| version 1.114, 2000/05/10 03:31:30 |
version 1.114.4.4, 2001/03/11 21:10:34 |
|
|
| IPQ_UNLOCK(); |
IPQ_UNLOCK(); |
| } |
} |
| |
|
| |
#ifdef IPSEC |
| |
/* |
| |
* enforce IPsec policy checking if we are seeing last header. |
| |
* note that we do not visit this with protocols with pcb layer |
| |
* code - like udp/tcp/raw ip. |
| |
*/ |
| |
if ((inetsw[ip_protox[ip->ip_p]].pr_flags & PR_LASTHDR) != 0 && |
| |
ipsec4_in_reject(m, NULL)) { |
| |
ipsecstat.in_polvio++; |
| |
goto bad; |
| |
} |
| |
#endif |
| |
|
| /* |
/* |
| * Switch out to protocol's input routine. |
* Switch out to protocol's input routine. |
| */ |
*/ |
| Line 1398 ip_forward(m, srcrt) |
|
| Line 1411 ip_forward(m, srcrt) |
|
| /* |
/* |
| * Save at most 68 bytes of the packet in case |
* Save at most 68 bytes of the packet in case |
| * we need to generate an ICMP message to the src. |
* we need to generate an ICMP message to the src. |
| |
* Pullup to avoid sharing mbuf cluster between m and mcopy. |
| */ |
*/ |
| mcopy = m_copy(m, 0, imin((int)ip->ip_len, 68)); |
mcopy = m_copym(m, 0, imin((int)ip->ip_len, 68), M_DONTWAIT); |
| |
if (mcopy) |
| |
mcopy = m_pullup(mcopy, ip->ip_hl << 2); |
| |
|
| /* |
/* |
| * If forwarding packet using same interface that it came in on, |
* If forwarding packet using same interface that it came in on, |
| Line 1665 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| Line 1681 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| case IPCTL_ANONPORTMIN: |
case IPCTL_ANONPORTMIN: |
| old = anonportmin; |
old = anonportmin; |
| error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin); |
error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin); |
| if (anonportmin >= anonportmax || anonportmin > 65535 |
if (anonportmin >= anonportmax || anonportmin < 0 |
| |
|| anonportmin > 65535 |
| #ifndef IPNOPRIVPORTS |
#ifndef IPNOPRIVPORTS |
| || anonportmin < IPPORT_RESERVED |
|| anonportmin < IPPORT_RESERVED |
| #endif |
#endif |
| Line 1677 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| Line 1694 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| case IPCTL_ANONPORTMAX: |
case IPCTL_ANONPORTMAX: |
| old = anonportmax; |
old = anonportmax; |
| error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax); |
error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax); |
| if (anonportmin >= anonportmax || anonportmax > 65535 |
if (anonportmin >= anonportmax || anonportmax < 0 |
| |
|| anonportmax > 65535 |
| #ifndef IPNOPRIVPORTS |
#ifndef IPNOPRIVPORTS |
| || anonportmax < IPPORT_RESERVED |
|| anonportmax < IPPORT_RESERVED |
| #endif |
#endif |
| Line 1715 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| Line 1733 ip_sysctl(name, namelen, oldp, oldlenp, |
|
| &ip_gif_ttl)); |
&ip_gif_ttl)); |
| #endif |
#endif |
| |
|
| |
#ifndef IPNOPRIVPORTS |
| |
case IPCTL_LOWPORTMIN: |
| |
old = lowportmin; |
| |
error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmin); |
| |
if (lowportmin >= lowportmax |
| |
|| lowportmin > IPPORT_RESERVEDMAX |
| |
|| lowportmin < IPPORT_RESERVEDMIN |
| |
) { |
| |
lowportmin = old; |
| |
return (EINVAL); |
| |
} |
| |
return (error); |
| |
case IPCTL_LOWPORTMAX: |
| |
old = lowportmax; |
| |
error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmax); |
| |
if (lowportmin >= lowportmax |
| |
|| lowportmax > IPPORT_RESERVEDMAX |
| |
|| lowportmax < IPPORT_RESERVEDMIN |
| |
) { |
| |
lowportmax = old; |
| |
return (EINVAL); |
| |
} |
| |
return (error); |
| |
#endif |
| |
|
| default: |
default: |
| return (EOPNOTSUPP); |
return (EOPNOTSUPP); |
| } |
} |