| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=23325
|
| |
|
|
|
|
|
| |
Ok'd by: jkh
Notes:
svn path=/stable/2.2/; revision=23294
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=23011
|
| |
|
|
|
|
|
|
|
|
|
|
| |
ourt fearless network person dons his asbestos suit and commits a
security/crash bug fix to the 2.2 release branch.
This merge includes revs. 1.28 (delete mondo switch statement form Hell) and
1.30 (fix bug where ordinary users could panic the system)).
Rev. 1.29 was not merged because of outside dependencies.
Notes:
svn path=/stable/2.2/; revision=22963
|
| |
|
|
|
|
|
| |
OKed by: davidg
Notes:
svn path=/stable/2.2/; revision=22431
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Don't zero ip->ip_sum during sum validation. This should only
affect programs that sit on top of divert(4) sockets. The
multicast routing code already unconditionally zeros the sum
before recalculating.
Any code that unconditionaly sums a packet without first zeroing
the sum (assuming that it's already zero'd) will break. No such
code seems to exist.
Notes:
svn path=/stable/2.2/; revision=22335
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=22248
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=22221
|
| |
|
|
|
|
|
| |
("not" keyword)
Notes:
svn path=/stable/2.2/; revision=22091
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=19944
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=19814
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=19671
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=19661
|
| |
|
|
| |
Notes:
svn path=/stable/2.2/; revision=19327
|
| |
|
|
|
|
|
|
|
|
| |
"high" and "secure"), we can't use a single variable to track the most
recently used port in all three ranges.. :-] This caused the next
transient port to be allocated from the start of the range more often than
it should.
Notes:
svn path=/head/; revision=19262
|
| |
|
|
|
|
|
|
|
|
|
|
| |
attempts to do so.
Don't allow users to source packets bigger than IP_MAXPACKET.
Make UDP length and ipovly's protocol length unsigned short.
Reviewed by: wollman
Submitted by: (partly by) kml@nas.nasa.gov (Kevin Lahey)
Notes:
svn path=/head/; revision=19183
|
| |
|
|
| |
Notes:
svn path=/head/; revision=19136
|
| |
|
|
| |
Notes:
svn path=/head/; revision=19113
|
| |
|
|
| |
Notes:
svn path=/head/; revision=19035
|
| |
|
|
|
|
|
|
|
| |
isn't a prerequisite.
Fixed style of ifdefs.
Notes:
svn path=/head/; revision=18940
|
| |
|
|
|
|
|
|
|
|
| |
<net/if_arp.h> and fixed the things that depended on it. The nested
include just allowed unportable programs to compile and made my
simple #include checking program report that networking code doesn't
need to include <sys/socket.h>.
Notes:
svn path=/head/; revision=18892
|
| |
|
|
|
|
|
| |
Suggested by: Hal Snyder <hsndyer@thoughtport.com>
Notes:
svn path=/head/; revision=18891
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
(yes I had tested the hell out of this).
I've also temporarily disabled the code so that it behaves as it previously
did (tail drop's the syns) pending discussion with fenner about some socket
state flags that I don't fully understand.
Submitted by: fenner
Notes:
svn path=/head/; revision=18874
|
| |
|
|
|
|
|
|
|
|
| |
ip_input.c:
- delete some dusty code
- _IP_VHL
- use fast inline header checksum when possible
Notes:
svn path=/head/; revision=18797
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
callers of it to take advantage of this. This reduces new connection
request overhead in the face of a large number of PCBs in the system.
Thanks to David Filo <filo@yahoo.com> for suggesting this and providing
a sample implementation (which wasn't used, but showed that it could be
done).
Reviewed by: wollman
Notes:
svn path=/head/; revision=18795
|
| |
|
|
|
|
|
|
|
|
| |
denial of service attacks.
Reviewed by: bde,wollman,olah
Inspired by: vjs@sgi.com
Notes:
svn path=/head/; revision=18787
|
| |
|
|
|
|
|
|
|
| |
this evening.
I think I'm going insane.
Notes:
svn path=/head/; revision=18437
|
| |
|
|
| |
Notes:
svn path=/head/; revision=18436
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
drop the oldest entry in the queue.
There was a fair bit of discussion as to whether or not the
proper action is to drop a random entry in the queue. It's
my conclusion that a random drop is better than a head drop,
however profiling this section of code (done by John Capo)
shows that a head-drop results in a significant performance
increase.
There are scenarios where a random drop is more appropriate.
If I find one in reality, I'll add the random drop code under
a conditional.
Obtained from: discussions and code done by Vernon Schryver (vjs@sgi.com).
Notes:
svn path=/head/; revision=18431
|
| |
|
|
| |
Notes:
svn path=/head/; revision=18416
|
| |
|
|
| |
Notes:
svn path=/head/; revision=18281
|
| |
|
|
|
|
|
|
|
|
|
| |
time, in seconds, that state for non-established TCP sessions stays about)
a sysctl modifyable variable.
[part 1 of two commits, I just realized I can't play with the indices as
I was typing this commit message.]
Notes:
svn path=/head/; revision=18280
|
| |
|
|
|
|
|
|
|
|
|
| |
to "keepidle". this should not occur unless the connection has
been established via the 3-way handshake which requires an ACK
Submitted by: jmb
Obtained from: problem discussed in Stevens vol. 3
Notes:
svn path=/head/; revision=18278
|
| |
|
|
|
|
|
|
| |
is almost never useful. (This is only a quick hack; someone should
go back and delete the entire subnetsarelocal==1 code path.)
Notes:
svn path=/head/; revision=18193
|
| |
|
|
|
|
|
|
|
| |
handling IP fragments.
Submitted by: Darren Reed <avalon@coombs.anu.edu.au>
Notes:
svn path=/head/; revision=18160
|
| |
|
|
|
|
|
| |
Submitted by: phk
Notes:
svn path=/head/; revision=17977
|
| |
|
|
| |
Notes:
svn path=/head/; revision=17851
|
| |
|
|
|
|
|
| |
This can be used by netstat to behave more intelligently.
Notes:
svn path=/head/; revision=17795
|
| |
|
|
|
|
|
|
| |
Move the sockopt definitions for the firewall code from
ip_fw.h to in.h where it belongs.
Notes:
svn path=/head/; revision=17758
|
| |
|
|
|
|
|
| |
Obtained from: LBL's tcpdump distribution
Notes:
svn path=/head/; revision=17720
|
| |
|
|
|
|
|
|
|
|
| |
now completely consistent across all IP protocols and should be quite a
bit faster.
Discussed with: fenner & alex
Notes:
svn path=/head/; revision=17587
|
| |
|
|
|
|
|
|
|
|
|
| |
IPPORT_RESERVED that is used for selection when bind() is told to allocate
a reserved port.
Also, implement simple sanity checking for all the addresses set, to make
it a little harder for a user/sysadmin to shoot themselves in the feet.
Notes:
svn path=/head/; revision=17541
|
| |
|
|
|
|
|
|
| |
I'm pretty convinced after looking at this that the majority of our
drivers are confused about the in/exclusion of ETHER_CRC_LEN :-(
Notes:
svn path=/head/; revision=17455
|
| |
|
|
|
|
|
|
|
|
| |
Submitted by: fenner (with modifications by me)
Use a common prefix string for all warning messages generated during
ip_fw_ctl.
Notes:
svn path=/head/; revision=17440
|
| |
|
|
| |
Notes:
svn path=/head/; revision=17269
|
| |
|
|
| |
Notes:
svn path=/head/; revision=17227
|
| |
|
|
|
|
|
| |
of "Accept"
Notes:
svn path=/head/; revision=17172
|
| |
|
|
|
|
|
| |
TCPDEBUG is defined, and fix typo in TCPDEBUG2() macro.
Notes:
svn path=/head/; revision=17138
|
| |
|
|
|
|
|
|
|
| |
pulled up already. This bug can cause the first packet from a source
to a group to be corrupted when it is delivered to a process listening
on the mrouter.
Notes:
svn path=/head/; revision=17137
|
| |
|
|
| |
Notes:
svn path=/head/; revision=17108
|