- Fixed the parameter of ipsecdoi_checkph1proposal() of initiator side. RFC 2409 says the last byte is not included the padding length. - Fixed to parse the responder's proposal on initiator. Error happened that the responder responded second proposal.
(started early Sep with ESP core crypto engine rewrite). perform m_pullup2 equivalent on IPv6 ESP transport mode, to avoid non-continuous mbuf. (this is not necessary for m_pulldown case) KAME PR 283. Thanks to TAHI guys and firstname.lastname@example.org.
perform m_pullup2 equivalent on IPv6 ESP transport mode, to avoid non-continuous mbuf. (not for m_pulldown case) KAME PR 283.
* kame/sys/netinet6/ip6_forward.c (ip6_forward): if the incoming interface equals to the outgoing one, and the link attached to the interface is point-to-point, then immediately drop the packet and send an ICMPv6 destination unreachable error message. This is currently experimental and needs the PROHIBIT_P2PREDIRECT kernel compilation option.
discard the packet and return an icmp6 dst unreach error. (experimental, enabled with PROHIBIT_P2PREDIRECT only)
old behavior (relay telnet session) does not seem like a sensible default - the behavior is historical. now faithd will die with usage on no argument. WARNING: you may need to change startup scripts, if you rely upon old "no argument" behavior.
be a common default. it may break backward compatibility of startup scripts.
Enabled to negotiate unique SAs. For example, you can configured each SAs of TCP and UDP between two nodes.
…r layer protocol between two nodes.
I'll do the same thing for freebsd3 soon.
* freebsd3/ports/fetchmail: update to 5.5.1 * freebsd3/ports/w3m: IPv6 ftp support
* kame/kame/pim6sd/pim6_proto.c (receive_pim6_join_prune): improved the algorithm of random delay calculation; the result of the previous algorithm was always 0 in spite of using random(). This fix was based on a comment from Toshiaki.Nakatsu@fujixerox.co.jp.