Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Fix type in last commit.

Submitted by: brueffer

Be more explicit on how "intact" incoming packets in raw sockets are.

Redo r240386 providing more correct information.

Document conditions for IP_SENDSRCADDR socket option.

Obtained from: r167342 commit message

Fixed an example that set IP_ONESBCAST socket option to actually work,
and not return EINVAL.

Add a IP_RECVTOS socket option to receive for received UDP/IPv4
packets a cmsg of type IP_RECVTOS which contains the TOS byte.
Much like IP_RECVTTL does for TTL. This allows to implement a
protocol on top of UDP and implementing ECN.

MFC after: 3 days

The cmsg_len field includes the cmsg header. So use CMSG_LEN().

MFC after: 3 days

General mdoc(7) and typo fixes.

PR: 167776
Submitted by: Nobuyuki Koganemaru (kogane!jp.freebsd.org)
MFC after: 3 days

Remove superfluous paragraph macro.

mdoc fix for r227499.

Reported by: brueffer

Note the ip_len bug fixed in r226105 in the BUGS section.

Fix typos, spelling, formatting and mdoc mistakes found by Nobuyuki while
translating these manual pages. Minor corrections by me.

Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp>

Document IP_BINDANY IP socket option.

Reviewed by: brueffer

Merge IGMPv3 and Source-Specific Multicast (SSM) to the FreeBSD
IPv4 stack.

Diffs are minimized against p4.
PCS has been used for some protocol verification, more widespread
testing of recorded sources in Group-and-Source queries is needed.
sizeof(struct igmpstat) has changed.

__FreeBSD_version is bumped to 800070.

Add source-specific multicast (SSM) option documentation.

Import rewrite of IPv4 socket multicast layer to support source-specific
and protocol-independent host mode multicast. The code is written to
accomodate IPv6, IGMPv3 and MLDv2 with only a little additional work.

This change only pertains to FreeBSD's use as a multicast end-station and
does not concern multicast routing; for an IGMPv3/MLDv2 router
implementation, consider the XORP project.

The work is based on Wilbert de Graaf's IGMPv3 code drop for FreeBSD 4.6,
which is available at: http://www.kloosterhof.com/wilbert/igmpv3.html

Summary
* IPv4 multicast socket processing is now moved out of ip_output.c
into a new module, in_mcast.c.
* The in_mcast.c module implements the IPv4 legacy any-source API in
terms of the protocol-independent source-specific API.
* Source filters are lazy allocated as the common case does not use them.
They are part of per inpcb state and are covered by the inpcb lock.
* struct ip_mreqn is now supported to allow applications to specify
multicast joins by interface index in the legacy IPv4 any-source API.
* In UDP, an incoming multicast datagram only requires that the source
port matches the 4-tuple if the socket was already bound by source port.
An unbound socket SHOULD be able to receive multicasts sent from an
ephemeral source port.
* The UDP socket multicast filter mode defaults to exclusive, that is,
sources present in the per-socket list will be blocked from delivery.
* The RFC 3678 userland functions have been added to libc: setsourcefilter,
getsourcefilter, setipv4sourcefilter, getipv4sourcefilter.
* Definitions for IGMPv3 are merged but not yet used.
* struct sockaddr_storage is now referenced from <netinet/in.h>. It
is therefore defined there if not already declared in the same way
as for the C99 types.
* The RFC 1724 hack (specify 0.0.0.0/8 addresses to IP_MULTICAST_IF
which are then interpreted as interface indexes) is now deprecated.
* A patch for the Rhyolite.com routed in the FreeBSD base system
is available in the -net archives. This only affects individuals
running RIPv1 or RIPv2 via point-to-point and/or unnumbered interfaces.
* Make IPv6 detach path similar to IPv4's in code flow; functionally same.
* Bump __FreeBSD_version to 700048; see UPDATING.

This work was financially supported by another FreeBSD committer.

Obtained from: p4://bms_netdev
Submitted by: Wilbert de Graaf (original work)
Reviewed by: rwatson (locking), silence from fenner,
net@ (but with encouragement)

Document a major IGMP related annoyance.
Add comments about IGMP bits which will go when we take SSM.
Xref multicast(4).

MFC after: 3 days

Don't quote IP_MAX_MEMBERSHIPS as 20 any more.

-mdoc sweep.

Document the IP_DONTFRAG IP socket option.

Sponsored by: TCP/IP Optimization Fundraise 2005

Document IP_MINTTL socket option.

MFC after: 2 weeks
Sponsored by: TCP/IP Optimization Fundraise 2005

o Document net.inet.ip.portrange.random* sysctls.
o Correct a comment about random port allocation threshold
implementation.

Reviewed by: silby, ru
MFC after: 3 days

Expand *n't contractions.

Fixed xrefs.

Spelling fixes.

Assorted markup, spelling, and grammar fixes.

Document the behaviour of IP_ADD_MEMBERSHIP as per RFC 1724.

PR: bin/51927

mdoc(7) police

Submitted by: ru

Add a paragraph about the importance of byte order when using raw
sockets with the IP_HDRINCL option.
Add a list entry about the errors which IP_HDRINCL can return.
Bump .Dd.

PR: docs/30873
Submitted by: Douglas De Couto
Obtained from: BSD/OS (byte order), some old libnet stuff I did years ago.

Document the net.inet.ip.portrange.randomized sysctl.

Add the IP_ONESBCAST option, to enable undirected IP broadcasts to be sent on
specific interfaces. This is required by aodvd, and may in future help us
in getting rid of the requirement for BPF from our import of isc-dhcp.

Suggested by: fenestro
Obtained from: BSD/OS
Reviewed by: mini, sam
Approved by: jake (mentor)

Add missing markup bits.

IP_RECVTTL socket option.

Reviewed by: Stuart Cheshire <cheshire@apple.com>

Document the IP_RECVIF socket option.

Submitted by: Bruce M Simpson

Back out support for RFC3514.

RFC3514 poses an unacceptale risk to compliant systems.

Implement support for RFC 3514 (The Security Flag in the IPv4 Header).
(See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)

This fulfills the host requirements for userland support by
way of the setsockopt() IP_EVIL_INTENT message.

There are three sysctl tunables provided to govern system behavior.

net.inet.ip.rfc3514:

Enables support for rfc3514. As this is an
Informational RFC and support is not yet widespread
this option is disabled by default.

net.inet.ip.hear_no_evil

If set the host will discard all received evil packets.

net.inet.ip.speak_no_evil

If set the host will discard all transmitted evil packets.

The IP statistics counter 'ips_evil' (available via 'netstat') provides
information on the number of 'evil' packets recieved.

For reference, the '-E' option to 'ping' has been provided to demonstrate
and test the implementation.

mdoc(7) police: Scheduled sweep.

Document the net.inet.ip.portrange.reserved{high,low} sysctl knobs
added in sys/netinet/in_pcb.c 1.120.

Prodded by: ru

Implement a new IP_SENDSRCADDR ancillary message type that permits
a server process bound to a wildcard UDP socket to select the IP
address from which outgoing packets are sent on a per-datagram
basis. When combined with IP_RECVDSTADDR, such a server process can
guarantee to reply to an incoming request using the same source IP
address as the destination IP address of the request, without having
to open one socket per server IP address.

Discussed on: -net
Approved by: re

Update ip(4) manpage to reflect recent ephemeral port range
change.

Noticed by: ru
MFC after: 1 day

mdoc(7) police: Use the new .In macro for #include statements.

Removed whitespace at end-of-line; no content changes. I simply did
cd src/share; find man[1-9] -type f|xargs perl -pi -e 's/[ \t]+$//'

BTW, what editors are the culprits? I'm using vim and it shows
me whitespace at EOL in troff files with a thick blue block...

Reviewed by: Silence from cvs diff -b
MFC after: 7 days

mdoc(7) police: rename the DIAGNOSTICS section to ERRORS to match the
content, and correct the parameters to the -tag list therein.

Reviewed by: ru

Correct the description of the "low" (< 1024) port range.

PR: 25500
Submitted by: Barry Irwin <bvi@devco.net>

Make it possible to use IP_TTL and IP_TOS setsockopt(2) options
on certain types of SOCK_RAW sockets. Also, use the ip.ttl MIB
variable instead of MAXTTL constant as the default time-to-live
value for outgoing IP packets all over the place, as we already
do this for TCP and UDP.

Reviewed by: wollman

mdoc(7) police: split punctuation characters + misc fixes.

Fix typo; s/demon/daemon/

PR: 22955, 22956
Submitted by: Jimmy Olgeni <olgeni@uli.it>

Follow BSD/OS and NetBSD, keep the ip_id field in network order all the time.

Requested by: wollman

Add a missing article.

`ip_id' now expected in host byte order when IP_HDRINCL is in use.

Refer to the correct include file for the IPTOS_XXX constants.

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

$Id$ -> $FreeBSD$

Typo.

PR: doc/11582

EACESS -> EACCES

Submitted by: garath@code.ridgefield.org via OpenBSD

Fixed missing #include(s) (mostly of <sys/types.h> in synopsis).

Reviewed by: wollman

Revert $FreeBSD$ back to $Id$

Fix a bunch of man pages to stop abusing the .Nm macro, along
with some other minor fixes for some problems I noticed
while making these changes.

Pointed out by: bde

Update to reflect current include files.

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Sort cross references.

Correct some man page xrefs, and some other minor changes to bring some
man pages up to mdoc guidelines and fix some minor formatting glitches.
Also fixed a number of man pages to not abuse the .Xr macro to
display functions and path names and a lot of other junk.

Attempt to document the recent in_pcb local port address changes..

This commit was generated by cvs2svn to compensate for changes in r1638,
which included commits to RCS files with non-trunk default branches.

BSD 4.4 Lite Share Sources