Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
tag: openbsd_snap_2…

Jun 14, 2007

  1. make it compile on 4.1-current XXX quickhack

    itojun authored
  2. fix problems with the previous commit.

    verified compilation on openbsd 4.1-current.
    itojun authored
  3. ANSIfy, to reduce diffs with *BSDs.

    based on diff from dunceor at gmail.com.
    XXX not tested yet, sorry, we need to ressurect buildlab configs.
    
    random thoughts:
    - IGMPv3 support needs a serious cleanup.  argument passing is horrible, style
      does not meet style(9) at all.  i'm afraid there could be a lot of bugs.
    - DCCP/SCTP/NAT-PT need someone to maintain them, otherwise we should drop
      them at once.
    - we should pick a platform (one of *BSD) and try to get KAME tree in sync
      with more recent version of *BSD.  otherwise, KAME tree gets more and more
      out-of-date.
    itojun authored

May 22, 2007

  1. RFC3946 (by pekka savola) has all the details on 6to4 packet filtering.

    refer draft-{itojun,cmetz}-*-harmful*.txt and
    draft-ietf-v6ops-security-overview-06.txt (again, by pekka savola).
    itojun authored

May 17, 2007

  1. 2007-05-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/icmp6.c: Disabled responding to NI queries
    	from a global address by default as specified in RFC4620.
    	It can be re-enabled by setting the 0x8 flag of
    	net.inet6.icmp6.nodeinfo.
    jinmei authored
  2. - Disabled responding to NI queries from a global address by default as

      specified in RFC4620.  A new flag for icmp6_nodeinfo was added to enable the
      feature.
    - Also cleaned up the code so that the semantics of the icmp6_nodeinfo
      flags is clearer (i.e., defined specific macro names instead of using
      hard-coded values).
    jinmei authored
  3. disable aes-ctr for now, block size for aes-ctr is 1 (stream cipher)

    but we do not deal with stream cipher today.
    itojun authored

May 13, 2007

  1. we finally have T-shirt page

    itojun authored
  2. s/yea/yeah/

    itojun authored
  3. update crypto export/import issues URL

    itojun authored

May 11, 2007

  1. update crypto law URL

    itojun authored

May 08, 2007

  1. too big default - reduce it

    itojun authored
  2. clarifying some points in the previous code comment as well as some m…

    …inor
    
    style changes
    jinmei authored

May 06, 2007

  1. comment on "drop packets with more than 1 routing header" code.

    suggested by jinmei.
    itojun authored

May 05, 2007

  1. typo: s/baned/banned/

    itojun authored
  2. comment on the ICMPv6 error return on rthdr0. based on chat w/ jinmei

    itojun authored

May 04, 2007

  1. - added some comments

    - removed an unnecesary code
    suz authored
  2. fixed a memory leak in unresolved ND queue processing. (Reported by H…

    …ikaru Abe)
    suz authored

May 03, 2007

  1. drop packets with more than 1 routing headers.

    from claudio@openbsd
    itojun authored

Apr 21, 2007

  1. oops

    itojun authored

Apr 20, 2007

  1. disable type 0 routing header (for now - we'll make sure to enable it,

    hopefully soon - but do not hold your breath).
    
    http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
    itojun authored

Apr 08, 2007

  1. ignore "unrecognized" router alert options so that the router can

    forward packets containing such a router alert option.  Actually, this code
    only treats IP6OPT_RTALERT_MLD as "recognized".
    
    pointed out by Andrew McDonald
    jinmei authored

Mar 30, 2007

  1. removed duplicated macro definition.

    keiichi authored
  2. changed IFT_MIP to IFT_MOBILEIP based on the request of Matt Thomas.

    keiichi authored
  3. added PHYNEXTHOP ioctl macros.

    keiichi authored

Mar 27, 2007

  1. s/register //

    use sizeof() instead of hardcoded number
    itojun authored

Feb 27, 2007

  1. imported experimental ipsecdb update code contributed by Francis Dupont.

    keiichi authored

Feb 23, 2007

  1. openbsd: do not use buggy m_dup1, use m_copym2() which is deep-copy v…

    …ersion
    
    of m_copym() (equiv. to netbsd m_dup())
    itojun authored
  2. missing {} - freebsd only

    itojun authored

Feb 21, 2007

  1. include if_nemo.h when MIP6 is defined.

    keiichi authored
  2. moved nemo specific ioctl macro to if_nemo.h

    keiichi authored

Feb 20, 2007

  1. -DMIP_NO_MTUN is added to CFLAGS

    t-momose authored
  2. Reverted: including if_xxx.h is required since some SIOCxxx were move…

    …d to the header.
    t-momose authored

Feb 19, 2007

  1. Recovered the line I deleted accidentally at the last commit

    t-momose authored
  2. Much fixes to work as inteded for MN.

    t-momose authored
Something went wrong with that request. Please try again.