| version 1.218, 2005/06/28 19:38:58 |
version 1.218.2.1, 2006/06/21 15:11:01 |
| Line 279 static u_int ip_reass_ttl_decr(u_int tic |
|
| Line 279 static u_int ip_reass_ttl_decr(u_int tic |
|
| static void ip_reass_drophalf(void); |
static void ip_reass_drophalf(void); |
| |
|
| |
|
| static __inline int ipq_lock_try(void); |
static inline int ipq_lock_try(void); |
| static __inline void ipq_unlock(void); |
static inline void ipq_unlock(void); |
| |
|
| static __inline int |
static inline int |
| ipq_lock_try(void) |
ipq_lock_try(void) |
| { |
{ |
| int s; |
int s; |
| Line 301 ipq_lock_try(void) |
|
| Line 301 ipq_lock_try(void) |
|
| return (1); |
return (1); |
| } |
} |
| |
|
| static __inline void |
static inline void |
| ipq_unlock(void) |
ipq_unlock(void) |
| { |
{ |
| int s; |
int s; |
|
|
| for (i = 0; i < IPREASS_NHASH; i++) |
for (i = 0; i < IPREASS_NHASH; i++) |
| LIST_INIT(&ipq[i]); |
LIST_INIT(&ipq[i]); |
| |
|
| ip_id = time.tv_sec & 0xfffff; |
ip_id = time_second & 0xfffff; |
| |
|
| ipintrq.ifq_maxlen = ipqmaxlen; |
ipintrq.ifq_maxlen = ipqmaxlen; |
| ip_nmbclusters_changed(); |
ip_nmbclusters_changed(); |
| Line 732 ip_input(struct mbuf *m) |
|
| Line 732 ip_input(struct mbuf *m) |
|
| } |
} |
| if (ia != NULL) |
if (ia != NULL) |
| goto ours; |
goto ours; |
| if (m->m_pkthdr.rcvif->if_flags & IFF_BROADCAST) { |
if (m->m_pkthdr.rcvif && m->m_pkthdr.rcvif->if_flags & IFF_BROADCAST) { |
| IFADDR_FOREACH(ifa, m->m_pkthdr.rcvif) { |
IFADDR_FOREACH(ifa, m->m_pkthdr.rcvif) { |
| if (ifa->ifa_addr->sa_family != AF_INET) |
if (ifa->ifa_addr->sa_family != AF_INET) |
| continue; |
continue; |
|
|
| goto bad; |
goto bad; |
| } |
} |
| #endif |
#endif |
| #if FAST_IPSEC |
#ifdef FAST_IPSEC |
| /* |
/* |
| * enforce IPsec policy checking if we are seeing last header. |
* enforce IPsec policy checking if we are seeing last header. |
| * note that we do not visit this with protocols with pcb layer |
* note that we do not visit this with protocols with pcb layer |
| Line 1823 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1823 ip_forward(struct mbuf *m, int srcrt) |
|
| struct ip *ip = mtod(m, struct ip *); |
struct ip *ip = mtod(m, struct ip *); |
| struct sockaddr_in *sin; |
struct sockaddr_in *sin; |
| struct rtentry *rt; |
struct rtentry *rt; |
| int error, type = 0, code = 0; |
int error, type = 0, code = 0, destmtu = 0; |
| struct mbuf *mcopy; |
struct mbuf *mcopy; |
| n_long dest; |
n_long dest; |
| struct ifnet *destifp; |
|
| #if defined(IPSEC) || defined(FAST_IPSEC) |
|
| struct ifnet dummyifp; |
|
| #endif |
|
| |
|
| /* |
/* |
| * We are now in the output path. |
* We are now in the output path. |
| Line 1843 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1839 ip_forward(struct mbuf *m, int srcrt) |
|
| |
|
| dest = 0; |
dest = 0; |
| #ifdef DIAGNOSTIC |
#ifdef DIAGNOSTIC |
| if (ipprintfs) |
if (ipprintfs) { |
| printf("forward: src %2.2x dst %2.2x ttl %x\n", |
printf("forward: src %s ", inet_ntoa(ip->ip_src)); |
| ntohl(ip->ip_src.s_addr), |
printf("dst %s ttl %x\n", inet_ntoa(ip->ip_dst), ip->ip_ttl); |
| ntohl(ip->ip_dst.s_addr), ip->ip_ttl); |
} |
| #endif |
#endif |
| if (m->m_flags & (M_BCAST|M_MCAST) || in_canforward(ip->ip_dst) == 0) { |
if (m->m_flags & (M_BCAST|M_MCAST) || in_canforward(ip->ip_dst) == 0) { |
| ipstat.ips_cantforward++; |
ipstat.ips_cantforward++; |
| Line 1857 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1853 ip_forward(struct mbuf *m, int srcrt) |
|
| icmp_error(m, ICMP_TIMXCEED, ICMP_TIMXCEED_INTRANS, dest, 0); |
icmp_error(m, ICMP_TIMXCEED, ICMP_TIMXCEED_INTRANS, dest, 0); |
| return; |
return; |
| } |
} |
| ip->ip_ttl -= IPTTLDEC; |
|
| |
|
| sin = satosin(&ipforward_rt.ro_dst); |
sin = satosin(&ipforward_rt.ro_dst); |
| if ((rt = ipforward_rt.ro_rt) == 0 || |
if ((rt = ipforward_rt.ro_rt) == 0 || |
| Line 1887 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1882 ip_forward(struct mbuf *m, int srcrt) |
|
| if (mcopy) |
if (mcopy) |
| mcopy = m_pullup(mcopy, ip->ip_hl << 2); |
mcopy = m_pullup(mcopy, ip->ip_hl << 2); |
| |
|
| |
ip->ip_ttl -= IPTTLDEC; |
| |
|
| /* |
/* |
| * If forwarding packet using same interface that it came in on, |
* If forwarding packet using same interface that it came in on, |
| * perhaps should send a redirect to sender to shortcut a hop. |
* perhaps should send a redirect to sender to shortcut a hop. |
| Line 1943 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1940 ip_forward(struct mbuf *m, int srcrt) |
|
| } |
} |
| if (mcopy == NULL) |
if (mcopy == NULL) |
| return; |
return; |
| destifp = NULL; |
|
| |
|
| switch (error) { |
switch (error) { |
| |
|
| Line 1965 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1961 ip_forward(struct mbuf *m, int srcrt) |
|
| code = ICMP_UNREACH_NEEDFRAG; |
code = ICMP_UNREACH_NEEDFRAG; |
| #if !defined(IPSEC) && !defined(FAST_IPSEC) |
#if !defined(IPSEC) && !defined(FAST_IPSEC) |
| if (ipforward_rt.ro_rt) |
if (ipforward_rt.ro_rt) |
| destifp = ipforward_rt.ro_rt->rt_ifp; |
destmtu = ipforward_rt.ro_rt->rt_ifp->if_mtu; |
| #else |
#else |
| /* |
/* |
| * If the packet is routed over IPsec tunnel, tell the |
* If the packet is routed over IPsec tunnel, tell the |
| Line 1984 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1980 ip_forward(struct mbuf *m, int srcrt) |
|
| &ipsecerror); |
&ipsecerror); |
| |
|
| if (sp == NULL) |
if (sp == NULL) |
| destifp = ipforward_rt.ro_rt->rt_ifp; |
destmtu = ipforward_rt.ro_rt->rt_ifp->if_mtu; |
| else { |
else { |
| /* count IPsec header size */ |
/* count IPsec header size */ |
| ipsechdr = ipsec4_hdrsiz(mcopy, |
ipsechdr = ipsec4_hdrsiz(mcopy, |
| Line 1993 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 1989 ip_forward(struct mbuf *m, int srcrt) |
|
| /* |
/* |
| * find the correct route for outer IPv4 |
* find the correct route for outer IPv4 |
| * header, compute tunnel MTU. |
* header, compute tunnel MTU. |
| * |
|
| * XXX BUG ALERT |
|
| * The "dummyifp" code relies upon the fact |
|
| * that icmp_error() touches only ifp->if_mtu. |
|
| */ |
*/ |
| /*XXX*/ |
|
| destifp = NULL; |
|
| if (sp->req != NULL |
if (sp->req != NULL |
| && sp->req->sav != NULL |
&& sp->req->sav != NULL |
| && sp->req->sav->sah != NULL) { |
&& sp->req->sav->sah != NULL) { |
| ro = &sp->req->sav->sah->sa_route; |
ro = &sp->req->sav->sah->sa_route; |
| if (ro->ro_rt && ro->ro_rt->rt_ifp) { |
if (ro->ro_rt && ro->ro_rt->rt_ifp) { |
| dummyifp.if_mtu = |
destmtu = |
| ro->ro_rt->rt_rmx.rmx_mtu ? |
ro->ro_rt->rt_rmx.rmx_mtu ? |
| ro->ro_rt->rt_rmx.rmx_mtu : |
ro->ro_rt->rt_rmx.rmx_mtu : |
| ro->ro_rt->rt_ifp->if_mtu; |
ro->ro_rt->rt_ifp->if_mtu; |
| dummyifp.if_mtu -= ipsechdr; |
destmtu -= ipsechdr; |
| destifp = &dummyifp; |
|
| } |
} |
| } |
} |
| |
|
| Line 2042 ip_forward(struct mbuf *m, int srcrt) |
|
| Line 2032 ip_forward(struct mbuf *m, int srcrt) |
|
| break; |
break; |
| #endif |
#endif |
| } |
} |
| icmp_error(mcopy, type, code, dest, destifp); |
icmp_error(mcopy, type, code, dest, destmtu); |
| } |
} |
| |
|
| void |
void |
| Line 2342 SYSCTL_SETUP(sysctl_net_inet_ip_setup, " |
|
| Line 2332 SYSCTL_SETUP(sysctl_net_inet_ip_setup, " |
|
| NULL, 0, &ip_do_loopback_cksum, 0, |
NULL, 0, &ip_do_loopback_cksum, 0, |
| CTL_NET, PF_INET, IPPROTO_IP, |
CTL_NET, PF_INET, IPPROTO_IP, |
| IPCTL_LOOPBACKCKSUM, CTL_EOL); |
IPCTL_LOOPBACKCKSUM, CTL_EOL); |
| |
sysctl_createv(clog, 0, NULL, NULL, |
| |
CTLFLAG_PERMANENT, |
| |
CTLTYPE_STRUCT, "stats", |
| |
SYSCTL_DESCR("IP statistics"), |
| |
NULL, 0, &ipstat, sizeof(ipstat), |
| |
CTL_NET, PF_INET, IPPROTO_IP, IPCTL_STATS, |
| |
CTL_EOL); |
| } |
} |