src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

-version 1.204, 2004/09/29 21:28:34
+version 1.205, 2004/10/06 01:34:11
 Line 649  ip_input(struct mbuf *m)
 Line 649  ip_input(struct mbuf *m)
 Line 649  ip_input(struct mbuf *m)
                          return;
                  ip = mtod(m, struct ip *);
                  hlen = ip->ip_hl << 2;
+                 /*
+                  * XXX The setting of "srcrt" here is to prevent ip_forward()
+                  * from generating ICMP redirects for packets that have
+                  * been redirected by a hook back out on to the same LAN that
+                  * they came from and is not an indication that the packet
+                  * is being inffluenced by source routing options.  This
+                  * allows things like
+                  * "rdr tlp0 0/0 port 80 -> 1.1.1.200 3128 tcp"
+                  * where tlp0 is both on the 1.1.1.0/24 network and is the
+                  * default route for hosts on 1.1.1.0/24.  Of course this
+                  * also requires a "map tlp0 ..." to complete the story.
+                  * One might argue whether or not this kind of network config.
+                  * should be supported in this manner...
+                  */
                  srcrt = (odst.s_addr != ip->ip_dst.s_addr);
          }
  #endif /* PFIL_HOOKS */