MFS r272855, 266846:

- Do not override sin6_scope_id in LLA when it is already set to non-zero.
This fixes destination list in output of netstat -r.
- Plug a memory leak.
- Add RTM_VERSION check.
- Fix a bug which can make sysctl() fail when -F is specified.
- Increase WID_IF_DEFAULT() from 6 to 8 (the default for AF_INET6) because
we have interfaces with longer names than 6 chars like epairN{a,b}.
- Style fixes.

MFS r272847:

- Add rwlock to struct dadq. A panic could occur when a large number of
addresses performed DAD at the same time.

MFS r272850:

- Replace Sun RPC license in TI-RPC library with a 3-clause BSD license,
with the explicit permission of Sun Microsystems in 2009.

- Replace Sun Industry Standards Source License for Sun RPC code with a
3-clause BSD license as specified by Oracle America, Inc. in 2010.
This license change was approved by Wim Coekaerts, Senior Vice
President, Linux and Virtualization at Oracle Corporation.

- Replace Sun RPC license with a 3-clause BSD license. This license change
was approved in 2010 by Wim Coekaerts, Senior Vice President, Linux and
Virtualization at Oracle Corporation.

- Replace Sun RPC license for TI-RPC library with a 3-clause BSD license,
with the explicit permission of Sun Microsystems in 2009.
The code in question in this file was copied from
lib/libc/rpc/pmap_getport.c.

MFS r272852,r272853:

- Add relative specification in expiration time.
- Add proto3 option for RTF_PROTO3.
- Use %lu for members of struct rt_metrics.
- Use long explicitly for the time difference.

MFS r272854:

- Return 0 if:

1. "-u N" specified, no -f, and mdN found,
2. no -u, "-f /pathname" specified, and mdN associated with
/pathname found,
3. "-u N" specified, "-f /pathname" specified, and both of them found,
4. "-l" specified and no -f,
5. "-l" specified, "-f /pathname" specified, and /pathname found.

otherwise return -1.

MFS r272856:

- Move configuration of IPv6 NDP flags to a point before handling ifconfig_IF.
This fixes a race that a non-IPv4 interface can get an EUI64 LLA even if it
has IFDISABLED nd6 flag at boot time.

MFS r272857:

- Cancel DAD for an ifa when the ifp has ND6_IFF_IFDISABLED as early as
possible and do not clear IN6_IFF_TENTATIVE. If IFDISABLED was accidentally
set after a DAD started, TENTATIVE could be cleared because no NA was
received due to IFDISABLED, and as a result it could prevent DAD when
manually clearing IFDISABLED after that.

MFS r272858:

- Fix an issue in range specification handling when a "-foo" is specified in
ifconfig_IF_aliasN.

MFS r272859:

- Fix EtherIP. TOS field must be initialized when the inner protocol is
PF_LINK, and multicast/broadcast flag should always be dropped because
the outer protocol uses unicast even when the inner address is not for
unicast. It had been broken since r236951 when gif_output() started to
use IFQ_HANDOFF().

MFS r272860:

- Recover sin6_scope_id of gateway addresses in riprecv() by using the
if_index where a RIP packet was received. This fixes a bug which
prevented gateway addresses in fe80::/64 from being added.

MFS r272861:

- Fix rc.d/gssd script to define the default values in a standard way.
- Use a parameter argument in jls(8) instead of doing grep.

MFS r272862, r272870:

- Restructure rc.d scripts for kerberos5 daemons.

MFS r272863:

- Return false status only when adding a route is failed. It could
erroneously return false due to an afexists() check loop in routing_start().

MFS r272864:

- Use ipv6_prefer when at least one ifconfig_IF_ipv6 is configured.

MFS r272865:

- Fix a bug which prevented mount.fstab parameter from being converted
when jail_JID_devfs_enable=NO.

MFS r272866:

- Fix header output when -P is specified and (ncpus - 1) != maxid.

MFS r272867:

- Fix a bug which could break extended attributes in a dump output.
This occurred when a file was >892kB long and had a large data (>1kB)
in the extended attributes.

MFS r272868, r272869:

- Make net.inet.ip.sourceroute, net.inet.ip.accept_sourceroute, and
net.inet.ip.process_options vnet-aware.

MFS r272871:

- Revert changes in r269180. It could cause -c N option to enter an
infinite loop if no reply packet is received.

MFS r272874:

- Resurrect set_rcvar() as a function to define a rc.conf variable.
It defines a variable and its default value in load_rc_config() just after
rc.conf is loaded. "rcvar" command shows the current and the default
values.

MFS r272960:

- Do not add late flag when file= is specified because it has a bad
side-effect. The specified file should exist before the fstab line.

Approved by: re (gjb)

Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge r263203: garbage collect long time obsoleted (or never used) stuff
from routing API.

Merge r263658 from head: remove unneeded fake _KERNEL definition.
Should fix broken builds.

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Minor mdoc fix.

- Increase the number of retry for NET_RT_DUMP from 5 to 15.
- Use 2001:db8:: as an example instead of deprecated 3ffe:: address block.
- Add check for connected routes.
- Add support of RTM_IFANNOUNCE for dyanmically-added/removed interfaces.
- Add support of *, ?, and [ in the interface list.
- Add -P number to specify route flag which will never expire.
- Add -Q number to specify route flag which route6d will add to routes via RIP.
- Add -p pidfile to specify the process ID file.

Overhaul of route6d(8):

- Use queue(3) for linked-list.
- Use a consistent naming scheme for struct members.
- Use ANSI C style function declaration.
- Add check of RTM_VERSION mismatch.

There is no functional change.

Use sin6_scope_id instead of KAME-specific embedded scope id.

Spelling fixes for usr.sbin/

In usr.sbin/route6d/route6d.c, use the correct printf length modifier
for an ssize_t.

MFC after: 1 week

The last big commit: let usr.sbin/ use WARNS=6 by default.

This main goals of this project are:
1. separating L2 tables (ARP, NDP) from the L3 routing tables
2. removing as much locking dependencies among these layers as
possible to allow for some parallelism in the search operations
3. simplify the logic in the routing code,

The most notable end result is the obsolescent of the route
cloning (RTF_CLONING) concept, which translated into code reduction
in both IPv4 ARP and IPv6 NDP related modules, and size reduction in
struct rtentry{}. The change in design obsoletes the semantics of
RTF_CLONING, RTF_WASCLONE and RTF_LLINFO routing flags. The userland
applications such as "arp" and "ndp" have been modified to reflect
those changes. The output from "netstat -r" shows only the routing
entries.

Quite a few developers have contributed to this project in the
past: Glebius Smirnoff, Luigi Rizzo, Alessandro Cerri, and
Andre Oppermann. And most recently:

- Kip Macy revised the locking code completely, thus completing
the last piece of the puzzle, Kip has also been conducting
active functional testing
- Sam Leffler has helped me improving/refactoring the code, and
provided valuable reviews
- Julian Elischer setup the perforce tree for me and has helped
me maintaining that branch before the svn conversion

Cleanup of userland __P use

implemented more validation checks about incoming responses per RFC2080, and one additional heuristic check for safer operation.

Obtained from: KAME
MFC after: 1 week

These IPv6-only tools have no explicit dependency on the INET6 macro.

Tested with: cmp(1)

Fixed the misplaced $FreeBSD$.

- need_trigger/idx should be u_int, not ssize_t.
- realloc pedant.
- set sin6_scope_id before sending (link-local/multicast) packets
- removed an incorrect comment
- don't age non-gateway host routes.
- not remove global addresses on loopback interface from routing table
by route aging.

Obtained from: KAME

- interface minimum MTU = 1280 in IPv6.
- simplify.

Obtained from: KAME

our netstat is installed in /usr/bin.

fixe remote panic on short packet

Obtained from: KAME

remove unused variable

Supported by: FreeBSD Foundation

rtm_seq is int, so seq/myseq should be int.

Obtained from: KAME
MFC after: 1 week

suppress outpt on dump request if -q is specified.

Obtained from: KAME
MFC after: 1 week

atoi -> strtoul

Obtained from: KAME
MFC after: 1 week

- port numbers are unsigned. use %u.
- %d is not 10 chars, but 12 chars.

Obtained from: KAME
MFC after: 1 week

explicitly specify IPPROTO_UDP when calling getaddrinfo().

Obtained from: KAME
MFC after: 1 week

remove a variable that is never used.

Obtained from: KAME
MFC after: 1 week

support poll(2).

Obtained from: KAME
MFC after: 1 week

- don't select with FD_SETSIZE.
- avoid fd_set overrun.

Obtained from: KAME
MFC after: 1 week

- don't print strerror() if errno == 0 on fatal().
- va_start/end audit.
- can't use vfprintf() twice. need va_start/end pair every time.

Obtained from: KAME
MFC after: 1 week

- do not SEGV on IFF_UP.
- recover rrt_gw setting for non-p2p case. otherwise, we will not
be able to recover interface route on interface down -> up
transition.
- clarify loop exit condition

Obtained from: KAME
MFC after: 1 week

do not send dump request on -N

Obtained from: KAME
MFC after: 1 week

macro pedant

Obtained from: KAME
MFC after: 1 week

minor cleanup; no need for extra variable here

Obtained from: KAME
MFC after: 1 week

use strchr(3).

Obtained from: KAME
MFC after: 1 week

daemon() has to be called prior to file descriptor setups
(otherwise file descriptors could be closed mistakenly)

Obtained from: KAME
MFC after: 1 week

getifaddrs(3) is always used.

MFC after: 1 week

knf, typo, space.

Obtained from: KAME
MFC after: 1 week

set IPV6_V6ONLY.

Obtained from: KAME
MFC after: 1 week

- die if malloc fails.
- use strlcpy.

Obtained from: KAME
MFC after: 1 week

use strncpy

Obtained from: KAME
MFC after: 1 week

"sin" is a reserved C library function name. use sin6

Obtained from: KAME
MFC after: 1 week

We don't need __ss hack.

MFC after: 1 week

Add missing srand() (sranddev() for FreeBSD)

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,
especially in troff files.

The .Nm utility

mdoc(7) police:

Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text.
Not only this slows down the mdoc(7) processing significantly, but it also
has an undesired (in this case) effect of disabling hyphenation within the
entire enclosed block.

Perform a major cleanup of the usr.sbin Makefiles.
These are not perfectly in agreement with each other style-wise, but they
are orders of orders of magnitude more consistent style-wise than before.

Sync with recent KAME.
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
- The definitions of SADB_* in sys/net/pfkeyv2.h are still different
from RFC2407/IANA assignment because of binary compatibility
issue. It should be fixed under 5-CURRENT.
- ip6po_m member of struct ip6_pktopts is no longer used. But, it
is still there because of binary compatibility issue. It should
be removed under 5-CURRENT.

Reviewed by: itojun
Obtained from: KAME
MFC after: 3 weeks

- Backout botched attempt to introduce MANSECT feature.
- MAN[1-9] -> MAN.

Set the default manual section for usr.sbin/ to 8.

Prepare for mdoc(7)NG.

- do not check/advertise cloned routes, nor dynamic routes
- cast size_t on printing (be friendly with alpha)

Obtained from: KAME

mdoc(7) police: use the new features of the Nm macro.

Sync with KAME. Format string auditing and manpage cleanups.

Obtained from: KAME
Submitted by: Bill Sommerfeld <sommerfeld@netbsd.org>

fix LP64 issue in routing socket manipulation.
make behavior of -A safer.
(sync with kame)

removed 'ifndef ADVAPI' parts

Obtained from: KAME

use advanced API (-DADVAPI).
From: tkatayam@pi.titech.ac.jp (KATAYAMA, Takeo)

sync with latest kame tree. more stable, p2p advert is corrected

When unexpected rtmsg was received, route6d was dying.
So change it just to log it.
(Merge from recent KAME bug fix.)

Submitted by: itojun
Obtained from: KAME project

remove redundant ifdef's.

some part is specified by: phantom

Getaddrinfo(), getnameinfo(), and etc support in libc/net.
Several udp and raw apps IPv6 support.

Reviewed by: freebsd-arch, cvs-committers
Obtained from: KAME project