freebsd-dev

History

Crist J. Clark 784d7650f7 Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and firewall logging on and off when at elevated securelevel(8). It would be nice to be able to only lock these at securelevel >= 3, like rules are, but there is no such functionality at present. I don't see reason to be adding features to securelevel(8) with MAC being merged into 5.0. PR: kern/39396 Reviewed by: luigi MFC after: 1 week		2002-08-25 03:50:29 +00:00
..
ah6.h
ah_core.c
ah_input.c
ah_output.c
ah.h
dest6.c
esp6.h
esp_core.c
esp_input.c	check packet length before fetching ESP crypto checksum.	2002-08-24 04:48:13 +00:00
esp_output.c
esp_rijndael.c
esp_rijndael.h
esp.h
frag6.c
icmp6.c	Back out my lats commit of locking down a socket, it conflicts with hsu's work.	2002-05-31 11:52:35 +00:00
icmp6.h
in6_cksum.c
in6_gif.c
in6_gif.h
in6_ifattach.c
in6_ifattach.h
in6_pcb.c	Create new functions in_sockaddr(), in6_sockaddr(), and	2002-08-21 11:57:12 +00:00
in6_pcb.h	Create new functions in_sockaddr(), in6_sockaddr(), and	2002-08-21 11:57:12 +00:00
in6_prefix.c
in6_prefix.h
in6_proto.c	Change the default setting of an IPv4-mapped IPv6 address to off.	2002-07-25 15:44:01 +00:00
in6_rmx.c
in6_src.c	Back out my lats commit of locking down a socket, it conflicts with hsu's work.	2002-05-31 11:52:35 +00:00
in6_var.h	Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoid	2002-08-18 07:05:00 +00:00
in6.c
in6.h	o Merge <machine/ansi.h> and <machine/types.h> into a new header	2002-08-21 16:20:02 +00:00
ip6_ecn.h
ip6_forward.c
ip6_fw.c	Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and	2002-08-25 03:50:29 +00:00
ip6_fw.h
ip6_input.c	__FreeBSD__ is not a compiler constant. We must use	2002-05-31 17:56:45 +00:00
ip6_mroute.c	Replace (ab)uses of "NULL" where "0" is really meant.	2002-08-22 21:24:01 +00:00
ip6_mroute.h
ip6_output.c	Replace (ab)uses of "NULL" where "0" is really meant.	2002-08-22 21:24:01 +00:00
ip6_var.h	cleanup usage of ip6_mapped_addr_on and ip6_v6only. now,	2002-07-25 17:40:45 +00:00
ip6.h
ip6protosw.h
ipcomp6.h
ipcomp_core.c
ipcomp_input.c
ipcomp_output.c
ipcomp.h
ipsec6.h
ipsec.c
ipsec.h
mld6_var.h
mld6.c
nd6_nbr.c
nd6_rtr.c
nd6.c	Introduce support for Mandatory Access Control and extensible	2002-08-02 20:49:14 +00:00
nd6.h
pim6_var.h
pim6.h
raw_ip6.c	Notify functions can destroy the pcb, so they have to return an	2002-06-14 08:35:21 +00:00
raw_ip6.h
README
route6.c
scope6_var.h
scope6.c
tcp6_var.h
udp6_output.c
udp6_usrreq.c	Enclose IPv6 addresses in brackets when they are displayed printable with a	2002-08-19 19:47:13 +00:00
udp6_var.h

README

a note to committers about KAME tree
$FreeBSD$
KAME project


FreeBSD IPv6/IPsec tree is from KAMEproject (http://www.kame.net/).
To synchronize KAME tree and FreeBSD better today and in the future,
please understand the following:

- DO NOT MAKE COSTMETIC CHANGES.
  "Cosmetic changes" here includes tabify, untabify, removal of space at EOL,
  minor KNF items, and whatever adds more output lines on "diff freebsd kame".
  To make future synchronization easier. it is critical to preserve certain
  statements in the code.  Also, as KAME tree supports all 4 BSDs (Free, Open,
  Net, BSD/OS) in single shared tree, it is not always possible to backport
  FreeBSD changes into KAME tree.  So again, please do not make cosmetic
  changes.  Even if you think it a right thing, that will bite KAME guys badly
  during upgrade attempts, and prevent us from synchronizing two trees.
  (you don't usually make cosmetic changes against third-party code, do you?)

- REPORT CHANGES/BUGS TO KAME GUYS.
  It is not always possible for KAME guys to watch all the freebsd mailing
  list traffic, as the traffic is HUGE.  So if possible, please, inform
  kame guys of changes you made in IPv6/IPsec related portion.  Contact
  path would be snap-users@kame.net or KAME PR database on www.kame.net.
  (or to core@kame.net if it is necessary to make it confidential)

Thank you for your cooperation and have a happy IPv6 life!


Note: KAME-origin code is in the following locations.
The above notice applies to corresponding manpages too.
The list may not be complete.  If you see $KAME$ in the code, it is from
KAME distribution.  If you see some file that is IPv6/IPsec related, it is
highly possible that the file is from KAME distribution.

include/ifaddrs.h
lib/libc/net
lib/libc/net/getaddrinfo.c
lib/libc/net/getifaddrs.c
lib/libc/net/getnameinfo.c
lib/libc/net/ifname.c
lib/libc/net/ip6opt.c
lib/libc/net/map_v4v6.c
lib/libc/net/name6.c
lib/libftpio
lib/libipsec
sbin/ip6fw
sbin/ping6
sbin/rtsol
share/doc/IPv6
share/man/man4/ip6.4
share/man/man4/inet6.4
sys/crypto (except sys/crypto/rc4)
sys/kern/uipc_mbuf2.c
sys/net/if_faith.[ch]
sys/net/if_gif.[ch]
sys/net/if_stf.[ch]
sys/net/pfkeyv2.h
sys/netinet/icmp6.h
sys/netinet/in_gif.[ch]
sys/netinet/ip6.h
sys/netinet/ip_encap.[ch]
sys/netinet6
sys/netkey
usr.sbin/faithd
usr.sbin/gifconfig
usr.sbin/ifmcstat
usr.sbin/mld6query
usr.sbin/ndp
usr.sbin/pim6dd
usr.sbin/pim6sd
usr.sbin/prefix
usr.sbin/rip6query
usr.sbin/route6d
usr.sbin/rrenumd
usr.sbin/rtadvd
usr.sbin/rtsold
usr.sbin/scope6config
usr.sbin/setkey
usr.sbin/traceroute6