CVS log for kame/IMPLEMENTATION

RFC3946 (by pekka savola) has all the details on 6to4 packet filtering.
refer draft-{itojun,cmetz}-*-harmful*.txt and
draft-ietf-v6ops-security-overview-06.txt (again, by pekka savola).

fix mbuf paragraph

s/node-local/interface-local/

DHCPv6 Information Refresh Time Option has become an RFC (4242)

RFC4191: Default Router Preferences and More-Specific Routes

updated the i-d number

removed descriptions about NAT-PT, since NAT-PT supports only FreeBSD4
and FreeBSD4 is no longer supported.

more comments about in6_clearscope()

added some more comments

minor fix to usage example

return value of in6_setscope()

wording

refer to comments in udp6_output()

added implementation notes about scope-related routines

s/draft-ietf-ipngwg-scoping-arch/RFC4007/

RFC4007

wording

do not mention DAD heurestic code, as it was already gone

wording

fill in rfc # for AES CTR mode

implemented stateful non-temporary address assignment using DHCPv6.

Added NEMO I-D

draft-ietf-ipv6-privacy-addrs-v2-01.txt

scoping-arch-02

RFC3493: the AI_ADDRCONFIG flag is now implemented in a spec-compliant way.

updated rev. number of rfc2462bis to 06

draft-ietf-dhc-lifetime-02.txt: Information Refresh Time Option for DHCPv6

described "disable IPv6 operation on DAD failure"

updated DHCPv6 implementation

draft-ietf-ipv6-rfc2462bis-04.txt: IPv6 Stateless Address
	Autoconfiguration (revised)

note that NAT-PT works on freebsd4 only.

updated draft/RFC name

additional comments on the implementation of RFC3493:
    * The AI_ALL and AI_V4MAPPED flags are not supported.  The AI_ADDRCONF flag
      is not yet implemented.

draft-ietf-ipv6-scoping-arch-01.txt (increment the revision number)

RFC3736: Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6

draft-ietf-dhc-lifetime-00.txt: Lifetime Option for DHCPv6

style: folded long lines

updated supported RFC/draft list

Updated MIP6

RFC3633: IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP)
	version 6

RFC3646: DNS Configuration options for Dynamic Host Configuration Protocol for
         IPv6 (DHCPv6)

a wording nit and a cosmetic fix.

removed ISATAP due to the IPR issue raised in
http://www.ietf.org/ietf/IPR/sri-ipr-draft-ietf-ngtrans-isatap.txt.

updated PIM-SM draft number

RFC3590 has already been supported

typo, tnx deraadt

rfc3602

xcbc-mac is now RFC3566

s/2553bis/3493

refer mapped-harmful

we no longer implement mcdonald ipsec API

whitespace

wording

IPR policy

removed vrrp6 regarding IPR.

wording

wording

updated the note about the dhcpv6 implementation.

dhcp extension draft is obsolete

s/ipngwg-scoping-arch/ipv6-scoping-arch/

DHCPv6 has become RFC3315.

hmac-ripemd160

Kame mobileip implementaiton is now ID-21 compliant.
(it will be ID-24 or RFC complient soon)

new draft for aes-xcbc-mac

* sys/netinet6/esp_aesctr.c: support draft-ietf-ipsec-ciph-aes-ctr-03
  as there's no official DOI assignment yet, we use private DOI number.
* sys/netinet6/ah_aesxcbcmac.c: support
  draft-ietf-ipsec-ciph-aes-xcbc-mac-03.
  as there's no official DOI assignment yet, we use private DOI number.

extra space

2292bis -> 3542

RFC3542 - advapi

update the sections on ALTQ.

RFC2553/3493

RFC 3493: Basic Socket Interface Extensions for IPv6 (revised)

grammar

Supported draft of mobile ipv6 is 20

wording

rfc2292bis-09

default-addr-select has become an RFC.

updated the implementation status

added ISATAP

correcting English from freebsd-current.

updated revision numbers of DHCPv6 and dhcpv6-PD.

updated current status of Mobile IPv6

added some clarification on the "-I iface" option and the '%' notation
for scoped addresses.

supported MLDv2 on OpenBSD

updated draft / RFC regarding SSM

remove doc reference to "pseudo-device sec"

2292bis-08.

grammar, typo

updated Mobile IPv6 section.

added SSM-related drafts

corrected the title of the address selection draft.

draft-ietf-ipv6-default-addr-select-08.txt

draft-ietf-vrrp-ipv6-spec-02.txt: Virtual Router Redundancy Protocol for IPv6

wording

dhcpv6-26
troan-dhcpv6-opt-prefix-delegation-01

6wind can be interoperable ipsec with kame.

follow KNF as much as possible

name-lookup-09

dhcpv6-24

rfc2292bis-07

RFC3152: Delegation of IP6.ARPA
    * libinet6 resolvers contained in the KAME snaps support to use
      the ip6.arpa domain (with the nibble format) for IPv6 reverse
      lookups.

grammar

updated the revision number of the addr-select draft

rfc2292bis-06

commented the case of IPV6_DONTFRAG and IPV6_RECVPATHMTU options
for TCP sockets.

updated the revision number of rfc2292bis

- more description about the router selection of ND
- wording nits

wording

addrselect -> ip6addrctl

- added draft-ietf-ipngwg-icmp-v3-02.txt
- removed draft-ietf-ipngwg-p2p-pingpong-00.txt since it has been merged to
  the latest icmpv6 draft

updated the version of rfc2553bis

documented the destination address ordering.

wording

documented the address selection policy and the addrselect(8) command.

removed a white space after EOL.

tclass-api has been merged into rfc2292bis-03.

updated the revisions

updated the revision number of the addr-select draft.

more explicit wordings on IPv4 mapped address:
- kernel drops packets with IPv4 mapped address
- see transition-abuse.conf for attack scenarios

typo

on netbsd, gif can encapsulate netiso packets (EON encapsulation)

wording

fixed URL of NEC mip6 site

remove warning on ART, it is now okay

update mip6 status description.

wording.  add soe eth driver.

talk about diffs between draft-itojun-ipv6-tclass-api-03.txt and current code

IPcomp is now RFC3173

fixed a typo.

draft-ietf-dnsext-mdns to 03

draft-ietf-ipngwg-temp-addresses-v2-00.txt:
	Privacy Extensions for Stateless Address Autoconfiguration in IPv6
    * a revised version of RFC 3041.

mbuf alignment requirement is only for freebsd[234] and bsdi[34]
XXX check bsdi3

documented a new rule for source address selection; "preferred interface"

documented the relationship between accept_rtadv ND6_IFF_ACCEPT_RTADV.

commented the per-interface flag to control the "accept_rtadv" behavior.

wording

wording

add tested peers at helsinki

english grammar

described a new rule of src addr selection; prefer addresses on alive
interfaces.

english grammar

revised source address selection based on the latest code.

draft-ietf-ipngwg-default-addr-select-05.txt:
	Default Address Selection for IPv6
	the selection algorithm for both source and destination addresses
	is implemented based on the draft, though some rules are still
	omitted.

draft-ietf-ipsec-ciph-aes-cbc now 01

racoon does not implement byte lifetime.

how to remove a module in the repository.

wording

wording in ipsec

sync with reality - RADIX_MPATH uses ip6_dst only.
correct IPsec sample for transport + gif0.

wording

sync with reality (section 4.2, phase 2 proposal for IP AH ESP IP)

document tunnel mode behaviors
XXX way too complex by nature, most people wouldn't have any idea about this...

printf() avoidance is just for packet input path.

style: Do not use printf() in the kernel code.

typewriting rule: two spaces after end of sentence

(src ^ dst) for multipath hash value

TOA has been added if it's obstacle and unuseless, please remove it.

section number seems incorrect

in_ifinit is already fixed for multipath.

* sys/net/radix_mpath.c: (netbsd, RADIX_MPATH) reject RTM_ADD of
  conflicting entries, where all key/mask/gw are the same.

multiple interface address does not work well with RADIX_MPATH, so add
it to the issues (should fix in_ifinit following IPv6 counterpart)

bsdi4 supports DNAME and bit string label, to some extent

there is no abuse-02

wording

1.17 DNS resolver

wording in section 7.2

wrong plural

move RFC2991/2992 references from section 1 to section 7.2

new section: 7. routing table extensions

move multipath doc into IMPLEMENTATION.  it is a bad habit to put too much
docs into change history...

increase i-d revision

correct title of p2p-pingpong draft

draft-ietf-ipngwg-p2p-pingpong-00.txt: avoid packet ping-pong on a p2p link.

s/netbsd15/netbsd151/

  When inserting a separate block just to define some intra-block
  variables, add the level of indentation as if the block was in a
  control statement such as if-else, for, or while.
(I may have been wrong about the consensus on this.)

how to set 8-tab with emacs

make section 7 more readable - indentation lost sometime in the past

faithd = RFC3142

added comments about the style like
  if (!(flag & FLAG_A))  /* (F) the FLAG_A is NOT set */
  if ((flag & FLAG_A))   /* (G) the FLAG_A is set */

update some documentations to note the removal of MIP6 code.

updated the status of default router selection.

ericsson implements -13 mip6 draft

english grammar

move personal submitssion to bottom

warn that the document is about KAME/*BSD, not stock *BSD

update notes on mapped addr behavior (netbsd)

put personal drafts after wg ones.

route information option seems to be supported
(I'm not sure if it is really correct.)

move MTU issue to gif(4)

comment on RFC2893 path MTU/ICMP concerns

wording.

english grammar

faith draft now 04

wording

a bit more clarification on a link vs an interface.

updated ducument version:
+draft-ietf-ipngwg-rfc2553bis-03.txt:
+draft-ietf-ipngwg-rfc2292bis-02.txt:
+draft-ietf-mobileip-ipv6-13.txt
+draft-ietf-ngtrans-tcpudp-relay-04.txt:
+draft-itojun-ipv6-transition-abuse-02.txt
+draft-ietf-dnsext-mdns-00.txt
+draft-itojun-ipv6-tclass-api-02.txt

updated the document status of PIM-SM.
- removed draft-ietf-pim-ipv6-xxx.
- added draft-ietf-pim-sm-v2-new-02.txt with a note.

typo.

draft-ietf-ipngwg-scoping-arch-02.txt:
	The architecture, text representation, and usage of IPv6
	scoped addresses.
    * some part of the documentation (especially about the routing
      model) is not supported yet.

removed draft-ietf-ipngwg-scopedaddr-format-02.txt, which was too old and has
already expired.

totally revise the "scope zone index" section.
- update related document.
- repeatedly note that we just assume 1-to-1 relationship between links and
  interfaces, which is not necessarily the case according to the architecture.
- update the API subsection based on recent status of the standards.
- clarify or improve terminology, wording, and english grammar.

grammar.

the default router selection draft is now a working group item.

draft-draves-ipngwg-router-selection-01.txt:
	Default Router Preferences and More-Specific Routes
    * router-side, router preferences only.

list SHA2-*

document ESP random padding

s/bindv6only/v6only/gc

RIJNDAEL uses IANA-assigned number.

src addr selection takes care of temporary addresses.

wording.

faith draft 02

SFC mobile-ip6 URL (empty!)

wording (use of :: in source)

fixed comments on RFC3056: "the next item" is not the itojun's abuse draft
any more.

6to4 is now RFC (TODO: check conformance, i-d -> RFC changes)

describe ND6_DEBUG/net.inet6.icmp6.nd6_debug

typo

corrected description about source address selection.
the previous one was simply incorrect.

update source address selection:
- we now prefer addresses on on-link addresses than just longest-matching ones.
- described how temporary addresses are considered in source address selection.

add RFC# for A6/DNAME

clearify tabstop

describe mip6 status  better (section 6)

privacy extension now RFC3041

draft-ietf-ipngwg-addrconf-privacy-04.txt:
	Privacy Extensions for Stateless Address Autoconfiguration in IPv6

a/the

(style) creating copyright.

with -> without

tabs around $ seems to be used ubiquitously

escape $ (to prevent from being updated)

more notes about the style; we never force the style.

$KAME$, not $KAME:

about $KAME.

some notes about coding style.
comments are welcome.

mention mobile-ip6 HA option support

freebsd4 driver compatibility

IPV6_AUTOFLOWLABEL

implement draft-itojun-ipv6-tclass-api-01.txt.

correct rijndael/twofish location

refer openbsd ipsec faq

add VPNC conformance test URL

more interoperated platforms

add NetLock

added pivotal to be interoperability.

more IPsec interoperability list.

more interoperable implementation (ipsec)

correct 2553bis/2292bis name/title entry

advacned the version number of the icmp-name-lookups draft.

declare lack of ipv4 mapped support more explicitly

removed comments about the "two-hour" problem.

rijndael/twofish support

RFC2893 obsoletes 1933

lack of strict/loose bitmap support in RFC2292 backward compat

wording fix again.

wording.

wording

documented about net.inet6.ip6.hdrnestlimit

drop IPsec RC5 support.

list malicious ipv4 compatible addresses

improve reach conf hint description

rrenum is now RFC

2292bis/2292 issue (chapter 1.16)

no string padding in dhcp6

$KAME$

kame does not forward :: source.

unspecified source

update document # for abuse draft (it's now in i-d repository).
talk about lack of SIIT support (both the translator box and the client).

updated IPsec tunnel for IPv6.

use "link index" for link-local scope instead of "interface index"

support name-lookups-06 draft.
- link-local queries are now permitted, so "ping6 -w ff02::1" is now legal
  (we still have some issue with Subject address validation)
- "code" field for NOOP/supported-qtype is now clarified

reviewd and revised for stable
(move the tag, pls)

write up freebsd4 issue

add freebsd4x issue, usually 4x is same as 3x

wording on mdnsd

openbsd: wi on pcmcia/i386 works just fine (will move tag)

* sys/netinet6/in6_proto.c: disable rate limitation for ICMPv6 error,
  since (1) it makes no sense to put less-than-10ms value to here
  due to UNIX timer resolution, and (2) it seems wrong to rate-limit
  without considering content of the payload (like ICMPV6 type/code).
  we still have pps limitation.  based on comments from kjc.

wording fix (IPv4 mapped)

correct IPv4 mapped address issue with ftp/ftpd.

6to4-05 -> 06

document ND upper-layer hint processing.

correct slightly confusing comment about SIIT.

IPv4 mapped handling:
- KAME ftp: convert to AF_INET address, pass it to AF_INET layer, use PORT/PASV
	(since we determine PORT or EPRT by sa_family)
- SIIT client: must pass it to AF_INET6 layer, however, use PORT/PASV

therefore, to implement SIIT client, ftp must remember which FTP subcommand
variant to be used, separately from sa_family of control connection.

mention kame/mdnsd

more on IPv4 mapped

more about IPv4 mapped address

kame/netbsd now disallows bind(2) with IPv4 mapped address

sync with reality.
- freebsd3 no longer have options MAPPED_ADDR_ENABLED
- bsdi4 no longer has ordering constraint in bind(2)
- netbsd has a bug in AF_INET6 bind(2) with IPv4 mapped address

on icmp6 rate limit

wording/typo

update driver support table.

summary: how the necessary node addresses are configured.  PR 253.

change faith draft # (00 -> 01)

cange draft # to 6to4-05.

reflect draft name format change for dhcp6 ext.

update dhcp6 draft # (base: 15 ext: 12)

fix a typo.

refer mip6 QUICKSTART

add ref to RFC2671 (EDNS0).

mention draft-ietf-ngtrans-tcpudp-relay-00.txt in FAITH section.

add netbsd ne/pcmcia into supported cards

some note about NUD on p2p.  will move tag for stable.

correct reference to draft-ietf-ipsec-ecn-02 (will sync to stable)

as a matter of fact, we do not conform to 6to4-04
(we do not attach link-local)

revised I-D versions;
6to4 -> 04
router-renum -> 10
pim-ipv6 -> 03
*** move tag, please ***

stopped mentioning draft-yamamoto-wideipv6-comm-model-00.txt
the source address selection is now quite different from the way in the draft.
(please revert if I'm wrong. Otherwise, move tag pls.
 sorry for commiting so often..)

wording fixes.
(move tag, please.)

revised document about source address selection according to
the latest implementation and related documents.
(move tag?)

s/openbsd/openbsd isakmpd/

typo

refer 01 draft for scopedaddr-format

wording on 6to4

add 6to4

comment on ipcomp

more wording on IPsec.
- multiple AH processing
- "tunnel" proposal in IKE

change draft # for ipngwg-icmp-name-lookups to 05

BBN hack is now in #ifdef BBNHACK, proxy NDP should work for all platforms.

ipsec for bsdi4 is ready

comment on proxy ND.

with freebsd3 fxp, there was multicast filter initialization problem.

fe80::1%de0 is not really scoped-addr-format-00.  s/00/??/

now ALTQ is LP64 friendly.

interop with NAI PGPnet (IKE, pre-shared key)
To: freebsd-security
From: "Josef Pojsl" <josef.pojsl@skynet.cz>

flip extended scopeid back.

remove ref to NAT-PT.

add RFC2766.

add RFC2766.

fix examples like "fe80::1@de0" into "de0%fe80::1".
(now IMPLEMENTATION needs a separate commit for stable branch)

add mobile-ip6 section.  refer ericsson readme.

moren note on site-locals

fix typo of rfc240[7-9].txt.

typo fix.  PR 197 from Yuji Yamano.

wording nit.

recommend use of globals, instead of sitelocals, for experiment.
(will move tag)

- clarify IPv6 IPsec tunnelling
- DAD behavior
- v4 mapped/compatible address on wire (will be rejeted)
- clarify embedded scope index

refer RFC2732

document "ndp -I if0" (on-link determintion with empty default router list)

adler32 issue in ipcomp

list RFC2367 into "RFC conformance" list.

add FAITH draft.

add warning on ip6.fowarding

note ALTQ brakage on alpha.

typo fix.

how to compile ALTQ on non-i386.

update ALTQ issues. (ports/pkgsrc?)

chapter number was not contiguous.

openbsd fxp should be fixed by now...

cleanup ipsec/ipcomp items (remove obsolete/chapter change).
wording fixes.
CVSn: ----------------------------------------------------------------------

wording fixes for ipcomp.

update list of ipsec/ipcomp "interop-tested" implementations.

wording and grammatical fixes

typo fix and format fix

revert previous change by jinmei.  those lines are *wrapped* i-d #/name
line, not the actual description text.  those lines marked with "*" are
descriptions for documents.
CVSte----------------------------------------------------------------------

- format fix
- added rfc2292bis

* netbsd: add net.inet6.ip6.bindv6only sysctl.  this is a replacement
  of net.inet6.ip6.mapped_addr, which was bitwise opposite to
  IPV6_BINDV6ONLY.  by setting net.inet6.ip6.bindv6only to 1, AF_INET6
  socket will grab IPv6 traffic only.  by setting it to 0, AF_INET6
  socket will grab IPv4 traffic as well (as described in rfc1933).
  default value is 1 (i.e. AF_INET6 grabs IPv6 traffic only).

  "options INET6_BINDV6ONLY" will remove the code completely and
  hardcodes behavior to net.inet6.ip6.bindv6only=1 case.

  "options MAPPED_ADDR_ENABLED" and net.inet6.ip6.mapped_addr were
  obsoleted on netbsd (were introduced on Dec 21 1999).

driver support table for bsdi4.

tiny wording fixes.

wording.

improve tcp/udp wildcard bind (inbound), and IPv4 mapped address
(outbound) issue.

sync KAME/NetBSD tcp behavior with reality.

update driver info.

wording fix in kame/openbsd tcp/udp layer.

disable RFC1933 special behavior on IPv6 wildcard bind permanently
(IPv4 traffic to AF_INET6 socket).
this is in sync with openbsd-current.

add TODO.2292bis into Makefile (make update-doc).
wording changes in IMPLEMENTATION.

add sockaddr_storage issue.

remove duplcated description.

add more words on jumbograms

wording changes (in jumbogram issue)

add some more jumbo payload issues.

sync with SNAP.  add warning on netbsd arcnet interface.

bah interface on NetBSD/amiga seems to violate KAME mbuf chain req.

add scope issues, bindtest, dhcp6 issues, and several updates.

add OpenBSD driver conditions.

- tunnel mode IPComp input is broken
- new knob to IPComp

little bit of words on KAME/BSDI4.

add IPsec/IKE interop section.

tiny wording fix.

document <draft-ietf-ipngwg-scopedaddr-format-00.txt> a little bit.

add some words on conformance/interop, as I got couple of questions today.

tiny fix (wording)

tiny fix.

improve description on dhcp6. (sync with SNAP)

note on NRL inpcb layer.

improve dhcp6.
typo.

typo.

typo fixes (sync with SNAP)

KAME PR: 162

typo fixes.

KAME PR: 162
From: Yuji Yamano <yyamano@kt.rim.or.jp>

document ALTQ support (situation different from SNAP)

update TCP MSS issue. sync with SNAP.

update TCP MSS issue.

sync current version.

Fixed reference of the case by setsockopt.

Improved about IPsec description.

update link-local address issue, about MD5(hostname).
sync with SNAP.

update link-local address issue, about MD5(hostname).

rfc # for rtalert/mld. (sync with snap)

RFC # for rtalert/mld.

add dhcp6.

add dhcp6.

update couple of RFC#/draft#.

update couple of RFC#/draft#.

document ALTQ 2.0 merger.

note that KAME IPsec is not available on KAME/OpenBSD.

document kame/openbsd inpcb.

* freebsd3/sys/i386/if_wi.c: WaveLAN/IEEE speaks IPv6. It is new
  official supported device.

update udp4/6 on NetBSD.

updated for new^2 ipsec.

wording and typo fixes.

change TAHI URL to http://www.tahi.org/report/KAME/,
to decrease labors for future document updates.

add RFC246[56] (IPv6/ICMPv6 MIB)

update TAHI URL to the latest report.

wording, pathname and typo fixes.

change pathname (kit/src is obsolete)

wording fix (in IPComp)

remove dangling reference.

annotate autoconfig section.

update tcp4/6 part to match the current practice.

df and eb work for KAME on bsdi 3.1

we no longer need in6_ifattach() call from drivers.

copied from KAME/FreeBSD228 repository.