| version 1.148, 2002/05/07 02:59:38 |
version 1.149, 2002/05/12 15:48:39 |
|
|
| int s; |
int s; |
| |
|
| /* |
/* |
| * Use splvm() -- we're bloking things that would cause |
* Use splvm() -- we're blocking things that would cause |
| * mbuf allocation. |
* mbuf allocation. |
| */ |
*/ |
| s = splvm(); |
s = splvm(); |
| Line 509 ip_input(struct mbuf *m) |
|
| Line 509 ip_input(struct mbuf *m) |
|
| } |
} |
| |
|
| #ifdef IPSEC |
#ifdef IPSEC |
| /* ipflow (IP fast fowarding) is not compatible with IPsec. */ |
/* ipflow (IP fast forwarding) is not compatible with IPsec. */ |
| m->m_flags &= ~M_CANFASTFWD; |
m->m_flags &= ~M_CANFASTFWD; |
| #else |
#else |
| /* |
/* |
| Line 1679 ip_forward(m, srcrt) |
|
| Line 1679 ip_forward(m, srcrt) |
|
| * a router should not generate ICMP_SOURCEQUENCH as |
* a router should not generate ICMP_SOURCEQUENCH as |
| * required in RFC1812 Requirements for IP Version 4 Routers. |
* required in RFC1812 Requirements for IP Version 4 Routers. |
| * source quench could be a big problem under DoS attacks, |
* source quench could be a big problem under DoS attacks, |
| * or the underlying interface is rate-limited. |
* or if the underlying interface is rate-limited. |
| */ |
*/ |
| if (mcopy) |
if (mcopy) |
| m_freem(mcopy); |
m_freem(mcopy); |