summaryrefslogtreecommitdiffstats
path: root/sys/netinet
Commit message (Collapse)AuthorAgeFilesLines
* Suser() simplification:phk1999-04-274-10/+10
| | | | | | | | | | | | | | | | | | | 1: s/suser/suser_xxx/ 2: Add new function: suser(struct proc *), prototyped in <sys/proc.h>. 3: s/suser_xxx(\([a-zA-Z0-9_]*\)->p_ucred, \&\1->p_acflag)/suser(\1)/ The remaining suser_xxx() calls will be scrutinized and dealt with later. There may be some unneeded #include <sys/cred.h>, but they are left as an exercise for Bruce. More changes to the suser() API will come along with the "jail" code.
* Make one pass through the firewall the default.luigi1999-04-261-2/+2
| | | | Multiple pass (which only affects dummynet) is too confusing.
* so_linger is in seconds, not in 1/HZache1999-04-241-2/+2
| | | | | PR: 11252 Submitted by: Martin Kammerhofer <dada@sbox.tu-graz.ac.at>
* Use pointer arithmetic as appropriate.dt1999-04-241-2/+2
|
* postpone the sending of IGMP LEAVE msg to after deleting theluigi1999-04-241-2/+8
| | | | | | mc address from the address list. The latter operation on some hardware resets the card, potentially canceling the pending LEAVE pkt.
* Work around an egcs optimizer bug (i386). This should fix the active ftpluoqi1999-04-211-2/+4
| | | | hang problem. A bug report has been sent to cygnus.
* s/IPFIREWALL_MODULE/KLD_MODULE/peter1999-04-201-2/+2
|
* Tidy up some stray / unused stuff in the IPFW package and friends.peter1999-04-208-105/+13
| | | | | | | | - unifdef -DCOMPAT_IPFW (this was on by default already) - remove traces of in-kernel ip_nat package, it was never committed. - Make IPFW and DUMMYNET initialize themselves rather than depend on compiled-in hooks in ip_init(). This means they initialize the same way both in-kernel and as kld modules. (IPFW initializes now :-)
* Zap LKM option and support. Farewell old friend.peter1999-04-191-0/+2
|
* Convert the dummynet lkm code to be kld aware (this isn't actually usedpeter1999-04-171-26/+27
| | | | anywhere that I can see).
* Oops, forgot this part of lkm code that's been replaced with kld.peter1999-04-171-50/+3
|
* Better handling for ARP/source routing on Token Ringeivind1999-04-151-8/+16
| | | | Submitted by: Larry Lile <lile@stdio.com>
* Staticize.eivind1999-04-111-2/+2
|
* Two cosmetic changes, one a typo and the other, a clarification.julian1999-04-072-7/+15
|
* Merge from RELENG_2_2, per luigi. Fixes the ntoh?() issue for thensayer1999-03-301-18/+22
| | | | | | | | firewall code when called from the bridge code. PR: 10818 Submitted by: nsayer Obtained from: luigi
* Use the correct length from the mbuf header instead of the one fromluigi1999-03-261-9/+9
| | | | | | | | the IP header (this would not work for bridged packets). This has been fixed long ago in the 2.2 branch. Problem noticed by: a few people Fix suggested by: Remy Nonnenmacher
* PacketAliasProxyRule takes a const char *brian1999-03-251-1/+1
| | | | Reminded by: bde
* Add a ``const'' and remove some inconsistent prototype args.brian1999-03-243-4/+4
|
* add missing #include "opt_bdg.h"luigi1999-03-241-1/+2
|
* Remove duplicate line.billf1999-03-231-1/+0
| | | | Reviewed by: eivind
* Fix a dummynet bug caused by passing a bad next hop address (theluigi1999-03-161-5/+5
| | | | | | symptom was the msg "arp failure -- host is not on local network" that some user have seen on multihomed machines. Bug tracked down by Emmanuel Duros
* Fix the 'fwd' option to ipfw when asked to divert to another machine.julian1999-03-121-7/+24
| | | | | | also rely less on other modules clearing static values, and clear them in a few cases we missed before. Submitted by: Matthew Reimer <mreimer@vpop.net>
* Submitted by: Larry Lilejulian1999-03-101-16/+79
| | | | | | | | Move the Olicom token ring driver to the officially sanctionned location of /sys/contrib. Also fix some brokenness in the generic token ring support. Be warned that if_dl.h has been changed and SOME programs might like recompilation.
* Remove all diagnostics to stdout/stderr with #ifdef DEBUGbrian1999-03-094-22/+54
| | | | Statify functions in alias_nbt.c
* Document PacketAliasPptp() and allow it to be disabledbrian1999-03-072-2/+31
| | | | by passing INADDR_NONE.
* Remove unused function stubs.brian1999-03-071-77/+0
|
* Mention that PacketAliasProxyRule() doesn't accept host names,brian1999-03-071-1/+3
| | | | just IP numbers.
* When an incoming packet is reflected back as an ICMP reply, make sure wearchie1999-03-061-1/+2
| | | | | | zero "m->m_pkthdr.rcvif", otherwise ipfw may wrongly match the outgoing packet. PR: kern/9723 Submitted by: David Malone <dwmalone@maths.tcd.ie>
* Document PacketAliasProxyRule() and fix a typo.brian1999-03-061-1/+88
|
* Move kernel-only declaration inside #ifdef KERNEL section.wollman1999-03-061-7/+5
|
* arprequest() allocates an mbuf with m_gethdr() but does not initializewpaul1999-03-041-1/+2
| | | | m->m_pkthdr.rcvif to NULL. Bad arprequest(). No biscuit.
* Version 3.0: January 1, 1999brian1999-02-277-98/+1176
| | | | | | | | - Transparent proxying support added. - PPTP redirecting support added based on patches contributed by Dru Nelson <dnelson@redwoodsoft.com>. Submitted by: Charles Mott <cmott@srv.net>
* Add support for stealth forwarding (forwarding packets without touchingdes1999-02-221-5/+18
| | | | | | | | | | | their ttl). This can be used - in combination with the proper ipfw incantations - to make a firewall or router invisible to traceroute and other exploration tools. This behaviour is controlled by a sysctl variable (net.inet.ip.stealth) and hidden behind a kernel option (IPSTEALTH). Reviewed by: eivind, bde
* World, I'd like you to meet the first FreeBSD token Ring driver.julian1999-02-201-3/+8
| | | | | | | | This is for various Olicom cards. An IBM driver is following. This patch also adds support to tcpdump to decode packets on tokenring. Congratulations to the proud father.. (below) Submitted by: Larry Lile <lile@stdio.com>
* avoid panic with pkts larger than MTU and DF set coming out of a pipe.luigi1999-02-191-2/+2
|
* * Change sysctl from using linker_set to construct its tree using SLISTs.dfr1999-02-169-8/+29
| | | | | | | | | | This makes it possible to change the sysctl tree at runtime. * Change KLD to find and register any sysctl nodes contained in the loaded file and to unregister them when the file is unloaded. Reviewed by: Archie Cobbs <archie@whistle.com>, Peter Wemm <peter@netplex.com.au> (well they looked at it anyway)
* After wading in the cesspool of ip_input for an hour, I have managed towollman1999-02-091-10/+8
| | | | | | | | convince myself that nothing will break if we permit IP input while interface addresses are unconfigured. (At worst, they will hit some ULP's PCB scan and fail if nobody is listening.) So, remove the restriction that addresses must be configured before packets can be input. Assume that any unicast packet we receive while unconfigured is potentially ours.
* remove leftover garbage line.julian1999-02-081-2/+1
|
* Fix for PR 9309.julian1999-02-081-1/+10
| | | | | | Divert was not feeding clean data to ifa_ifwithaddr() so it was giving bad results. Submitted by: kseel <kseel@utcorp.com>, Ruslan Ermilov <ru@ucb.crimea.ua>
* Use snd_nxt, not rcv_nxt, when calculating the ISS during TIME_WAIT.fenner1999-02-062-4/+4
| | | | | | | | This was missed in the 4.4-Lite2 merge. Noticed by: Mohan Parthasarathy <Mohan.Parthasarathy@eng.Sun.COM> and jayanth@loc201.tandem.com (vijayaraghavan_jayanth) on the tcp-impl mailing list.
* Nuke all the stupid ffs() stuff and use powerof2() instead.msmith1999-02-042-4/+4
| | | | Submitted by: Bruce Evans <bde@zeta.org.au>
* Fix power-of-2 check for the TCB hash size.msmith1999-02-042-4/+4
| | | | Submitted by: Brian Feldman <green@unixhelp.org>
* Make TCBHASHSIZE a boot-time tunable as well, taking its value from themsmith1999-02-032-8/+28
| | | | | | variable net.inet.tcp.tcbhashsize. Requested by: David Filo <filo@yahoo-inc.com>
* Fix warnings in preparation for adding -Wall -Wcast-qual to thedillon1999-01-277-20/+20
| | | | kernel compile
* Move kernel-only declarations to within #ifdef KERNELarchie1999-01-231-4/+9
| | | | Prompted by: gcc warnings when compiling /sbin/ipfw
* Don't forward unicast packets received via link-layer multicast.wollman1999-01-221-2/+2
| | | | | Suggested by: fenner Original complaint: Shiva Shenoy <Shiva.Shenoy@yagosys.com>
* Add a flag, passed to pru_send routines, PRUS_MORETOCOME. Thisfenner1999-01-203-21/+28
| | | | | | | | | flag means that there is more data to be put into the socket buffer. Use it in TCP to reduce the interaction between mbuf sizes and the Nagle algorithm. Based on: "Justin C. Walker" <justin@apple.com>'s description of Apple's fix for this problem.
* Fix bug in last commit (la was used uninitialized if no route was passed in).fenner1999-01-191-2/+2
|
* Use dynamic memory allocation instead of mbuf's for multicast routingfenner1999-01-182-103/+86
| | | | | | | | | | state. Note: this requires a recompilation of netstat (but netstat has been broken since rev 1.52 of ip_mroute.c anyway) Obtained from: Significantly based on Steve McCanne's <mccanne@cs.berkeley.edu> work for BSD/OS
* Rename igmp's MALLOC; it doesn't have anything to do with multicast routing.fenner1999-01-181-3/+3
|
OpenPOWER on IntegriCloud