src-test2/sys/netinet, branch release/4.0.0_cvs

This commit was manufactured by cvs2svn to create tag

2000-03-20T08:47:53Z

'RELENG_4_0_0_RELEASE'. This commit was manufactured to restore the state of the 4.0-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs.

MFC: (rev 1.132) Fix logging of src and dst IP addresses.

2000-03-14T20:35:20Z

This commit was manufactured by cvs2svn to create branch 'RELENG_4'.

2000-03-13T04:59:44Z

Disable IPv4 over IPv4 tunnel on the 6to4 interface for better security.

2000-03-11T22:11:57Z

Approved by: jkh

IPv6 6to4 support.

2000-03-11T11:17:24Z

Now most big problem of IPv6 is getting IPv6 address assignment. 6to4 solve the problem. 6to4 addr is defined like below, 2002: 4byte v4 addr : 2byte SLA ID : 8byte interface ID The most important point of the address format is that an IPv4 addr is embeded in it. So any user who has IPv4 addr can get IPv6 address block with 2byte subnet space. Also, the IPv4 addr is used for semi-automatic IPv6 over IPv4 tunneling. With 6to4, getting IPv6 addr become dramatically easy. The attached patch enable 6to4 extension, and confirmed to work, between "Richard Seaman, Jr." and me. Approved by: jkh Reviewed by: itojun

The function arpintr() incorrectly checks m->m_len to detect incomplete

2000-03-11T00:24:29Z

ARP packets. This can incorrectly reject complete frames since the frame could be stored in more than one mbuf. The following patches fix the length comparisson, and add several diagnostic log messages to the interrupt handler for out-of-the-norm ARP packets. This should make ARP problems easier to detect, diagnose and fix. Submitted by: C. Stephen Gunn Approved by: jkh Reviewed by: rwatson

Initialize mbuf pointer at getting ipsec policy.

2000-03-09T14:57:16Z

Without this, kernel will panic at getsockopt() of IPSEC_POLICY. Also make compilable libipsec/test-policy.c which tries getsockopt() of IPSEC_POLICY. Approved by: jkh Submitted by: sakane@kame.net

Remove single-space hard sentence breaks. These degrade the quality

2000-03-02T09:14:21Z

of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc.

Fix panic when doing keep-state and "forward".

2000-02-29T17:51:25Z

Removed a redundant check. Also move check for expired rules before using them. Sorry for the whitespace changes. Approved-by: jordan

Limit the maximum permissible TCP window size to 65535 octets if

2000-02-28T21:18:21Z

window scaling is disabled. PR: kern/16914 Submitted by: Jayanth Vijayaraghavan Reviewed by: wollman Approved by: jkh