| () | () |
extern struct domain inet6domain; extern struct ip6protosw inet6sw[]; + extern int (*fr_checkp) __P((struct ip *, int, struct ifnet *, int, + struct mbuf **));
u_char ip6_protox[IPPROTO_MAX]; static int ip6qmaxlen = IFQ_MAXLEN; *************** *** 289,294 **** --- 291,305 ---- ip6stat.ip6s_badvers++; in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr); goto bad; + } + + if (fr_checkp) { + struct mbuf *m1 = m; + + if ((*fr_checkp)(ip6, sizeof(*ip6), m->m_pkthdr.rcvif, + 0, &m1) || !m1) + return; + ip6 = mtod(m = m1, struct ip6_hdr *); }
ip6stat.ip6s_nxthist[ip6->ip6_nxt]++;
*** ip6_output.c.orig Sat Jul 15 07:14:35 2000 --- ip6_output.c Thu Oct 19 17:13:53 2000 *************** *** 106,111 **** --- 106,113 ---- #include <netinet6/ip6_fw.h> #endif
+ extern int (*fr_checkp) __P((struct ip *, int, struct ifnet *, int, struct mbuf **)); + static MALLOC_DEFINE(M_IPMOPTS, "ip6_moptions", "internet multicast options");
struct ip6_exthdrs { *************** *** 787,792 **** --- 789,803 ---- ip6->ip6_src.s6_addr16[1] = 0; if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) ip6->ip6_dst.s6_addr16[1] = 0; + } + + if (fr_checkp) { + struct mbuf *m1 = m; + + if ((error = (*fr_checkp)(ip6, sizeof(*ip6), ifp, 1, &m1)) || + !m1) + goto done; + ip6 = mtod(m = m1, struct ip6_hdr *); }
#ifdef IPV6FIREWALL
| November 24, 2024 |