Permalink
Commits on Jun 14, 2007
  1. make it compile on 4.1-current XXX quickhack

    itojun committed Jun 14, 2007
  2. fix problems with the previous commit.

    verified compilation on openbsd 4.1-current.
    itojun committed Jun 14, 2007
  3. ANSIfy, to reduce diffs with *BSDs.

    based on diff from dunceor at gmail.com.
    XXX not tested yet, sorry, we need to ressurect buildlab configs.
    
    random thoughts:
    - IGMPv3 support needs a serious cleanup.  argument passing is horrible, style
      does not meet style(9) at all.  i'm afraid there could be a lot of bugs.
    - DCCP/SCTP/NAT-PT need someone to maintain them, otherwise we should drop
      them at once.
    - we should pick a platform (one of *BSD) and try to get KAME tree in sync
      with more recent version of *BSD.  otherwise, KAME tree gets more and more
      out-of-date.
    itojun committed Jun 14, 2007
Commits on May 22, 2007
  1. RFC3946 (by pekka savola) has all the details on 6to4 packet filtering.

    refer draft-{itojun,cmetz}-*-harmful*.txt and
    draft-ietf-v6ops-security-overview-06.txt (again, by pekka savola).
    itojun committed May 22, 2007
Commits on May 17, 2007
  1. 2007-05-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/icmp6.c: Disabled responding to NI queries
    	from a global address by default as specified in RFC4620.
    	It can be re-enabled by setting the 0x8 flag of
    	net.inet6.icmp6.nodeinfo.
    jinmei committed May 17, 2007
  2. - Disabled responding to NI queries from a global address by default as

      specified in RFC4620.  A new flag for icmp6_nodeinfo was added to enable the
      feature.
    - Also cleaned up the code so that the semantics of the icmp6_nodeinfo
      flags is clearer (i.e., defined specific macro names instead of using
      hard-coded values).
    jinmei committed May 17, 2007
  3. disable aes-ctr for now, block size for aes-ctr is 1 (stream cipher)

    but we do not deal with stream cipher today.
    itojun committed May 17, 2007
Commits on May 13, 2007
  1. we finally have T-shirt page

    itojun committed May 13, 2007
  2. s/yea/yeah/

    itojun committed May 13, 2007
  3. update crypto export/import issues URL

    itojun committed May 13, 2007
Commits on May 11, 2007
  1. update crypto law URL

    itojun committed May 11, 2007
Commits on May 8, 2007
  1. too big default - reduce it

    itojun committed May 8, 2007
  2. clarifying some points in the previous code comment as well as some m…

    …inor
    
    style changes
    jinmei committed May 8, 2007
Commits on May 6, 2007
  1. comment on "drop packets with more than 1 routing header" code.

    suggested by jinmei.
    itojun committed May 6, 2007
Commits on May 5, 2007
  1. typo: s/baned/banned/

    itojun committed May 5, 2007
Commits on May 4, 2007
  1. - added some comments

    - removed an unnecesary code
    suz committed May 4, 2007
Commits on May 3, 2007
  1. drop packets with more than 1 routing headers.

    from claudio@openbsd
    itojun committed May 3, 2007
Commits on Apr 21, 2007
  1. oops

    itojun committed Apr 21, 2007
Commits on Apr 20, 2007
  1. disable type 0 routing header (for now - we'll make sure to enable it,

    hopefully soon - but do not hold your breath).
    
    http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
    itojun committed Apr 20, 2007
Commits on Apr 8, 2007
  1. ignore "unrecognized" router alert options so that the router can

    forward packets containing such a router alert option.  Actually, this code
    only treats IP6OPT_RTALERT_MLD as "recognized".
    
    pointed out by Andrew McDonald
    jinmei committed Apr 8, 2007
Commits on Mar 30, 2007
  1. removed duplicated macro definition.

    keiichi committed Mar 30, 2007
  2. added PHYNEXTHOP ioctl macros.

    keiichi committed Mar 30, 2007
Commits on Mar 27, 2007
  1. s/register //

    use sizeof() instead of hardcoded number
    itojun committed Mar 27, 2007
Commits on Feb 27, 2007
Commits on Feb 23, 2007
  1. openbsd: do not use buggy m_dup1, use m_copym2() which is deep-copy v…

    …ersion
    
    of m_copym() (equiv. to netbsd m_dup())
    itojun committed Feb 23, 2007
  2. missing {} - freebsd only

    itojun committed Feb 23, 2007
Commits on Feb 21, 2007
  1. include if_nemo.h when MIP6 is defined.

    keiichi committed Feb 21, 2007
  2. moved nemo specific ioctl macro to if_nemo.h

    keiichi committed Feb 21, 2007
Commits on Feb 20, 2007
  1. -DMIP_NO_MTUN is added to CFLAGS

    t-momose committed Feb 20, 2007
  2. Reverted: including if_xxx.h is required since some SIOCxxx were move…

    …d to the header.
    t-momose committed Feb 20, 2007
Commits on Feb 19, 2007
  1. Much fixes to work as inteded for MN.

    t-momose committed Feb 19, 2007