summaryrefslogtreecommitdiff
path: root/sys/netinet
Commit message (Collapse)AuthorAgeFilesLines
* Merged with -current: improved PCB hash algorithm.David Greenman1997-03-036-17/+20
| | | | Notes: svn path=/stable/2.2/; revision=23325
* Bring in comment fix from -current.Bill Fenner1997-03-021-11/+10
| | | | | | | Ok'd by: jkh Notes: svn path=/stable/2.2/; revision=23294
* YAMFC (rev 1.11, fixes PR#2686)Joerg Wunsch1997-02-221-3/+3
| | | | Notes: svn path=/stable/2.2/; revision=23011
* Daring greatly, since everyone else seems to defer to him in these matters,Garrett Wollman1997-02-211-318/+14
| | | | | | | | | | | | ourt fearless network person dons his asbestos suit and commits a security/crash bug fix to the 2.2 release branch. This merge includes revs. 1.28 (delete mondo switch statement form Hell) and 1.30 (fix bug where ordinary users could panic the system)). Rev. 1.29 was not merged because of outside dependencies. Notes: svn path=/stable/2.2/; revision=22963
* Mega-merge from -current: bring in the FDDI driver update.Joerg Wunsch1997-02-081-3/+7
| | | | | | | OKed by: davidg Notes: svn path=/stable/2.2/; revision=22431
* Roll ip_sum mods into 2.2:Brian Somers1997-02-061-4/+5
| | | | | | | | | | | | | | Don't zero ip->ip_sum during sum validation. This should only affect programs that sit on top of divert(4) sockets. The multicast routing code already unconditionally zeros the sum before recalculating. Any code that unconditionaly sums a packet without first zeroing the sum (assuming that it's already zero'd) will break. No such code seems to exist. Notes: svn path=/stable/2.2/; revision=22335
* Fix my misplaced patch from yesterday... *blush*Joerg Wunsch1997-02-032-4/+4
| | | | Notes: svn path=/stable/2.2/; revision=22248
* YAMFC (revisions 1.4, 1.56, and 1.48, respectively)Joerg Wunsch1997-02-023-5/+6
| | | | Notes: svn path=/stable/2.2/; revision=22221
* merge improvements from -currentAdam David1997-01-292-4/+8
| | | | | | | ("not" keyword) Notes: svn path=/stable/2.2/; revision=22091
* YAMFCPoul-Henning Kamp1996-11-241-3/+3
| | | | Notes: svn path=/stable/2.2/; revision=19944
* YAMFCPoul-Henning Kamp1996-11-161-5/+6
| | | | Notes: svn path=/stable/2.2/; revision=19814
* YAMFCPoul-Henning Kamp1996-11-121-1/+2
| | | | Notes: svn path=/stable/2.2/; revision=19671
* Merge from -currentPoul-Henning Kamp1996-11-118-113/+127
| | | | Notes: svn path=/stable/2.2/; revision=19661
* This commit was manufactured by cvs2svn to create branch 'RELENG_2_2'.cvs2svn1996-11-022-2762/+0
| | | | Notes: svn path=/stable/2.2/; revision=19327
* Fix braino on my part. When we have three different port ranges (default,Peter Wemm1996-10-302-3/+8
| | | | | | | | | | "high" and "secure"), we can't use a single variable to track the most recently used port in all three ranges.. :-] This caused the next transient port to be allocated from the start of the range more often than it should. Notes: svn path=/head/; revision=19262
* Don't allow reassembly to create packets bigger than IP_MAXPACKET, and countBill Fenner1996-10-255-8/+32
| | | | | | | | | | | | attempts to do so. Don't allow users to source packets bigger than IP_MAXPACKET. Make UDP length and ipovly's protocol length unsigned short. Reviewed by: wollman Submitted by: (partly by) kml@nas.nasa.gov (Kevin Lahey) Notes: svn path=/head/; revision=19183
* Give ip_len and ip_off more natural, unsigned types.Garrett Wollman1996-10-232-6/+6
| | | | Notes: svn path=/head/; revision=19136
* Changed args to the nat functions.Søren Schmidt1996-10-223-6/+6
| | | | Notes: svn path=/head/; revision=19113
* Reword two comments.Alexander Langer1996-10-191-3/+3
| | | | Notes: svn path=/head/; revision=19035
* Forward-declared `struct route' for the KERNEL case so that <net/route.h>Bruce Evans1996-10-151-5/+7
| | | | | | | | | isn't a prerequisite. Fixed style of ifdefs. Notes: svn path=/head/; revision=18940
* Removed nested include if <sys/socket.h> from <net/if.h> andBruce Evans1996-10-122-2/+4
| | | | | | | | | | <net/if_arp.h> and fixed the things that depended on it. The nested include just allowed unportable programs to compile and made my simple #include checking program report that networking code doesn't need to include <sys/socket.h>. Notes: svn path=/head/; revision=18892
* Log the interface name which received the packet.Alexander Langer1996-10-121-8/+9
| | | | | | | Suggested by: Hal Snyder <hsndyer@thoughtport.com> Notes: svn path=/head/; revision=18891
* Fix two bugs I accidently put into the syn code at the last minutePaul Traina1996-10-112-10/+18
| | | | | | | | | | | | | (yes I had tested the hell out of this). I've also temporarily disabled the code so that it behaves as it previously did (tail drop's the syns) pending discussion with fenner about some socket state flags that I don't fully understand. Submitted by: fenner Notes: svn path=/head/; revision=18874
* All three files: make COMPAT_IPFW==0 case work again.Garrett Wollman1996-10-073-30/+46
| | | | | | | | | | ip_input.c: - delete some dusty code - _IP_VHL - use fast inline header checksum when possible Notes: svn path=/head/; revision=18797
* Improved in_pcblookuphash() to support wildcarding, and changed relaventDavid Greenman1996-10-076-67/+60
| | | | | | | | | | | | | callers of it to take advantage of this. This reduces new connection request overhead in the face of a large number of PCBs in the system. Thanks to David Filo <filo@yahoo.com> for suggesting this and providing a sample implementation (which wasn't used, but showed that it could be done). Reviewed by: wollman Notes: svn path=/head/; revision=18795
* Increase robustness of FreeBSD against high-rate connection attemptPaul Traina1996-10-072-26/+46
| | | | | | | | | | denial of service attacks. Reviewed by: bde,wollman,olah Inspired by: vjs@sgi.com Notes: svn path=/head/; revision=18787
* I don't understand, I committed this fix (move a counter and fixed a typo)Paul Traina1996-09-212-8/+6
| | | | | | | | | this evening. I think I'm going insane. Notes: svn path=/head/; revision=18437
* Syntax error: so_incom -> so_incompAndrey A. Chernov1996-09-212-4/+4
| | | | Notes: svn path=/head/; revision=18436
* If the incomplete listen queue for a given socket is full,Paul Traina1996-09-202-10/+36
| | | | | | | | | | | | | | | | | | | | drop the oldest entry in the queue. There was a fair bit of discussion as to whether or not the proper action is to drop a random entry in the queue. It's my conclusion that a random drop is better than a head drop, however profiling this section of code (done by John Capo) shows that a head-drop results in a significant performance increase. There are scenarios where a random drop is more appropriate. If I find one in reality, I'll add the random drop code under a conditional. Obtained from: discussions and code done by Vernon Schryver (vjs@sgi.com). Notes: svn path=/head/; revision=18431
* Handle ICMP codes defined in RFC1812 more appropriatelyPaul Traina1996-09-201-1/+7
| | | | Notes: svn path=/head/; revision=18416
* Move TCPCTL_KEEPINIT to end of MIB list (sigh)Paul Traina1996-09-131-4/+4
| | | | Notes: svn path=/head/; revision=18281
* Make the misnamed tcp initial keepalive timer value (which is really thePaul Traina1996-09-136-14/+21
| | | | | | | | | | | time, in seconds, that state for non-established TCP sessions stays about) a sysctl modifyable variable. [part 1 of two commits, I just realized I can't play with the indices as I was typing this commit message.] Notes: svn path=/head/; revision=18280
* Receipt of two SYN's are sufficient to set the t_timer[TCPT_KEEP]Paul Traina1996-09-132-12/+24
| | | | | | | | | | | to "keepidle". this should not occur unless the connection has been established via the 3-way handshake which requires an ACK Submitted by: jmb Obtained from: problem discussed in Stevens vol. 3 Notes: svn path=/head/; revision=18278
* Set subnetsarelocal to false. In a classless world, the other caseGarrett Wollman1996-09-091-2/+2
| | | | | | | | is almost never useful. (This is only a quick hack; someone should go back and delete the entire subnetsarelocal==1 code path.) Notes: svn path=/head/; revision=18193
* Dequeue mbuf before freeing it. Fixes mbuf leak and a potential crash whenDavid Greenman1996-09-081-2/+5
| | | | | | | | | handling IP fragments. Submitted by: Darren Reed <avalon@coombs.anu.edu.au> Notes: svn path=/head/; revision=18160
* Fix the visibility of the sysctl variables.Alexander Langer1996-08-311-5/+5
| | | | | | | Submitted by: phk Notes: svn path=/head/; revision=17977
* Oops, send the operation type, not the name to the NAT code...Søren Schmidt1996-08-271-2/+2
| | | | Notes: svn path=/head/; revision=17851
* Mark sockets where the kernel chose the port# for.Poul-Henning Kamp1996-08-232-2/+5
| | | | | | | This can be used by netstat to behave more intelligently. Notes: svn path=/head/; revision=17795
* Add hooks for an IP NAT module, much like the firewall stuff...Søren Schmidt1996-08-215-23/+60
| | | | | | | | Move the sockopt definitions for the firewall code from ip_fw.h to in.h where it belongs. Notes: svn path=/head/; revision=17758
* Add #define's for RFC1716/RFC1812 new ICMP UNREACHABLE types.Bill Fenner1996-08-201-1/+4
| | | | | | | Obtained from: LBL's tcpdump distribution Notes: svn path=/head/; revision=17720
* Completely rewrite handling of protocol field for firewalls, things arePaul Traina1996-08-132-98/+45
| | | | | | | | | | now completely consistent across all IP protocols and should be quite a bit faster. Discussed with: fenner & alex Notes: svn path=/head/; revision=17587
* Add two more portrange sysctls, which control the area of the belowPeter Wemm1996-08-122-17/+52
| | | | | | | | | | | IPPORT_RESERVED that is used for selection when bind() is told to allocate a reserved port. Also, implement simple sanity checking for all the addresses set, to make it a little harder for a user/sysadmin to shoot themselves in the feet. Notes: svn path=/head/; revision=17541
* Megacommit to straigthen out ETHER_ mess.Poul-Henning Kamp1996-08-061-31/+17
| | | | | | | | I'm pretty convinced after looking at this that the majority of our drivers are confused about the in/exclusion of ETHER_CRC_LEN :-( Notes: svn path=/head/; revision=17455
* Filter by IP protocol.Alexander Langer1996-08-051-21/+36
| | | | | | | | | | Submitted by: fenner (with modifications by me) Use a common prefix string for all warning messages generated during ip_fw_ctl. Notes: svn path=/head/; revision=17440
* Eliminate some more references to separate ip_v and ip_hl fields.Garrett Wollman1996-07-245-16/+28
| | | | Notes: svn path=/head/; revision=17269
* Removed extraneous return.Alexander Langer1996-07-201-2/+1
| | | | Notes: svn path=/head/; revision=17227
* Switch back to logging accepted packets with the text "Allow" insteadAlexander Langer1996-07-141-2/+2
| | | | | | | of "Accept" Notes: svn path=/head/; revision=17172
* Fixed two bugs in previous commit: be sure to include tcp_debug.h whenDavid Greenman1996-07-122-3/+6
| | | | | | | TCPDEBUG is defined, and fix typo in TCPDEBUG2() macro. Notes: svn path=/head/; revision=17138
* Fix braino in rev 1.30 fix; m_copy() the mbuf that has the headerBill Fenner1996-07-121-2/+2
| | | | | | | | | pulled up already. This bug can cause the first packet from a source to a group to be corrupted when it is delivered to a process listening on the mrouter. Notes: svn path=/head/; revision=17137
* Don't use NULL in non-pointer contexts.Bruce Evans1996-07-121-2/+2
| | | | Notes: svn path=/head/; revision=17108