
a server process bound to a wildcard UDP socket to select the IP
address from which outgoing packets are sent on a per-datagram
basis. When combined with IP_RECVDSTADDR, such a server process can
guarantee to reply to an incoming request using the same source IP
address as the destination IP address of the request, without having
to open one socket per server IP address.
Discussed on: -net
Approved by: re
|