| version 1.169.2.7, 2005/04/01 14:31:50 |
version 1.169.2.8, 2005/11/10 14:11:07 |
| Line 131 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| Line 131 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| #include <netinet/in_systm.h> |
#include <netinet/in_systm.h> |
| #include <netinet/ip.h> |
#include <netinet/ip.h> |
| #include <netinet/in_pcb.h> |
#include <netinet/in_pcb.h> |
| |
#include <netinet/in_proto.h> |
| #include <netinet/in_var.h> |
#include <netinet/in_var.h> |
| #include <netinet/ip_var.h> |
#include <netinet/ip_var.h> |
| #include <netinet/ip_icmp.h> |
#include <netinet/ip_icmp.h> |
| Line 200 int ipprintfs = 0; |
|
| Line 201 int ipprintfs = 0; |
|
| #endif |
#endif |
| |
|
| int ip_do_randomid = 0; |
int ip_do_randomid = 0; |
| int ip_do_loopback_cksum = 0; |
|
| |
|
| /* |
/* |
| * XXX - Setting ip_checkinterface mostly implements the receive side of |
* XXX - Setting ip_checkinterface mostly implements the receive side of |
| Line 1823 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1823 ip_forward(struct mbuf *m, int srcrt) |
|
| struct ip *ip = mtod(m, struct ip *); |
struct ip *ip = mtod(m, struct ip *); |
| struct sockaddr_in *sin; |
struct sockaddr_in *sin; |
| struct rtentry *rt; |
struct rtentry *rt; |
| int error, type = 0, code = 0; |
int error, type = 0, code = 0, destmtu = 0; |
| struct mbuf *mcopy; |
struct mbuf *mcopy; |
| n_long dest; |
n_long dest; |
| struct ifnet *destifp; |
|
| #if defined(IPSEC) || defined(FAST_IPSEC) |
|
| struct ifnet dummyifp; |
|
| #endif |
|
| |
|
| /* |
/* |
| * We are now in the output path. |
* We are now in the output path. |
| Line 1857 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1853 ip_forward(struct mbuf *m, int srcrt) |
|
| icmp_error(m, ICMP_TIMXCEED, ICMP_TIMXCEED_INTRANS, dest, 0); |
icmp_error(m, ICMP_TIMXCEED, ICMP_TIMXCEED_INTRANS, dest, 0); |
| return; |
return; |
| } |
} |
| ip->ip_ttl -= IPTTLDEC; |
|
| |
|
| sin = satosin(&ipforward_rt.ro_dst); |
sin = satosin(&ipforward_rt.ro_dst); |
| if ((rt = ipforward_rt.ro_rt) == 0 || |
if ((rt = ipforward_rt.ro_rt) == 0 || |
| Line 1872 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1867 ip_forward(struct mbuf *m, int srcrt) |
|
| |
|
| rtalloc(&ipforward_rt); |
rtalloc(&ipforward_rt); |
| if (ipforward_rt.ro_rt == 0) { |
if (ipforward_rt.ro_rt == 0) { |
| icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_HOST, dest, 0); |
icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_NET, dest, 0); |
| return; |
return; |
| } |
} |
| rt = ipforward_rt.ro_rt; |
rt = ipforward_rt.ro_rt; |
| Line 1887 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1882 ip_forward(struct mbuf *m, int srcrt) |
|
| if (mcopy) |
if (mcopy) |
| mcopy = m_pullup(mcopy, ip->ip_hl << 2); |
mcopy = m_pullup(mcopy, ip->ip_hl << 2); |
| |
|
| |
ip->ip_ttl -= IPTTLDEC; |
| |
|
| /* |
/* |
| * If forwarding packet using same interface that it came in on, |
* If forwarding packet using same interface that it came in on, |
| * perhaps should send a redirect to sender to shortcut a hop. |
* perhaps should send a redirect to sender to shortcut a hop. |
| Line 1943 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1940 ip_forward(struct mbuf *m, int srcrt) |
|
| } |
} |
| if (mcopy == NULL) |
if (mcopy == NULL) |
| return; |
return; |
| destifp = NULL; |
|
| |
|
| switch (error) { |
switch (error) { |
| |
|
| Line 1965 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1961 ip_forward(struct mbuf *m, int srcrt) |
|
| code = ICMP_UNREACH_NEEDFRAG; |
code = ICMP_UNREACH_NEEDFRAG; |
| #if !defined(IPSEC) && !defined(FAST_IPSEC) |
#if !defined(IPSEC) && !defined(FAST_IPSEC) |
| if (ipforward_rt.ro_rt) |
if (ipforward_rt.ro_rt) |
| destifp = ipforward_rt.ro_rt->rt_ifp; |
destmtu = ipforward_rt.ro_rt->rt_ifp->if_mtu; |
| #else |
#else |
| /* |
/* |
| * If the packet is routed over IPsec tunnel, tell the |
* If the packet is routed over IPsec tunnel, tell the |
| Line 1984 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1980 ip_forward(struct mbuf *m, int srcrt) |
|
| &ipsecerror); |
&ipsecerror); |
| |
|
| if (sp == NULL) |
if (sp == NULL) |
| destifp = ipforward_rt.ro_rt->rt_ifp; |
destmtu = ipforward_rt.ro_rt->rt_ifp->if_mtu; |
| else { |
else { |
| /* count IPsec header size */ |
/* count IPsec header size */ |
| ipsechdr = ipsec4_hdrsiz(mcopy, |
ipsechdr = ipsec4_hdrsiz(mcopy, |
| Line 1993 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1989 ip_forward(struct mbuf *m, int srcrt) |
|
| /* |
/* |
| * find the correct route for outer IPv4 |
* find the correct route for outer IPv4 |
| * header, compute tunnel MTU. |
* header, compute tunnel MTU. |
| * |
|
| * XXX BUG ALERT |
|
| * The "dummyifp" code relies upon the fact |
|
| * that icmp_error() touches only ifp->if_mtu. |
|
| */ |
*/ |
| /*XXX*/ |
|
| destifp = NULL; |
|
| if (sp->req != NULL |
if (sp->req != NULL |
| && sp->req->sav != NULL |
&& sp->req->sav != NULL |
| && sp->req->sav->sah != NULL) { |
&& sp->req->sav->sah != NULL) { |
| ro = &sp->req->sav->sah->sa_route; |
ro = &sp->req->sav->sah->sa_route; |
| if (ro->ro_rt && ro->ro_rt->rt_ifp) { |
if (ro->ro_rt && ro->ro_rt->rt_ifp) { |
| dummyifp.if_mtu = |
destmtu = |
| ro->ro_rt->rt_rmx.rmx_mtu ? |
ro->ro_rt->rt_rmx.rmx_mtu ? |
| ro->ro_rt->rt_rmx.rmx_mtu : |
ro->ro_rt->rt_rmx.rmx_mtu : |
| ro->ro_rt->rt_ifp->if_mtu; |
ro->ro_rt->rt_ifp->if_mtu; |
| dummyifp.if_mtu -= ipsechdr; |
destmtu -= ipsechdr; |
| destifp = &dummyifp; |
|
| } |
} |
| } |
} |
| |
|
| Line 2042 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 2032 ip_forward(struct mbuf *m, int srcrt) |
|
| break; |
break; |
| #endif |
#endif |
| } |
} |
| icmp_error(mcopy, type, code, dest, destifp); |
icmp_error(mcopy, type, code, dest, destmtu); |
| } |
} |
| |
|
| void |
void |
| Line 2342 SYSCTL_SETUP(sysctl_net_inet_ip_setup, " |
|
| Line 2332 SYSCTL_SETUP(sysctl_net_inet_ip_setup, " |
|
| NULL, 0, &ip_do_loopback_cksum, 0, |
NULL, 0, &ip_do_loopback_cksum, 0, |
| CTL_NET, PF_INET, IPPROTO_IP, |
CTL_NET, PF_INET, IPPROTO_IP, |
| IPCTL_LOOPBACKCKSUM, CTL_EOL); |
IPCTL_LOOPBACKCKSUM, CTL_EOL); |
| |
sysctl_createv(clog, 0, NULL, NULL, |
| |
CTLFLAG_PERMANENT, |
| |
CTLTYPE_STRUCT, "stats", |
| |
SYSCTL_DESCR("IP statistics"), |
| |
NULL, 0, &ipstat, sizeof(ipstat), |
| |
CTL_NET, PF_INET, IPPROTO_IP, IPCTL_STATS, |
| |
CTL_EOL); |
| } |
} |