Permalink
Commits on Mar 25, 2001
  1. re-initialize mopt in ip6_insert_jumboopt().

    From: csapuntz@stanford.edu
    itojun committed Mar 25, 2001
  2. * sys/netinet6/{ip6_mroute,in6_prefix}.c: add missing splx.

      From: csapuntz@play-doh.stanford.edu (Constantine Sapuntzakis)
    itojun committed Mar 25, 2001
  3. missing splx(). From: csapuntz@play-doh.stanford.edu (Constantine Sap…

    …untzakis)
    itojun committed Mar 25, 2001
Commits on Mar 24, 2001
  1. corrected a dangling pointer.

    jinmei committed Mar 24, 2001
Commits on Mar 23, 2001
  1. warn if remote address mismatch happens.

    sakane committed Mar 23, 2001
  2. verify tunneled packets by scanning tunnel policies.

    maybe we should try to use the same policy while we peel a packet, however,
    there can be multiple policies that matches the particular header.
    
    TODO: integrate tnunel decapsulation dispatch into ip_encap.c
    itojun committed Mar 23, 2001
  3. * kame/sys/netinet6/natpt_{dispatch,rule,tslot,usrreq}.c

    - Change MALLOC type M_TEMP to M_NATPT.
      This causes serious memory leak in FreeBSD4.2 when leave M_TEMP.
    fujisawa committed Mar 23, 2001
  4. - Change MALLOC type M_TEMP to M_NATPT.

      This causes serious memory leak in FreeBSD4.2 when leave M_TEMP.
    fujisawa committed Mar 23, 2001
  5. 2001-03-23 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/icmp6.c (ni6_addrs, ni6_store_addrs):
    	If the 3rd bit of the icmp6_nodeinfo sysctl variable is clear,
    	- do not respond to node info FQDN to an RFC3041 temporary address.
    	- do not include temporary addresses in a node info Node Addresses
    	  reply.
    	This bit is clear by default based on privacy consideration.
    jinmei committed Mar 23, 2001
  6. - do not respond to node info FQDN to a RFC3041 temporary address

    - do not include temporary addresses in a node info node addr response
    unless the 3rd bit of the icmp6_nodeinfo sysctl variable is set.
    jinmei committed Mar 23, 2001
  7. Improve "remote address mismatched" error message -- include the

    actual remote address that we saw.
    thorpej committed Mar 23, 2001
  8. clarified the error message.

    sakane committed Mar 23, 2001
Commits on Mar 22, 2001
  1. When doing SP lookup, don't assume "0" as a port number means

    wildcard for *our* lookup.  Discussed w/ sakane & itojun.
    thorpej committed Mar 22, 2001
  2. check scope.

    itojun committed Mar 22, 2001
  3. permit IPV6_CHECKSUM setsockopt for IPPROTO_ICMPV6 raw socket,

    if the checksum offset is equal to offset of icmp6 checksum (= 2),
    to help exisitng applications including zebra (zebra daemon).
    comment from yoshfuji
    itojun committed Mar 22, 2001
  4. removed redundant FD_SET

    from Hoerdt Mickael <hoerdt@clarinet.u-strasbg.fr>.
    jinmei committed Mar 22, 2001
  5. printed router preference based on draft-draves-ipngwg-router-selecti…

    …on-01.txt.
    jinmei committed Mar 22, 2001
  6. use ipsec_gethist() to prevent packet filters from looking at decapul…

    …ated
    
    packets.
    itojun committed Mar 22, 2001
Commits on Mar 21, 2001
  1. * racoon:

    fixed to parse modp1536 of DH group. reported by <shigeru@iij.ad.jp>
    sakane committed Mar 21, 2001
  2. corrected an argument to recvmsg() in pim6_read()

    from Hoerdt Mickael <hoerdt@clarinet.u-strasbg.fr>
    jinmei committed Mar 21, 2001
  3. corrected the argument to recvmsg in mld6_read().

    from Hoerdt Mickael <hoerdt@clarinet.u-strasbg.fr>
    jinmei committed Mar 21, 2001
  4. typo

    jinmei committed Mar 21, 2001
  5. 2001-03-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/nd6.c (nd6_cache_lladdr): set nd6_gctimer to
    	ln_expire just after the state transition to STALE.  This change
    	fixed a bug that a longer timer value was mistakenly set, after
    	transition to the delay ND state.  The bug could delay NUD, but it
    	does not happen in a normal operation.  Thus, you do not
    	necessarily have to update the kernel in a hurry.
    
    	The bug was introduced around Jan 20th, 2001, and was found by a
    	recent TAHI coformance check.
    jinmei committed Mar 21, 2001
  6. in nd6_cache_lladdr(), set nd6_gctimer to ln_expire just after the state

    transition to STALE.
    In response to: failure discovered by a recent TAHI conformance test.
    jinmei committed Mar 21, 2001
  7. notification message in phase 2 has to be made by calling isakmp_info…

    …_send_n1().
    sakane committed Mar 21, 2001