BSD: Add the IPsec SA/SP database entries control
Add code for manipulation with TCP-MD5 keys in the IPsec SA/SP databaseat FreeBSD systems. Now, BGP MD5 authentication (RFC 2385) keys arehandled automatically on both Linux and FreeBSD.
Based on patches from Pavel Tvrdik.
Ensures that msg_controllen includes last padding.
Although RFC 3542 allows both cases, Theo de Raadt thinkshe knows better, and msg_controllen without last paddingfails on OpenBSD.
Thanks to Job Snijders for the bugreport.
IPv4/IPv6 integrated socket code.
Fixes build on some old systems.
Many changes in I/O and OSPF sockets and packet handling.
I/O: - BSD: specify src addr on IP sockets by IP_HDRINCL - BSD: specify src addr on UDP sockets by IP_SENDSRCADDR - Linux: specify src addr on IP/UDP sockets by IP_PKTINFO - IPv6: specify src addr on IP/UDP sockets by IPV6_PKTINFO...
Implements TTL security for OSPF and RIP.
Interfaces for OSPF and RIP could be configured to use (and request)TTL 255 for traffic to direct neighbors.
Thanks to Simon Dickhoven for the original patch for RIPng.
Better packet priority and traffic class handling.
Implements support for IPv6 traffic class, sets higher priority for OSPFand RIP outgoing packets by default and allows to configure ToS/DS/TClassIP header field and the local priority of outgoing packets.
Cleanup in sysdep KRT code, part 2.
Remove support for historic Linux kernels,merge krt-iface, krt-set and krt-scan stub headers.
The generalized TTL security mechanism (RFC 5082) support.
Thanks to Alexander V. Chernikov for the patch.
Use SO_BINDTODEVICE also in Linux/IPv6.
Minor fixes to previous patches.
Temporary OSPF commit - sockets.
Merge branch 'new' into socket2
Fix configure to enable warnings and fix most of them.
Temporary OSPF commit - socket changes.
Temporary OSPFv3 development commit (changing multicast support).
Linux specific TCP-MD5 handling moved to sysdep/linux/sysio.hFreeBSD coded added. BSD cannot set BGP passwords itself.This has to be done by external command.
Fixes compilation on older systems.
Older kernel headers (the ones in Debian Sarge) does nothave __kernel_sockaddr_storage .
Implementation of MD5 authentication of BGP sessions.
Multicast problems should be gone, although the fix is Linux only and we'llneed to figure out something better when working on new ports.
IPv6 support compiles on both glibc 2.0 and 2.1.
IPv6 compiles with glibc 2.1.
Better order of includes.
set_inaddr() moved to sysio.h.
Tried to clean up multicast handling. Now we don't try to guessmulticast abilities depending on definedness of symbols and use hard-wiredsystem-dependent configuration defines instead.
Please test whereever you can.