Commits on Jul 31, 2001
  1. SADB_X_SATYPE_POLICY is obsoleted

    itojun committed Jul 31, 2001
  2. the phase1 deletion should be postponed until there is no phase2.

    this was probably made a consensus at vpn bakeoff on Oct, 1998.
    sakane committed Jul 31, 2001
  3. SADB_X_SATYPE_POLICY is obsolete (do not reuse)

    itojun committed Jul 31, 2001
  4. wording

    itojun committed Jul 31, 2001
  5. s/userv/server/

    itojun committed Jul 31, 2001
  6. sync with reality

    itojun committed Jul 31, 2001
  7. setup m_len on m_dup1. from stomomi

    itojun committed Jul 31, 2001
Commits on Jul 30, 2001
  1. add an inactivitiy monitoring; if there's no response for the past

    5 queries, do not query the server for coming 5 seconds.
    (not sure the policy is optimal)
    itojun committed Jul 30, 2001
  2. wording in ipsec

    itojun committed Jul 30, 2001
Commits on Jul 29, 2001
  1. wording (ipsec sec*)

    itojun committed Jul 29, 2001
  2. use AC_CHECK_FUNCS(lwres_getrrsetbyname)

    itojun committed Jul 29, 2001
  3. add -Wl for NetBSD (otherwise configure won't go okay)

    pedant for isakmp.c (-DINET6)
    itojun committed Jul 29, 2001
  4. 2001-07-29 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/(several files): several improvements on the
    	IPv6 output routine:
    	- added a seprate function in6_selectroute() to centralize the
    	  route and outgoing interface selection algorithm
    	- call in6_selectroute() from in6_selecsrc() and ip6_output(), and
    	  use same codebase for both unicast and multicast packets as much
    	  as possible
    	- added stricter (and thorough) scope checks for outgoing packets
    	  (e.g. this check would prevent a packet generated by
    	  'ping6 -S ::1 fe80::1%ne0' from being sent)
    	- renamed in6_addr2scopeid() to in6_addr2zoneid() to be more intuitive
    	  in terms of the scope architecture
    	- made in6_addr2zoneid take care of the loopback address
    	- set the tentative flag before joinging multicast addresses, so
    	  that the corresponding MLD packet would not have a tentative
    	  source address
    
    2001-07-29  JINMEI, Tatuya  <jinmei@isl.rdc.toshiba.co.jp>
    	* kame/sys/netinet6/nd6_nbr.c (nd6_ns_output):
    	* kame/sys/netinet6/nd6_nbr.c (nd6_na_output):
    	* kame/sys/netinet6/icmp6.c (icmp6_redirect_output):
    	do not pass a pointer to a pointer to ifnet to ip6_output() for
    	counting statistics, use the interface on which the ND process is
    	involved instead.
    
    2001-07-29  JINMEI, Tatuya  <jinmei@isl.rdc.toshiba.co.jp>
    	* kame/sys/netinet6/mld6.c (mld6_input): allowed MLD messages to
    	have the unspecified address as source.
    	* kame/sys/netinet6/mld6.c (mld6_sendpkt): use the unspecified
    	address when there is no valid link-local address available.
    jinmei committed Jul 29, 2001
  5. --with-liblwres

    itojun committed Jul 29, 2001
  6. do rtalloc_mpath in !clone cases, too.

    jinmei committed Jul 29, 2001
  7. - allowed MLD messages to have the unspecified address as source.

    - renamed the macro IPV6_DADOUTPUT to IPV6_UNSPECSRC.  The former is now
      more suitable.
    jinmei committed Jul 29, 2001
  8. prototype for in6_selectroute

    itojun committed Jul 29, 2001
  9. sync with scope-friendly ctlinput

    itojun committed Jul 29, 2001
  10. count statistics for outgoing ND packets on the corresponding interface;

    I don't think we have to pass ifpp to ip6_output and use it for the
    statistics, but correct it if I'm wrong.
    jinmei committed Jul 29, 2001
  11. sync with reality - RADIX_MPATH uses ip6_dst only.

    correct IPsec sample for transport + gif0.
    itojun committed Jul 29, 2001
  12. fix compilation for RADIX_MPATH case. now it is impossible to take

    src address into route selection hash value.
    itojun committed Jul 29, 2001
  13. prototype for in6_selectroute().

    jinmei committed Jul 29, 2001
  14. added several improvements on IPv6 output routine

    (I should've done some of them by separate commits...sorry):
    
    - added a seprate function in6_selectroute() to centralize the route and
      outgoing interface selection algorithm
    - call in6_selectroute from in6_selecsrc() and ip6_output(), and use same
      codebase for both unicast and multicast packets as much as possible.
    - added stricter (and thorough) scope checks for outgoing packets
      (e.g. this check would prevent a packet generated by
       'ping6 -S ::1 fe80::1%ne0')
    - renamed in6_addr2scopeid to in6_addr2zoneid to be more intuitive in terms
      of the scope architecture
    - made in6_addr2scopeid take care of the loopback address
    - set the tentative flag before joinging multicast addresses, so that the
      corresponding MLD packet would not have a tentative source address
    
    Although the change is quite large, I just compiled the code on bsdi4.
    Please check it on other platforms, thanks.
    jinmei committed Jul 29, 2001
  15. typo

    itojun committed Jul 29, 2001
  16. no need for MROUTING

    itojun committed Jul 29, 2001
  17. make encap_attach and encap_attach_func switchable, to help

    *BSD-current merge with different ip_encap.
    itojun committed Jul 29, 2001
Commits on Jul 28, 2001
  1. replace socklen_t with int, when socklen_t is not available.

    Necessary for compilation on bsdi3 & freebsd2.
    	XXX: better to define socklen_t in these OS?
    suz committed Jul 28, 2001
  2. bring sec* interface to IFF_UP, we are willing to receive traffic on

    ipsec tunnel.
    itojun committed Jul 28, 2001