Gleb Smirnoff 1817be481b Add net.inet6.ip6.source_address_validation ...

Drop packets arriving from the network that have our source IPv6
address.  If maliciously crafted they can create evil effects
like an RST exchange between two of our listening TCP ports.
Such packets just can't be legitimate.  Enable the tunable
by default.  Long time due for a modern Internet host.

Reviewed by:		melifaro, donner, kp
Differential revision:	https://reviews.freebsd.org/D32915

2021-11-12 09:01:40 -08:00

..

dest6.c

…

frag6.c

frag6: do less work in frag6_slowtimo if possible

2021-08-14 18:51:00 +02:00

icmp6.c

lltable: Add support for "child" LLEs holding encap for IPv4oIPv6 entries.

2021-08-21 17:34:35 +00:00

icmp6.h

…

in6_cksum.c

…

in6_fib_algo.c

Fix dpdk/ldradix fib lookup algorithm preference calculation.

2021-03-07 22:17:53 +00:00

in6_fib.c

Fix unused-function waring when compiling with FIB_ALGO.

2021-01-30 23:25:56 +00:00

in6_fib.h

Add modular fib lookup framework.

2020-12-25 11:33:17 +00:00

in6_gif.c

net: Introduce IPV6_DSCP(), IPV6_ECN() and IPV6_TRAFFIC_CLASS() macros

2021-03-04 20:56:48 +01:00

in6_ifattach.c

nd6: Mark several callouts as MPSAFE

2021-08-09 13:27:52 -04:00

in6_ifattach.h

…

in6_jail.c

…

in6_mcast.c

Fix panic in IPv6 multicast code.

2021-08-06 12:57:59 +03:00

in6_pcb.c

net: Allow binding of unspecified address without address existance

2021-10-20 19:25:51 -04:00

in6_pcb.h

…

in6_pcbgroup.c

…

in6_proto.c

inet6(4): add a missing IPPROTO_ETHERIP entry

2021-08-27 17:14:35 +09:00

in6_rmx.c

…

in6_rss.c

…

in6_rss.h

…

in6_src.c

Move in6_pcbsetport() to in6_pcb.c

2021-10-18 10:19:03 -07:00

in6_var.h

Remove per-packet ifa refcounting from IPv6 fast path.

2021-02-15 22:33:12 +00:00

in6.c

Add in_localip_fib(), in6_localip_fib().

2021-11-12 08:59:42 -08:00

in6.h

Add in_localip_fib(), in6_localip_fib().

2021-11-12 08:59:42 -08:00

ip6_ecn.h

…

ip6_fastfwd.c

…

ip6_forward.c

…

ip6_gre.c

…

ip6_id.c

…

ip6_input.c

Add net.inet6.ip6.source_address_validation

2021-11-12 09:01:40 -08:00

ip6_mroute.c

ip6mrouter: Make the expiration callout MPSAFE

2021-09-07 11:19:29 -04:00

ip6_mroute.h

…

ip6_output.c

ipv6: Fix getsockopt() for some IPPROTO_IPV6 level socket options

2021-08-09 09:29:13 +02:00

ip6_var.h

…

ip6.h

…

ip6protosw.h

…

ip_fw_nat64.h

…

ip_fw_nptv6.h

…

mld6_var.h

…

mld6.c

…

mld6.h

…

nd6_nbr.c

nd6: Make the DAD callout MPSAFE

2021-09-07 11:19:29 -04:00

nd6_rtr.c

lltable: fix crash introduced in c541bd368f86.

2021-08-22 08:49:18 +00:00

nd6.c

inet6(4): Fix a few common typos in source code comments

2021-08-28 18:53:59 +02:00

nd6.h

lltable: Add support for "child" LLEs holding encap for IPv4oIPv6 entries.

2021-08-21 17:34:35 +00:00

pim6_var.h

…

pim6.h

…

raw_ip6.c

socket: Implement SO_RERROR

2021-07-28 09:35:09 -07:00

raw_ip6.h

…

route6.c

…

scope6_var.h

…

scope6.c

…

sctp6_usrreq.c

sctp: Tighten up locking around sctp_aloc_assoc()

2021-09-11 10:15:21 -04:00

sctp6_var.h

…

send.c

socket: Implement SO_RERROR

2021-07-28 09:35:09 -07:00

send.h

…

tcp6_var.h

tcp: add support for TCP over UDP

2021-04-18 16:16:42 +02:00

udp6_usrreq.c

blackhole(4): disable for locally originated TCP/UDP packets

2021-11-03 13:02:44 -07:00

udp6_var.h

…