From owner-freebsd-arch Sat Dec 11 11: 5:48 1999 Delivered-To: freebsd-arch@freebsd.org Received: from ns1.yes.no (ns1.yes.no [195.204.136.10]) by hub.freebsd.org (Postfix) with ESMTP id 3F81815121 for ; Sat, 11 Dec 1999 11:05:45 -0800 (PST) (envelope-from eivind@bitbox.follo.net) Received: from bitbox.follo.net (bitbox.follo.net [195.204.143.218]) by ns1.yes.no (8.9.3/8.9.3) with ESMTP id UAA15993 for ; Sat, 11 Dec 1999 20:05:43 +0100 (CET) Received: (from eivind@localhost) by bitbox.follo.net (8.8.8/8.8.6) id UAA45862 for freebsd-arch@freebsd.org; Sat, 11 Dec 1999 20:05:43 +0100 (MET) Received: from fgwmail7.fujitsu.co.jp (fgwmail7.fujitsu.co.jp [192.51.44.37]) by hub.freebsd.org (Postfix) with ESMTP id 4CD9415121; Sat, 11 Dec 1999 11:05:15 -0800 (PST) (envelope-from shin@nd.net.fujitsu.co.jp) Received: from m1.gw.fujitsu.co.jp by fgwmail7.fujitsu.co.jp (8.9.3/3.7W-MX9911-Fujitsu Gateway) id EAA10586; Sun, 12 Dec 1999 04:05:13 +0900 (JST) Received: from incapgw.fujitsu.co.jp by m1.gw.fujitsu.co.jp (8.9.3/3.7W-9912-Fujitsu Domain Master) id EAA11599; Sun, 12 Dec 1999 04:05:13 +0900 (JST) Received: from localhost ([192.168.245.7]) by incapgw.fujitsu.co.jp (8.9.3/3.7W-9912) id EAA00511; Sun, 12 Dec 1999 04:05:11 +0900 (JST) To: freebsd-arch@freebsd.org, cvs-committers@freebsd.org Subject: [Solicite review for KAME 5th patch] X-Mailer: Mew version 1.94 on Emacs 20.4 / Mule 4.0 (HANANOEN) X-Prom-Mew: Prom-Mew 1.93.4 (procmail reader for Mew) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <19991212040532I.shin@nd.net.fujitsu.co.jp> Date: Sun, 12 Dec 1999 04:05:32 +0900 From: Yoshinobu Inoue X-Dispatcher: imput version 990905(IM130) Lines: 31 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG People should be busy, but this is 5th KAME patches. Please give me any comments if someone have time to check it. http://paradise.kame.net/v6proxy/diana2/shin/work/freebsd/kernel-ipsec.19991212 This is IPsec related kernel extensions and IPv6 Firewall addition. There are several points, -ip_output() part ipsec extension is not yet, because KAME ipsec uses m_pkthdr.rcvif, and ipfw also use it. I am investigating how they can smoothly coexist. -IPv6 multicast routing and tcp for ipv6 is not yet. -ipprotosw.h is added to change pr_input() routines prototype under sys/netinet. The change is necessary to treat chained protocol headers which easily happens when IPsec is introduced. An alternative is to change sys/sys/protosw.h, but then other protocol stacks' pr_input() routines are also need to be changed. -sys/netkey files are almost completely replaced as pfkey version2 support. But filenames are same so their diffs are complicated. Also, src/usr.sbin/keyadmin will become not compilable as the change. And if not much comments for KAME 4th patches I'll commit it. It is extensions to libc, but it only includes newly added IPv6 specific files Yoshinobu Inoue To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message