src-test2/sys/netinet, branch releng/6.3

Merge in_pcb.c:1.165.2.7 from RELENG_6 to RELENG_6_3:

2007-12-22T21:01:53Z

When IPSEC fails to allocate policy state for an inpcb, and MAC is in use, free the MAC label on the inpcb before freeing the inpcb. Submitted by: tanyong , zhouzhouyi Approved by: re (kensmith)

MFC: Specify minimum retransmit scale factor in fractions of hz, not ticks.

2007-12-18T04:13:52Z

Approved by: re (kensmith)

o Update tcp sendcookie stats. HEAD has a different code and does

2007-09-28T17:39:45Z

not have this bug. Submitted by: Igor Sysoev Reviewed by: silby

MFC revs. 1.15, 1.16:

2007-07-12T20:50:06Z

Add a sysctl for the purge run interval so that it can be tuned along with the rest of hostcache parameters. The new sysctl name is `net.inet.tcp.hostcache.prune'. Replace a constant with an already defined symbolic name for it.

Fix a problem introduced in netinet/in.c 1.85.2.7 where

2007-07-07T00:54:46Z

in_ifdetach() calls in_delmulti_ifp(). The code now *really* deletes the elements in in_multihead for the ifp that's going away (rather than just decrementing the reference count). Previously we were left with inm and ifma structures containing bogus ifnet pointers after destroying an interface that had more than one IP4 assignment made to it in it's lifetime. I've also added a if_delmulti_ent() to make deleting known ifma structures possible rather than depending on if_findmulti() to end up finding the same thing. It will in fact always find the correct ifma *unless* the passed sockaddr has a bogus sa_len of zero. Finally, when adding a multicast address, we no longer increment the refcount (well, we do, but then we decrement it again). The refcount here is in fact bogus so hopefully readers will see that now. This code is going directly into -stable as it has been rewritten in -current and those changes are deemed too intrusive for -stable consumption right now. Reviewed by: bms

MFC 1.30: Certain (bad) values of sack blocks can end up corrupting the

2007-06-12T19:21:54Z

sack scoreboard. Make the checks in tcp_sack_doack() more robust to prevent this.

MFC 1.28: Fix for a bug that causes SACK scoreboard corruption when the

2007-06-12T19:20:13Z

limit on holes per connection is reached.

MFC 1.315: In the SYN_SENT case, Initialize the snd_wnd before the call to

2007-06-12T18:53:32Z

tcp_mss(). The TCP hostcache logic in tcp_mss() depends on the snd_wnd being initialized.

MFC 1.209: Don't verify UDP IPv4 checksum in-place.

2007-06-10T07:29:08Z

MFC:

2007-06-07T09:50:53Z

1.200 sbin/ipfw/ipfw.8, 1.104 sbin/ipfw/ipfw2.c 1.110 sys/netinet/ip_fw.h, 1.164 sys/netinet/ip_fw2.c Add support for filtering on Routing Header Type 0 and Mobile IPv6 Routing Header Type 2 in addition to filter on the non-differentiated presence of any Routing Header.