Julian Elischer
d5ee4959a7
MFC: rev 1.25
...
Stash more state into the diversion routing information.
Allow the user agent to specify a "receive" interface by name as well as
by address. Use this in the default case. This is because more than one
interface can have the same address in the case of P2P links. Should be
compatible with old clients.
1998-05-28 06:28:49 +00:00
Julian Elischer
344d037068
MFC: Take the loop avoidance factor from where the user put it and not
...
from the PCB (though it was sometimes correct).
from rev 1.24
1998-05-28 06:17:57 +00:00
David Greenman
e2c2af9a8c
brought in fix from rev 1.30: fix net.inet.icmp.bmcastecho = 0.
1998-05-26 11:38:48 +00:00
David Greenman
c359b67cbf
Brought in changes from rev 1.84: fix for timestamp processing.
1998-05-25 05:26:43 +00:00
Bill Fenner
f7eee400b0
Merge rev 1.30: take IP options into account when calculating length
1998-05-24 19:02:31 +00:00
Guido van Rooij
dcfa7b888e
MFC: mental disease correction
1998-05-18 17:12:44 +00:00
Guido van Rooij
33cda32e1c
MFH: parenthesis and a bug fix
1998-05-18 17:08:29 +00:00
Guido van Rooij
4f671d7bcd
MFC: disables TAO for those services that do not know about T/TCP
1998-05-12 19:33:23 +00:00
David Greenman
e321b3e873
MFC: tcp_var.h/1.43 & tcp_timer.c/1.28: bugfix for PR#6068 - connections
...
timing out too quickly.
1998-04-24 09:32:43 +00:00
Alexander Langer
6601a957c2
MFC (rev 1.79): Allow ICMP unreachable messages to be sent in response
...
to ICMP query packets.
1998-03-29 15:01:13 +00:00
Guido van Rooij
a4cc7f4b09
MFC: add uid's to struct socket.
1998-03-02 07:58:17 +00:00
Dima Ruban
c86f973ea7
MFC: NetBSD PR# 2772
...
Reviewed by: David Greenman
1998-02-26 17:17:09 +00:00
Julian Elischer
8fa950ecaf
MFC: fix typo in last commit
1998-02-25 02:34:30 +00:00
Julian Elischer
e80901d631
MFC: 1.28->1.29 define more IP protocols as defined in the new list. (rfc1700)
1998-02-25 02:18:12 +00:00
Guido van Rooij
881ad77662
MFC: Addition of forward_sourceroute and accept_sourceroute variables
...
in rc.conf and the implementation of the latter.
1998-02-23 20:21:37 +00:00
Guido van Rooij
085c2f151e
MFC: Only forward source routed packets when ipforwarding is set to 1.
...
(including Andrews fix for my typo, thanks)
Obtained from: Thomas Ptacek
1998-02-15 18:41:57 +00:00
Alexander Langer
c080068bf4
MFC: correct handling of fragmented packets.
1998-02-13 01:58:13 +00:00
Guido van Rooij
a1f7e01e87
MFC (rev 1.67 and 1.69): Do not sourceroute ever when dosourceroute
...
is set to 0.
1998-02-11 18:35:46 +00:00
Alexander Langer
cda3c22ce5
MFC (rev 1.75): suppress display of TCP/UDP port numbers for fragmented
...
packets when IP offset != 0.
1998-02-07 00:28:25 +00:00
Bill Fenner
26ccfeff7a
Merge rev 1.68 from -current (more complete fix for "land" attack)
...
PR: kern/5103
1998-01-30 19:13:55 +00:00
Alexander Langer
b07160254c
MFC (rev 1.70): missing parens.
1998-01-05 00:14:54 +00:00
Alexander Langer
3c28dfbe95
MFC (rev 1.69): ICMP type fix.
1998-01-05 00:11:16 +00:00
Alexander Langer
46b4f2e7b0
MFC (rev 1.67): restore commented out logging.
1997-12-28 16:49:37 +00:00
Julian Elischer
b26150537d
Obtained from: Whistle production tree
...
MFC:
Fix horrendous kernel stack overwrite bug
when ipwf was used to implement the ""reset tcp" firewall command.
Add a comment in the tcp code to stop others ever making the
same mistake.
1997-12-19 03:50:49 +00:00
David Greenman
84588e0912
MFC rev 1.36: splnet was not released in an error condition in
...
tcp_usr_send().
1997-12-18 09:52:01 +00:00
David Greenman
261835d9a8
MFC: call in_pcballoc() at splnet.
1997-12-18 09:42:41 +00:00
Alexander Langer
1ec95b81f2
Bring in compile time override of default rule from -current.
...
PR: 5068
1997-11-22 13:00:48 +00:00
Garrett Wollman
ab90fea96b
By popular demand, pull Matt Dillon's hackaround for the TCP self-connect
...
bug into -stable.
PR: 5103
1997-11-20 21:45:34 +00:00
Julian Elischer
b47837c71e
Submitted by: Archie cobbs (IPDIVERT author)
...
close small security hole where an atacker could sendpackets with
IPDIVERT protocol, and select how it would be diverted thus bypassing
the ipfirewall. Discovered by inspection rather than attack.
(you'd have to know how the firewall was configured (EXACTLY) to
make use of this but..)
1997-11-13 22:57:33 +00:00
Bill Fenner
6209f9d777
MFC: Don't try to put more than TCP_MAXWIN in the window field.
...
Ok'd by: jkh
1997-10-08 05:10:07 +00:00
David Greenman
0a24fcb8f9
Brought in changes from rev 1.63: backed out part of rev 1.52 (extra
...
SYN_RECEIVED processing that breaks RST handling)
1997-10-04 08:54:12 +00:00
Bill Fenner
abc2381afa
MFC: Don't consider a SYN/ACK with CC but no CCECHO a proper T/TCP
...
handshake.
1997-09-30 16:43:38 +00:00
David Greenman
430ac1d361
Merged from -current: data struct reorg and improved ordering of compares
...
in the PCB lookup code (see rev 1.30 of in_pcb.c).
This will require a rebuild of netstat.
1997-09-30 16:25:11 +00:00
Joerg Wunsch
35dc68d1b9
MFC: make TCPDEBUG a new-style option
1997-09-16 18:37:02 +00:00
Andrey A. Chernov
c6b3c9f414
MFC: remove ipq queue declaration, not used outside ip_input.c
1997-09-16 12:03:45 +00:00
Andrey A. Chernov
392783eb09
MFC: prevent overflow with fragmented packets
...
Reviewed by: wollman
1997-09-15 23:10:55 +00:00
Garrett Wollman
d4899e9c97
Bring ``broadcast/multicast echo'' fixes into 2.2.
...
Merges revs. 1.7 and 1.8 of icmp_var.h and revs. 1.28 and 1.29 of ip_icmp.c.
1997-08-25 16:33:02 +00:00
Alexander Langer
e5f2ef17e5
Merge from -current: fixed logging of verbose limited packets.
1997-08-23 14:31:52 +00:00
Alexander Langer
7fcfedaeed
Merge fix for PR 4209 from -current.
1997-08-21 01:30:23 +00:00
Alexander Langer
0c0edec059
Merge from -current: ensure termination of interface name.
1997-08-06 00:22:59 +00:00
Brian Somers
6f2df13a35
YAMFC: Recalculate ip_sum before passing a
...
re-assembled packet to a divert port.
Pointed-out by: Ari Suutari <[email protected]
1997-07-25 04:03:50 +00:00
Bill Fenner
6192382cc3
MFC: Remove crufty LBL ifdef that only applies to Suns.
...
Submitted by: Craig Leres <[email protected]
1997-07-19 20:09:09 +00:00
John Polstra
94f53de816
Merge from main branch 1.58 -> 1.59: fix for PR kern/3998.
...
PR: kern/3998
1997-07-07 20:50:22 +00:00
Julian Elischer
580bb49dcf
YACFC
...
bring back the ipfirewall changes
this allows more secure firewall and to reject TCP
requests correctly
Submitted by: Whistle Communications
user-mode changes to follow.
1997-06-20 23:05:38 +00:00
Julian Elischer
ca1af3ff24
Submitted by: [email protected]
...
When ipfw rejects a locally generated packet the icmp code shouldn't
core dump because there is no rcv interface.
1997-05-23 23:56:01 +00:00
Bill Fenner
b680f5d735
Merge rev 1.46; disallow raw IP packets shorter than the IP header.
1997-05-22 20:53:36 +00:00
Bill Fenner
d5c983603e
Bring in rev 1.56 (pullup ip header in ip_mloopback() ).
...
PR: kern/3410
1997-05-17 19:18:15 +00:00
Tor Egge
270fd87cbb
Merge from current: Don't send arp request for the ip address 0.0.0.0.
1997-05-14 16:45:42 +00:00
Tor Egge
5337d7a2a5
Bring in some kernel bootp support. This removes the need for netboot
...
to fill in the nfs_diskless structure, at the cost of some kernel
bloat. The advantage is that this code works on a wider range of
network adapters than netboot. Several new kernel options are
documented in LINT.
Obtained from: parts of the code comes from NetBSD.
1997-05-11 18:05:39 +00:00
Alexander Langer
76275a6104
Merge from -current: create default rule with IP_FW_F_IN | IP_FW_F_OUT.
1997-05-06 02:21:28 +00:00
Julian Elischer