| version 1.70.2.7, 2005/11/10 14:11:07 |
version 1.71, 2003/08/07 16:33:14 |
|
|
| #include <sys/cdefs.h> |
#include <sys/cdefs.h> |
| __KERNEL_RCSID(0, "$NetBSD$"); |
__KERNEL_RCSID(0, "$NetBSD$"); |
| |
|
| #include "opt_inet.h" |
|
| #include "opt_ipsec.h" |
#include "opt_ipsec.h" |
| #include "opt_mrouting.h" |
#include "opt_mrouting.h" |
| |
|
| #include <sys/param.h> |
#include <sys/param.h> |
| #include <sys/sysctl.h> |
|
| #include <sys/malloc.h> |
#include <sys/malloc.h> |
| #include <sys/mbuf.h> |
#include <sys/mbuf.h> |
| #include <sys/socket.h> |
#include <sys/socket.h> |
| Line 88 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| Line 86 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| #include <netinet/ip_mroute.h> |
#include <netinet/ip_mroute.h> |
| #include <netinet/ip_icmp.h> |
#include <netinet/ip_icmp.h> |
| #include <netinet/in_pcb.h> |
#include <netinet/in_pcb.h> |
| #include <netinet/in_proto.h> |
|
| #include <netinet/in_var.h> |
#include <netinet/in_var.h> |
| |
|
| #include <machine/stdarg.h> |
#include <machine/stdarg.h> |
| Line 97 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| Line 94 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| #include <netinet6/ipsec.h> |
#include <netinet6/ipsec.h> |
| #endif /*IPSEC*/ |
#endif /*IPSEC*/ |
| |
|
| #ifdef FAST_IPSEC |
|
| #include <netipsec/ipsec.h> |
|
| #include <netipsec/ipsec_var.h> /* XXX ipsecstat namespace */ |
|
| #endif /* FAST_IPSEC*/ |
|
| |
|
| struct inpcbtable rawcbtable; |
struct inpcbtable rawcbtable; |
| |
|
| int rip_pcbnotify(struct inpcbtable *, struct in_addr, |
int rip_pcbnotify __P((struct inpcbtable *, struct in_addr, |
| struct in_addr, int, int, void (*)(struct inpcb *, int)); |
struct in_addr, int, int, void (*) __P((struct inpcb *, int)))); |
| int rip_bind(struct inpcb *, struct mbuf *); |
int rip_bind __P((struct inpcb *, struct mbuf *)); |
| int rip_connect(struct inpcb *, struct mbuf *); |
int rip_connect __P((struct inpcb *, struct mbuf *)); |
| void rip_disconnect(struct inpcb *); |
void rip_disconnect __P((struct inpcb *)); |
| |
|
| /* |
/* |
| * Nominal space allocated to a raw ip socket. |
* Nominal space allocated to a raw ip socket. |
| Line 124 void rip_disconnect(struct inpcb *); |
|
| Line 116 void rip_disconnect(struct inpcb *); |
|
| * Initialize raw connection block q. |
* Initialize raw connection block q. |
| */ |
*/ |
| void |
void |
| rip_init(void) |
rip_init() |
| { |
{ |
| |
|
| in_pcbinit(&rawcbtable, 1, 1); |
in_pcbinit(&rawcbtable, 1, 1); |
|
|
| * mbuf chain. |
* mbuf chain. |
| */ |
*/ |
| void |
void |
| |
#if __STDC__ |
| rip_input(struct mbuf *m, ...) |
rip_input(struct mbuf *m, ...) |
| |
#else |
| |
rip_input(m, va_alist) |
| |
struct mbuf *m; |
| |
va_dcl |
| |
#endif |
| { |
{ |
| int proto; |
int proto; |
| struct ip *ip = mtod(m, struct ip *); |
struct ip *ip = mtod(m, struct ip *); |
| struct inpcb_hdr *inph; |
|
| struct inpcb *inp; |
struct inpcb *inp; |
| struct inpcb *last = 0; |
struct inpcb *last = 0; |
| struct mbuf *opts = 0; |
struct mbuf *opts = 0; |
| Line 166 rip_input(struct mbuf *m, ...) |
|
| Line 163 rip_input(struct mbuf *m, ...) |
|
| ip->ip_len = ntohs(ip->ip_len) - (ip->ip_hl << 2); |
ip->ip_len = ntohs(ip->ip_len) - (ip->ip_hl << 2); |
| NTOHS(ip->ip_off); |
NTOHS(ip->ip_off); |
| |
|
| CIRCLEQ_FOREACH(inph, &rawcbtable.inpt_queue, inph_queue) { |
CIRCLEQ_FOREACH(inp, &rawcbtable.inpt_queue, inp_queue) { |
| inp = (struct inpcb *)inph; |
|
| if (inp->inp_af != AF_INET) |
|
| continue; |
|
| if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
| continue; |
continue; |
| if (!in_nullhost(inp->inp_laddr) && |
if (!in_nullhost(inp->inp_laddr) && |
| Line 181 rip_input(struct mbuf *m, ...) |
|
| Line 175 rip_input(struct mbuf *m, ...) |
|
| if (last) { |
if (last) { |
| struct mbuf *n; |
struct mbuf *n; |
| |
|
| #if defined(IPSEC) || defined(FAST_IPSEC) |
#ifdef IPSEC |
| /* check AH/ESP integrity. */ |
/* check AH/ESP integrity. */ |
| if (ipsec4_in_reject_so(m, last->inp_socket)) { |
if (ipsec4_in_reject_so(m, last->inp_socket)) { |
| ipsecstat.in_polvio++; |
ipsecstat.in_polvio++; |
| Line 205 rip_input(struct mbuf *m, ...) |
|
| Line 199 rip_input(struct mbuf *m, ...) |
|
| } |
} |
| last = inp; |
last = inp; |
| } |
} |
| #if defined(IPSEC) || defined(FAST_IPSEC) |
#ifdef IPSEC |
| /* check AH/ESP integrity. */ |
/* check AH/ESP integrity. */ |
| if (last && ipsec4_in_reject_so(m, last->inp_socket)) { |
if (last && ipsec4_in_reject_so(m, last->inp_socket)) { |
| m_freem(m); |
m_freem(m); |
| Line 238 rip_input(struct mbuf *m, ...) |
|
| Line 232 rip_input(struct mbuf *m, ...) |
|
| } |
} |
| |
|
| int |
int |
| rip_pcbnotify(struct inpcbtable *table, |
rip_pcbnotify(table, faddr, laddr, proto, errno, notify) |
| struct in_addr faddr, struct in_addr laddr, int proto, int errno, |
struct inpcbtable *table; |
| void (*notify)(struct inpcb *, int)) |
struct in_addr faddr, laddr; |
| |
int proto; |
| |
int errno; |
| |
void (*notify) __P((struct inpcb *, int)); |
| { |
{ |
| struct inpcb *inp, *ninp; |
struct inpcb *inp, *ninp; |
| int nmatch; |
int nmatch; |
| |
|
| nmatch = 0; |
nmatch = 0; |
| for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue); |
for (inp = CIRCLEQ_FIRST(&table->inpt_queue); |
| inp != (struct inpcb *)&table->inpt_queue; |
inp != (struct inpcb *)&table->inpt_queue; |
| inp = ninp) { |
inp = ninp) { |
| ninp = (struct inpcb *)inp->inp_queue.cqe_next; |
ninp = inp->inp_queue.cqe_next; |
| if (inp->inp_af != AF_INET) |
|
| continue; |
|
| if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
| continue; |
continue; |
| if (in_hosteq(inp->inp_faddr, faddr) && |
if (in_hosteq(inp->inp_faddr, faddr) && |
| Line 265 rip_pcbnotify(struct inpcbtable *table, |
|
| Line 260 rip_pcbnotify(struct inpcbtable *table, |
|
| } |
} |
| |
|
| void * |
void * |
| rip_ctlinput(int cmd, struct sockaddr *sa, void *v) |
rip_ctlinput(cmd, sa, v) |
| |
int cmd; |
| |
struct sockaddr *sa; |
| |
void *v; |
| { |
{ |
| struct ip *ip = v; |
struct ip *ip = v; |
| void (*notify)(struct inpcb *, int) = in_rtchange; |
void (*notify) __P((struct inpcb *, int)) = in_rtchange; |
| int errno; |
int errno; |
| |
|
| if (sa->sa_family != AF_INET || |
if (sa->sa_family != AF_INET || |
| Line 299 rip_ctlinput(int cmd, struct sockaddr *s |
|
| Line 297 rip_ctlinput(int cmd, struct sockaddr *s |
|
| * Tack on options user may have setup with control call. |
* Tack on options user may have setup with control call. |
| */ |
*/ |
| int |
int |
| |
#if __STDC__ |
| rip_output(struct mbuf *m, ...) |
rip_output(struct mbuf *m, ...) |
| |
#else |
| |
rip_output(m, va_alist) |
| |
struct mbuf *m; |
| |
va_dcl |
| |
#endif |
| { |
{ |
| struct inpcb *inp; |
struct inpcb *inp; |
| struct ip *ip; |
struct ip *ip; |
| Line 365 rip_output(struct mbuf *m, ...) |
|
| Line 369 rip_output(struct mbuf *m, ...) |
|
| HTONS(ip->ip_len); |
HTONS(ip->ip_len); |
| HTONS(ip->ip_off); |
HTONS(ip->ip_off); |
| if (ip->ip_id == 0) |
if (ip->ip_id == 0) |
| ip->ip_id = ip_newid(); |
ip->ip_id = htons(ip_id++); |
| opts = NULL; |
opts = NULL; |
| /* XXX prevent ip_output from overwriting header fields */ |
/* XXX prevent ip_output from overwriting header fields */ |
| flags |= IP_RAWOUTPUT; |
flags |= IP_RAWOUTPUT; |
| ipstat.ips_rawout++; |
ipstat.ips_rawout++; |
| } |
} |
| |
#ifdef IPSEC |
| |
if (ipsec_setsocket(m, inp->inp_socket) != 0) { |
| |
m_freem(m); |
| |
return ENOBUFS; |
| |
} |
| |
#endif /*IPSEC*/ |
| return (ip_output(m, opts, &inp->inp_route, flags, inp->inp_moptions, |
return (ip_output(m, opts, &inp->inp_route, flags, inp->inp_moptions, |
| inp->inp_socket, &inp->inp_errormtu)); |
&inp->inp_errormtu)); |
| } |
} |
| |
|
| /* |
/* |
| * Raw IP socket option processing. |
* Raw IP socket option processing. |
| */ |
*/ |
| int |
int |
| rip_ctloutput(int op, struct socket *so, int level, int optname, |
rip_ctloutput(op, so, level, optname, m) |
| struct mbuf **m) |
int op; |
| |
struct socket *so; |
| |
int level, optname; |
| |
struct mbuf **m; |
| { |
{ |
| struct inpcb *inp = sotoinpcb(so); |
struct inpcb *inp = sotoinpcb(so); |
| int error = 0; |
int error = 0; |
| Line 414 rip_ctloutput(int op, struct socket *so, |
|
| Line 427 rip_ctloutput(int op, struct socket *so, |
|
| case MRT_ADD_MFC: |
case MRT_ADD_MFC: |
| case MRT_DEL_MFC: |
case MRT_DEL_MFC: |
| case MRT_ASSERT: |
case MRT_ASSERT: |
| case MRT_API_CONFIG: |
|
| case MRT_ADD_BW_UPCALL: |
|
| case MRT_DEL_BW_UPCALL: |
|
| error = ip_mrouter_set(so, optname, m); |
error = ip_mrouter_set(so, optname, m); |
| break; |
break; |
| #endif |
#endif |
| Line 439 rip_ctloutput(int op, struct socket *so, |
|
| Line 449 rip_ctloutput(int op, struct socket *so, |
|
| #ifdef MROUTING |
#ifdef MROUTING |
| case MRT_VERSION: |
case MRT_VERSION: |
| case MRT_ASSERT: |
case MRT_ASSERT: |
| case MRT_API_SUPPORT: |
|
| case MRT_API_CONFIG: |
|
| error = ip_mrouter_get(so, optname, m); |
error = ip_mrouter_get(so, optname, m); |
| break; |
break; |
| #endif |
#endif |
| Line 455 rip_ctloutput(int op, struct socket *so, |
|
| Line 463 rip_ctloutput(int op, struct socket *so, |
|
| } |
} |
| |
|
| int |
int |
| rip_bind(struct inpcb *inp, struct mbuf *nam) |
rip_bind(inp, nam) |
| |
struct inpcb *inp; |
| |
struct mbuf *nam; |
| { |
{ |
| struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
| |
|
| Line 474 rip_bind(struct inpcb *inp, struct mbuf |
|
| Line 484 rip_bind(struct inpcb *inp, struct mbuf |
|
| } |
} |
| |
|
| int |
int |
| rip_connect(struct inpcb *inp, struct mbuf *nam) |
rip_connect(inp, nam) |
| |
struct inpcb *inp; |
| |
struct mbuf *nam; |
| { |
{ |
| struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
| |
|
| Line 490 rip_connect(struct inpcb *inp, struct mb |
|
| Line 502 rip_connect(struct inpcb *inp, struct mb |
|
| } |
} |
| |
|
| void |
void |
| rip_disconnect(struct inpcb *inp) |
rip_disconnect(inp) |
| |
struct inpcb *inp; |
| { |
{ |
| |
|
| inp->inp_faddr = zeroin_addr; |
inp->inp_faddr = zeroin_addr; |
| Line 501 u_long rip_recvspace = RIPRCVQ; |
|
| Line 514 u_long rip_recvspace = RIPRCVQ; |
|
| |
|
| /*ARGSUSED*/ |
/*ARGSUSED*/ |
| int |
int |
| rip_usrreq(struct socket *so, int req, |
rip_usrreq(so, req, m, nam, control, p) |
| struct mbuf *m, struct mbuf *nam, struct mbuf *control, struct lwp *l) |
struct socket *so; |
| |
int req; |
| |
struct mbuf *m, *nam, *control; |
| |
struct proc *p; |
| { |
{ |
| struct inpcb *inp; |
struct inpcb *inp; |
| struct proc *p; |
|
| int s; |
int s; |
| int error = 0; |
int error = 0; |
| #ifdef MROUTING |
#ifdef MROUTING |
| extern struct socket *ip_mrouter; |
extern struct socket *ip_mrouter; |
| #endif |
#endif |
| |
|
| p = l ? l->l_proc : NULL; |
|
| if (req == PRU_CONTROL) |
if (req == PRU_CONTROL) |
| return (in_control(so, (long)m, (caddr_t)nam, |
return (in_control(so, (long)m, (caddr_t)nam, |
| (struct ifnet *)control, p)); |
(struct ifnet *)control, p)); |
|
|
| splx(s); |
splx(s); |
| return (error); |
return (error); |
| } |
} |
| |
|
| SYSCTL_SETUP(sysctl_net_inet_raw_setup, "sysctl net.inet.raw subtree setup") |
|
| { |
|
| |
|
| sysctl_createv(clog, 0, NULL, NULL, |
|
| CTLFLAG_PERMANENT, |
|
| CTLTYPE_NODE, "net", NULL, |
|
| NULL, 0, NULL, 0, |
|
| CTL_NET, CTL_EOL); |
|
| sysctl_createv(clog, 0, NULL, NULL, |
|
| CTLFLAG_PERMANENT, |
|
| CTLTYPE_NODE, "inet", NULL, |
|
| NULL, 0, NULL, 0, |
|
| CTL_NET, PF_INET, CTL_EOL); |
|
| sysctl_createv(clog, 0, NULL, NULL, |
|
| CTLFLAG_PERMANENT, |
|
| CTLTYPE_NODE, "raw", |
|
| SYSCTL_DESCR("Raw IPv4 settings"), |
|
| NULL, 0, NULL, 0, |
|
| CTL_NET, PF_INET, IPPROTO_RAW, CTL_EOL); |
|
| |
|
| sysctl_createv(clog, 0, NULL, NULL, |
|
| CTLFLAG_PERMANENT, |
|
| CTLTYPE_STRUCT, "pcblist", |
|
| SYSCTL_DESCR("Raw IPv4 control block list"), |
|
| sysctl_inpcblist, 0, &rawcbtable, 0, |
|
| CTL_NET, PF_INET, IPPROTO_RAW, |
|
| CTL_CREATE, CTL_EOL); |
|
| } |
|