Changeset View
Changeset View
Standalone View
Standalone View
sys/netinet6/ip6_fastfwd.c
| Show First 20 Lines • Show All 150 Lines • ▼ Show 20 Lines | #endif | ||||
| bzero(&dst, sizeof(dst)); | bzero(&dst, sizeof(dst)); | ||||
| dst.sin6_family = AF_INET6; | dst.sin6_family = AF_INET6; | ||||
| dst.sin6_len = sizeof(dst); | dst.sin6_len = sizeof(dst); | ||||
| dst.sin6_addr = ip6->ip6_dst; | dst.sin6_addr = ip6->ip6_dst; | ||||
| /* | /* | ||||
| * Incoming packet firewall processing. | * Incoming packet firewall processing. | ||||
| */ | */ | ||||
| if (!PFIL_HOOKED(&V_inet6_pfil_hook)) | if (!PFIL_HOOKED_IN(V_inet6_pfil_head)) | ||||
| goto passin; | goto passin; | ||||
| if (pfil_run_hooks(&V_inet6_pfil_hook, &m, rcvif, PFIL_IN, 0, | if (pfil_run_hooks(V_inet6_pfil_head, &m, rcvif, PFIL_IN, NULL) != | ||||
| NULL) != 0 || m == NULL) | PFIL_PASS) | ||||
| goto dropin; | goto dropin; | ||||
| /* | /* | ||||
| * If packet filter sets the M_FASTFWD_OURS flag, this means | * If packet filter sets the M_FASTFWD_OURS flag, this means | ||||
| * that new destination or next hop is our local address. | * that new destination or next hop is our local address. | ||||
| * So, we can just go back to ip6_input. | * So, we can just go back to ip6_input. | ||||
| * XXX: should we decrement ip6_hlim in such case? | * XXX: should we decrement ip6_hlim in such case? | ||||
| * | * | ||||
| * Also it can forward packet to another destination, e.g. | * Also it can forward packet to another destination, e.g. | ||||
| Show All 19 Lines | passin: | ||||
| /* | /* | ||||
| * Find route to destination. | * Find route to destination. | ||||
| */ | */ | ||||
| if (ip6_findroute(&nh, &dst, m) != 0) { | if (ip6_findroute(&nh, &dst, m) != 0) { | ||||
| m = NULL; | m = NULL; | ||||
| in6_ifstat_inc(rcvif, ifs6_in_noroute); | in6_ifstat_inc(rcvif, ifs6_in_noroute); | ||||
| goto dropin; | goto dropin; | ||||
| } | } | ||||
| if (!PFIL_HOOKED(&V_inet6_pfil_hook)) { | if (!PFIL_HOOKED_OUT(V_inet6_pfil_head)) { | ||||
| if (m->m_pkthdr.len > nh.nh_mtu) { | if (m->m_pkthdr.len > nh.nh_mtu) { | ||||
| in6_ifstat_inc(nh.nh_ifp, ifs6_in_toobig); | in6_ifstat_inc(nh.nh_ifp, ifs6_in_toobig); | ||||
| icmp6_error(m, ICMP6_PACKET_TOO_BIG, 0, nh.nh_mtu); | icmp6_error(m, ICMP6_PACKET_TOO_BIG, 0, nh.nh_mtu); | ||||
| m = NULL; | m = NULL; | ||||
| goto dropout; | goto dropout; | ||||
| } | } | ||||
| goto passout; | goto passout; | ||||
| } | } | ||||
| /* | /* | ||||
| * Outgoing packet firewall processing. | * Outgoing packet firewall processing. | ||||
| */ | */ | ||||
| if (pfil_run_hooks(&V_inet6_pfil_hook, &m, nh.nh_ifp, PFIL_OUT, | if (pfil_run_hooks(V_inet6_pfil_head, &m, nh.nh_ifp, PFIL_OUT | | ||||
| PFIL_FWD, NULL) != 0 || m == NULL) | PFIL_FWD, NULL) != PFIL_PASS) | ||||
| goto dropout; | goto dropout; | ||||
| /* | /* | ||||
| * We used slow path processing for packets with scoped addresses. | * We used slow path processing for packets with scoped addresses. | ||||
| * So, scope checks aren't needed here. | * So, scope checks aren't needed here. | ||||
| */ | */ | ||||
| if (m->m_pkthdr.len > nh.nh_mtu) { | if (m->m_pkthdr.len > nh.nh_mtu) { | ||||
| in6_ifstat_inc(nh.nh_ifp, ifs6_in_toobig); | in6_ifstat_inc(nh.nh_ifp, ifs6_in_toobig); | ||||
| ▲ Show 20 Lines • Show All 85 Lines • Show Last 20 Lines | |||||