1. 22 May, 2009 1 commit
  2. 21 May, 2009 1 commit
  3. 13 May, 2009 1 commit
  4. 11 May, 2009 2 commits
  5. 10 May, 2009 2 commits
  6. 08 May, 2009 1 commit
  7. 06 May, 2009 2 commits
  8. 04 May, 2009 2 commits
  9. 29 Apr, 2009 2 commits
  10. 28 Apr, 2009 5 commits
  11. 23 Apr, 2009 4 commits
  12. 17 Apr, 2009 2 commits
    • Ondřej Zajíček's avatar
      Fixes mixed-up messages on netlink socket · e366625c
      Ondřej Zajíček authored
      Under specific circumstances there might be two mixed-up
      netlink sessions (one for scan, the other for route change
      request). This patch separates netlink scans and requests
      to two fds (and seq counters).
      This should fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=428865
    • Ondřej Zajíček's avatar
      Rewrite of buggy AS path matching. · c8a6b9a3
      Ondřej Zajíček authored
      Old AS path maching supposes thath AS number appears
      only once in AS path, but that is not true. It also
      contains some bugs related to AS path sets.
      New code does not use any assumptions about semantic
      structure of AS path. It is asymptotically slower than
      the old code, but on real paths it is not significant.
      It also allows '?' for matching one arbitrary AS number.
  13. 08 Apr, 2009 1 commit
    • Ondřej Zajíček's avatar
      Fixes broken cryptographic authentication in OSPF · 024c310b
      Ondřej Zajíček authored
      Cryptographic authentication in OSPF is defective by
      design - there might be several packets independently
      sent to the network (for example HELLO, LSUPD and LSACK)
      where they might be reordered and that causes crypt.
      sequence number error.
      That can be workarounded by not incresing sequence number
      too often. Now we update it only when last packet was sent
      before at least one second. This can constitute a risk of
      replay attacks, but RFC supposes something similar (like time
      in seconds used as CSN).
  14. 06 Apr, 2009 2 commits
  15. 31 Mar, 2009 3 commits
    • Ondřej Zajíček's avatar
      Documentation update · bcb81251
      Ondřej Zajíček authored
    • Ondřej Zajíček's avatar
      Cleanup changes · c60cdd8c
      Ondřej Zajíček authored
    • Ondřej Zajíček's avatar
      Reimplementation of prefix sets. · b1a597e0
      Ondřej Zajíček authored
      Prefix sets were broken beyond any repair and have to be reimplemented.
      They are reimplemented using a trie with bitmasks in nodes.
      There is also change in the interpretation of minus prefix pattern,
      but the old interpretation was already inconsistent with
      the documentation and broken.
      There is also some bugfixes in filter code related to set variables.
  16. 25 Mar, 2009 3 commits
  17. 20 Mar, 2009 1 commit
    • Ondřej Zajíček's avatar
      Fix bugs related to kernel table synchronization. · 3d574679
      Ondřej Zajíček authored
      KRF_INSTALLED flag was not cleared during reconfiguration
      that lead to not removing routes during reconfigure when
      export rules changed.
      We also should not try to remove routes we didi not installed,
      on Linux this leads to warnings (as kernel checks route source
      field and do not allow to remove non-bird routes) but we should
      not rely on it.
  18. 18 Mar, 2009 1 commit
  19. 14 Mar, 2009 3 commits
  20. 13 Mar, 2009 1 commit