xref: /freebsd/sys/netinet/in.h (revision 3642298923e528d795e3a30ec165d2b469e28b40)
1 /*-
2  * Copyright (c) 1982, 1986, 1990, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 4. Neither the name of the University nor the names of its contributors
14  *    may be used to endorse or promote products derived from this software
15  *    without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  *
29  *	@(#)in.h	8.3 (Berkeley) 1/3/94
30  * $FreeBSD$
31  */
32 
33 #ifndef _NETINET_IN_H_
34 #define	_NETINET_IN_H_
35 
36 #include <sys/cdefs.h>
37 #include <sys/_types.h>
38 #include <machine/endian.h>
39 
40 /* Protocols common to RFC 1700, POSIX, and X/Open. */
41 #define	IPPROTO_IP		0		/* dummy for IP */
42 #define	IPPROTO_ICMP		1		/* control message protocol */
43 #define	IPPROTO_TCP		6		/* tcp */
44 #define	IPPROTO_UDP		17		/* user datagram protocol */
45 
46 #define	INADDR_ANY		(u_int32_t)0x00000000
47 #define	INADDR_BROADCAST	(u_int32_t)0xffffffff	/* must be masked */
48 
49 #ifndef _UINT8_T_DECLARED
50 typedef	__uint8_t		uint8_t;
51 #define	_UINT8_T_DECLARED
52 #endif
53 
54 #ifndef _UINT16_T_DECLARED
55 typedef	__uint16_t		uint16_t;
56 #define	_UINT16_T_DECLARED
57 #endif
58 
59 #ifndef _UINT32_T_DECLARED
60 typedef	__uint32_t		uint32_t;
61 #define	_UINT32_T_DECLARED
62 #endif
63 
64 #ifndef _IN_ADDR_T_DECLARED
65 typedef	uint32_t		in_addr_t;
66 #define	_IN_ADDR_T_DECLARED
67 #endif
68 
69 #ifndef _IN_PORT_T_DECLARED
70 typedef	uint16_t		in_port_t;
71 #define	_IN_PORT_T_DECLARED
72 #endif
73 
74 #ifndef _SA_FAMILY_T_DECLARED
75 typedef	__sa_family_t		sa_family_t;
76 #define	_SA_FAMILY_T_DECLARED
77 #endif
78 
79 /* Internet address (a structure for historical reasons). */
80 #ifndef	_STRUCT_IN_ADDR_DECLARED
81 struct in_addr {
82 	in_addr_t s_addr;
83 };
84 #define	_STRUCT_IN_ADDR_DECLARED
85 #endif
86 
87 /* Socket address, internet style. */
88 struct sockaddr_in {
89 	uint8_t	sin_len;
90 	sa_family_t	sin_family;
91 	in_port_t	sin_port;
92 	struct	in_addr sin_addr;
93 	char	sin_zero[8];
94 };
95 
96 #ifndef _KERNEL
97 
98 #ifndef _BYTEORDER_PROTOTYPED
99 #define	_BYTEORDER_PROTOTYPED
100 __BEGIN_DECLS
101 uint32_t	htonl(uint32_t);
102 uint16_t	htons(uint16_t);
103 uint32_t	ntohl(uint32_t);
104 uint16_t	ntohs(uint16_t);
105 __END_DECLS
106 #endif
107 
108 #ifndef _BYTEORDER_FUNC_DEFINED
109 #define	_BYTEORDER_FUNC_DEFINED
110 #define	htonl(x)	__htonl(x)
111 #define	htons(x)	__htons(x)
112 #define	ntohl(x)	__ntohl(x)
113 #define	ntohs(x)	__ntohs(x)
114 #endif
115 
116 #endif /* !_KERNEL */
117 
118 #if __POSIX_VISIBLE >= 200112
119 #define	IPPROTO_RAW		255		/* raw IP packet */
120 #define	INET_ADDRSTRLEN		16
121 #endif
122 
123 #if __BSD_VISIBLE
124 /*
125  * Constants and structures defined by the internet system,
126  * Per RFC 790, September 1981, and numerous additions.
127  */
128 
129 /*
130  * Protocols (RFC 1700)
131  */
132 #define	IPPROTO_HOPOPTS		0		/* IP6 hop-by-hop options */
133 #define	IPPROTO_IGMP		2		/* group mgmt protocol */
134 #define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
135 #define	IPPROTO_IPV4		4		/* IPv4 encapsulation */
136 #define	IPPROTO_IPIP		IPPROTO_IPV4	/* for compatibility */
137 #define	IPPROTO_ST		7		/* Stream protocol II */
138 #define	IPPROTO_EGP		8		/* exterior gateway protocol */
139 #define	IPPROTO_PIGP		9		/* private interior gateway */
140 #define	IPPROTO_RCCMON		10		/* BBN RCC Monitoring */
141 #define	IPPROTO_NVPII		11		/* network voice protocol*/
142 #define	IPPROTO_PUP		12		/* pup */
143 #define	IPPROTO_ARGUS		13		/* Argus */
144 #define	IPPROTO_EMCON		14		/* EMCON */
145 #define	IPPROTO_XNET		15		/* Cross Net Debugger */
146 #define	IPPROTO_CHAOS		16		/* Chaos*/
147 #define	IPPROTO_MUX		18		/* Multiplexing */
148 #define	IPPROTO_MEAS		19		/* DCN Measurement Subsystems */
149 #define	IPPROTO_HMP		20		/* Host Monitoring */
150 #define	IPPROTO_PRM		21		/* Packet Radio Measurement */
151 #define	IPPROTO_IDP		22		/* xns idp */
152 #define	IPPROTO_TRUNK1		23		/* Trunk-1 */
153 #define	IPPROTO_TRUNK2		24		/* Trunk-2 */
154 #define	IPPROTO_LEAF1		25		/* Leaf-1 */
155 #define	IPPROTO_LEAF2		26		/* Leaf-2 */
156 #define	IPPROTO_RDP		27		/* Reliable Data */
157 #define	IPPROTO_IRTP		28		/* Reliable Transaction */
158 #define	IPPROTO_TP		29		/* tp-4 w/ class negotiation */
159 #define	IPPROTO_BLT		30		/* Bulk Data Transfer */
160 #define	IPPROTO_NSP		31		/* Network Services */
161 #define	IPPROTO_INP		32		/* Merit Internodal */
162 #define	IPPROTO_SEP		33		/* Sequential Exchange */
163 #define	IPPROTO_3PC		34		/* Third Party Connect */
164 #define	IPPROTO_IDPR		35		/* InterDomain Policy Routing */
165 #define	IPPROTO_XTP		36		/* XTP */
166 #define	IPPROTO_DDP		37		/* Datagram Delivery */
167 #define	IPPROTO_CMTP		38		/* Control Message Transport */
168 #define	IPPROTO_TPXX		39		/* TP++ Transport */
169 #define	IPPROTO_IL		40		/* IL transport protocol */
170 #define	IPPROTO_IPV6		41		/* IP6 header */
171 #define	IPPROTO_SDRP		42		/* Source Demand Routing */
172 #define	IPPROTO_ROUTING		43		/* IP6 routing header */
173 #define	IPPROTO_FRAGMENT	44		/* IP6 fragmentation header */
174 #define	IPPROTO_IDRP		45		/* InterDomain Routing*/
175 #define	IPPROTO_RSVP		46		/* resource reservation */
176 #define	IPPROTO_GRE		47		/* General Routing Encap. */
177 #define	IPPROTO_MHRP		48		/* Mobile Host Routing */
178 #define	IPPROTO_BHA		49		/* BHA */
179 #define	IPPROTO_ESP		50		/* IP6 Encap Sec. Payload */
180 #define	IPPROTO_AH		51		/* IP6 Auth Header */
181 #define	IPPROTO_INLSP		52		/* Integ. Net Layer Security */
182 #define	IPPROTO_SWIPE		53		/* IP with encryption */
183 #define	IPPROTO_NHRP		54		/* Next Hop Resolution */
184 #define	IPPROTO_MOBILE		55		/* IP Mobility */
185 #define	IPPROTO_TLSP		56		/* Transport Layer Security */
186 #define	IPPROTO_SKIP		57		/* SKIP */
187 #define	IPPROTO_ICMPV6		58		/* ICMP6 */
188 #define	IPPROTO_NONE		59		/* IP6 no next header */
189 #define	IPPROTO_DSTOPTS		60		/* IP6 destination option */
190 #define	IPPROTO_AHIP		61		/* any host internal protocol */
191 #define	IPPROTO_CFTP		62		/* CFTP */
192 #define	IPPROTO_HELLO		63		/* "hello" routing protocol */
193 #define	IPPROTO_SATEXPAK	64		/* SATNET/Backroom EXPAK */
194 #define	IPPROTO_KRYPTOLAN	65		/* Kryptolan */
195 #define	IPPROTO_RVD		66		/* Remote Virtual Disk */
196 #define	IPPROTO_IPPC		67		/* Pluribus Packet Core */
197 #define	IPPROTO_ADFS		68		/* Any distributed FS */
198 #define	IPPROTO_SATMON		69		/* Satnet Monitoring */
199 #define	IPPROTO_VISA		70		/* VISA Protocol */
200 #define	IPPROTO_IPCV		71		/* Packet Core Utility */
201 #define	IPPROTO_CPNX		72		/* Comp. Prot. Net. Executive */
202 #define	IPPROTO_CPHB		73		/* Comp. Prot. HeartBeat */
203 #define	IPPROTO_WSN		74		/* Wang Span Network */
204 #define	IPPROTO_PVP		75		/* Packet Video Protocol */
205 #define	IPPROTO_BRSATMON	76		/* BackRoom SATNET Monitoring */
206 #define	IPPROTO_ND		77		/* Sun net disk proto (temp.) */
207 #define	IPPROTO_WBMON		78		/* WIDEBAND Monitoring */
208 #define	IPPROTO_WBEXPAK		79		/* WIDEBAND EXPAK */
209 #define	IPPROTO_EON		80		/* ISO cnlp */
210 #define	IPPROTO_VMTP		81		/* VMTP */
211 #define	IPPROTO_SVMTP		82		/* Secure VMTP */
212 #define	IPPROTO_VINES		83		/* Banyon VINES */
213 #define	IPPROTO_TTP		84		/* TTP */
214 #define	IPPROTO_IGP		85		/* NSFNET-IGP */
215 #define	IPPROTO_DGP		86		/* dissimilar gateway prot. */
216 #define	IPPROTO_TCF		87		/* TCF */
217 #define	IPPROTO_IGRP		88		/* Cisco/GXS IGRP */
218 #define	IPPROTO_OSPFIGP		89		/* OSPFIGP */
219 #define	IPPROTO_SRPC		90		/* Strite RPC protocol */
220 #define	IPPROTO_LARP		91		/* Locus Address Resoloution */
221 #define	IPPROTO_MTP		92		/* Multicast Transport */
222 #define	IPPROTO_AX25		93		/* AX.25 Frames */
223 #define	IPPROTO_IPEIP		94		/* IP encapsulated in IP */
224 #define	IPPROTO_MICP		95		/* Mobile Int.ing control */
225 #define	IPPROTO_SCCSP		96		/* Semaphore Comm. security */
226 #define	IPPROTO_ETHERIP		97		/* Ethernet IP encapsulation */
227 #define	IPPROTO_ENCAP		98		/* encapsulation header */
228 #define	IPPROTO_APES		99		/* any private encr. scheme */
229 #define	IPPROTO_GMTP		100		/* GMTP*/
230 #define	IPPROTO_IPCOMP		108		/* payload compression (IPComp) */
231 /* 101-254: Partly Unassigned */
232 #define	IPPROTO_PIM		103		/* Protocol Independent Mcast */
233 #define	IPPROTO_CARP		112		/* CARP */
234 #define	IPPROTO_PGM		113		/* PGM */
235 #define	IPPROTO_PFSYNC		240		/* PFSYNC */
236 /* 255: Reserved */
237 /* BSD Private, local use, namespace incursion, no longer used */
238 #define	IPPROTO_OLD_DIVERT	254		/* OLD divert pseudo-proto */
239 #define	IPPROTO_MAX		256
240 
241 /* last return value of *_input(), meaning "all job for this pkt is done".  */
242 #define	IPPROTO_DONE		257
243 
244 /* Only used internally, so can be outside the range of valid IP protocols. */
245 #define	IPPROTO_DIVERT		258		/* divert pseudo-protocol */
246 
247 /*
248  * Defined to avoid confusion.  The master value is defined by
249  * PROTO_SPACER in sys/protosw.h.
250  */
251 #define	IPPROTO_SPACER		32767		/* spacer for loadable protos */
252 
253 /*
254  * Local port number conventions:
255  *
256  * When a user does a bind(2) or connect(2) with a port number of zero,
257  * a non-conflicting local port address is chosen.
258  * The default range is IPPORT_HIFIRSTAUTO through
259  * IPPORT_HILASTAUTO, although that is settable by sysctl.
260  *
261  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
262  * default assignment range.
263  *
264  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
265  *
266  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
267  * into the "high" range.  These are reserved for client outbound connections
268  * which do not want to be filtered by any firewalls.  Note that by default
269  * this is the same as IP_PORTRANGE_DEFAULT.
270  *
271  * The value IP_PORTRANGE_LOW changes the range to the "low" are
272  * that is (by convention) restricted to privileged processes.  This
273  * convention is based on "vouchsafe" principles only.  It is only secure
274  * if you trust the remote host to restrict these ports.
275  *
276  * The default range of ports and the high range can be changed by
277  * sysctl(3).  (net.inet.ip.port{hi,low}{first,last}_auto)
278  *
279  * Changing those values has bad security implications if you are
280  * using a stateless firewall that is allowing packets outside of that
281  * range in order to allow transparent outgoing connections.
282  *
283  * Such a firewall configuration will generally depend on the use of these
284  * default values.  If you change them, you may find your Security
285  * Administrator looking for you with a heavy object.
286  *
287  * For a slightly more orthodox text view on this:
288  *
289  *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
290  *
291  *    port numbers are divided into three ranges:
292  *
293  *                0 -  1023 Well Known Ports
294  *             1024 - 49151 Registered Ports
295  *            49152 - 65535 Dynamic and/or Private Ports
296  *
297  */
298 
299 /*
300  * Ports < IPPORT_RESERVED are reserved for
301  * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
302  */
303 #define	IPPORT_RESERVED		1024
304 
305 /*
306  * Default local port range, used by both IP_PORTRANGE_DEFAULT
307  * and IP_PORTRANGE_HIGH.
308  */
309 #define	IPPORT_HIFIRSTAUTO	49152
310 #define	IPPORT_HILASTAUTO	65535
311 
312 /*
313  * Scanning for a free reserved port return a value below IPPORT_RESERVED,
314  * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
315  * 512, but that conflicts with some well-known-services that firewalls may
316  * have a fit if we use.
317  */
318 #define	IPPORT_RESERVEDSTART	600
319 
320 #define	IPPORT_MAX		65535
321 
322 /*
323  * Definitions of bits in internet address integers.
324  * On subnets, the decomposition of addresses to host and net parts
325  * is done according to subnet mask, not the masks here.
326  */
327 #define	IN_CLASSA(i)		(((u_int32_t)(i) & 0x80000000) == 0)
328 #define	IN_CLASSA_NET		0xff000000
329 #define	IN_CLASSA_NSHIFT	24
330 #define	IN_CLASSA_HOST		0x00ffffff
331 #define	IN_CLASSA_MAX		128
332 
333 #define	IN_CLASSB(i)		(((u_int32_t)(i) & 0xc0000000) == 0x80000000)
334 #define	IN_CLASSB_NET		0xffff0000
335 #define	IN_CLASSB_NSHIFT	16
336 #define	IN_CLASSB_HOST		0x0000ffff
337 #define	IN_CLASSB_MAX		65536
338 
339 #define	IN_CLASSC(i)		(((u_int32_t)(i) & 0xe0000000) == 0xc0000000)
340 #define	IN_CLASSC_NET		0xffffff00
341 #define	IN_CLASSC_NSHIFT	8
342 #define	IN_CLASSC_HOST		0x000000ff
343 
344 #define	IN_CLASSD(i)		(((u_int32_t)(i) & 0xf0000000) == 0xe0000000)
345 #define	IN_CLASSD_NET		0xf0000000	/* These ones aren't really */
346 #define	IN_CLASSD_NSHIFT	28		/* net and host fields, but */
347 #define	IN_CLASSD_HOST		0x0fffffff	/* routing needn't know.    */
348 #define	IN_MULTICAST(i)		IN_CLASSD(i)
349 
350 #define	IN_EXPERIMENTAL(i)	(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
351 #define	IN_BADCLASS(i)		(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
352 
353 #define	INADDR_LOOPBACK		(u_int32_t)0x7f000001
354 #ifndef _KERNEL
355 #define	INADDR_NONE		0xffffffff		/* -1 return */
356 #endif
357 
358 #define	INADDR_UNSPEC_GROUP	(u_int32_t)0xe0000000	/* 224.0.0.0 */
359 #define	INADDR_ALLHOSTS_GROUP	(u_int32_t)0xe0000001	/* 224.0.0.1 */
360 #define	INADDR_ALLRTRS_GROUP	(u_int32_t)0xe0000002	/* 224.0.0.2 */
361 #define	INADDR_CARP_GROUP	(u_int32_t)0xe0000012	/* 224.0.0.18 */
362 #define	INADDR_PFSYNC_GROUP	(u_int32_t)0xe00000f0	/* 224.0.0.240 */
363 #define	INADDR_ALLMDNS_GROUP	(u_int32_t)0xe00000fb	/* 224.0.0.251 */
364 #define	INADDR_MAX_LOCAL_GROUP	(u_int32_t)0xe00000ff	/* 224.0.0.255 */
365 
366 #define	IN_LOOPBACKNET		127			/* official! */
367 
368 /*
369  * Options for use with [gs]etsockopt at the IP level.
370  * First word of comment is data type; bool is stored in int.
371  */
372 #define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
373 #define	IP_HDRINCL		2    /* int; header is included with data */
374 #define	IP_TOS			3    /* int; IP type of service and preced. */
375 #define	IP_TTL			4    /* int; IP time to live */
376 #define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
377 #define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
378 #define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
379 #define	IP_SENDSRCADDR		IP_RECVDSTADDR /* cmsg_type to set src addr */
380 #define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
381 #define	IP_MULTICAST_IF		9    /* u_char; set/get IP multicast i/f  */
382 #define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
383 #define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
384 #define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
385 #define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
386 #define	IP_MULTICAST_VIF	14   /* set/get IP mcast virt. iface */
387 #define	IP_RSVP_ON		15   /* enable RSVP in kernel */
388 #define	IP_RSVP_OFF		16   /* disable RSVP in kernel */
389 #define	IP_RSVP_VIF_ON		17   /* set RSVP per-vif socket */
390 #define	IP_RSVP_VIF_OFF		18   /* unset RSVP per-vif socket */
391 #define	IP_PORTRANGE		19   /* int; range to choose for unspec port */
392 #define	IP_RECVIF		20   /* bool; receive reception if w/dgram */
393 /* for IPSEC */
394 #define	IP_IPSEC_POLICY		21   /* int; set/get security policy */
395 #define	IP_FAITH		22   /* bool; accept FAITH'ed connections */
396 
397 #define	IP_ONESBCAST		23   /* bool: send all-ones broadcast */
398 
399 #define	IP_FW_TABLE_ADD		40   /* add entry */
400 #define	IP_FW_TABLE_DEL		41   /* delete entry */
401 #define	IP_FW_TABLE_FLUSH	42   /* flush table */
402 #define	IP_FW_TABLE_GETSIZE	43   /* get table size */
403 #define	IP_FW_TABLE_LIST	44   /* list table contents */
404 
405 #define	IP_FW_ADD		50   /* add a firewall rule to chain */
406 #define	IP_FW_DEL		51   /* delete a firewall rule from chain */
407 #define	IP_FW_FLUSH		52   /* flush firewall rule chain */
408 #define	IP_FW_ZERO		53   /* clear single/all firewall counter(s) */
409 #define	IP_FW_GET		54   /* get entire firewall rule chain */
410 #define	IP_FW_RESETLOG		55   /* reset logging counters */
411 
412 #define	IP_DUMMYNET_CONFIGURE	60   /* add/configure a dummynet pipe */
413 #define	IP_DUMMYNET_DEL		61   /* delete a dummynet pipe from chain */
414 #define	IP_DUMMYNET_FLUSH	62   /* flush dummynet */
415 #define	IP_DUMMYNET_GET		64   /* get entire dummynet pipes */
416 
417 #define	IP_RECVTTL		65   /* bool; receive IP TTL w/dgram */
418 #define	IP_MINTTL		66   /* minimum TTL for packet or drop */
419 
420 /*
421  * Defaults and limits for options
422  */
423 #define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
424 #define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
425 #define	IP_MAX_MEMBERSHIPS	20	/* per socket */
426 
427 /*
428  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
429  */
430 struct ip_mreq {
431 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
432 	struct	in_addr imr_interface;	/* local IP address of interface */
433 };
434 
435 /*
436  * Argument for IP_PORTRANGE:
437  * - which range to search when port is unspecified at bind() or connect()
438  */
439 #define	IP_PORTRANGE_DEFAULT	0	/* default range */
440 #define	IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
441 #define	IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
442 
443 /*
444  * Definitions for inet sysctl operations.
445  *
446  * Third level is protocol number.
447  * Fourth level is desired variable within that protocol.
448  */
449 #define	IPPROTO_MAXID	(IPPROTO_AH + 1)	/* don't list to IPPROTO_MAX */
450 
451 #define	CTL_IPPROTO_NAMES { \
452 	{ "ip", CTLTYPE_NODE }, \
453 	{ "icmp", CTLTYPE_NODE }, \
454 	{ "igmp", CTLTYPE_NODE }, \
455 	{ "ggp", CTLTYPE_NODE }, \
456 	{ 0, 0 }, \
457 	{ 0, 0 }, \
458 	{ "tcp", CTLTYPE_NODE }, \
459 	{ 0, 0 }, \
460 	{ "egp", CTLTYPE_NODE }, \
461 	{ 0, 0 }, \
462 	{ 0, 0 }, \
463 	{ 0, 0 }, \
464 	{ "pup", CTLTYPE_NODE }, \
465 	{ 0, 0 }, \
466 	{ 0, 0 }, \
467 	{ 0, 0 }, \
468 	{ 0, 0 }, \
469 	{ "udp", CTLTYPE_NODE }, \
470 	{ 0, 0 }, \
471 	{ 0, 0 }, \
472 	{ 0, 0 }, \
473 	{ 0, 0 }, \
474 	{ "idp", CTLTYPE_NODE }, \
475 	{ 0, 0 }, \
476 	{ 0, 0 }, \
477 	{ 0, 0 }, \
478 	{ 0, 0 }, \
479 	{ 0, 0 }, \
480 	{ 0, 0 }, \
481 	{ 0, 0 }, \
482 	{ 0, 0 }, \
483 	{ 0, 0 }, \
484 	{ 0, 0 }, \
485 	{ 0, 0 }, \
486 	{ 0, 0 }, \
487 	{ 0, 0 }, \
488 	{ 0, 0 }, \
489 	{ 0, 0 }, \
490 	{ 0, 0 }, \
491 	{ 0, 0 }, \
492 	{ 0, 0 }, \
493 	{ 0, 0 }, \
494 	{ 0, 0 }, \
495 	{ 0, 0 }, \
496 	{ 0, 0 }, \
497 	{ 0, 0 }, \
498 	{ 0, 0 }, \
499 	{ 0, 0 }, \
500 	{ 0, 0 }, \
501 	{ 0, 0 }, \
502 	{ 0, 0 }, \
503 	{ "ipsec", CTLTYPE_NODE }, \
504 	{ 0, 0 }, \
505 	{ 0, 0 }, \
506 	{ 0, 0 }, \
507 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
508 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
509 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
510 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
511 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
512 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
513 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
514 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
515 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
516 	{ 0, 0 }, \
517 	{ 0, 0 }, \
518 	{ 0, 0 }, \
519 	{ "pim", CTLTYPE_NODE }, \
520 }
521 
522 /*
523  * Names for IP sysctl objects
524  */
525 #define	IPCTL_FORWARDING	1	/* act as router */
526 #define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
527 #define	IPCTL_DEFTTL		3	/* default TTL */
528 #ifdef notyet
529 #define	IPCTL_DEFMTU		4	/* default MTU */
530 #endif
531 #define	IPCTL_RTEXPIRE		5	/* cloned route expiration time */
532 #define	IPCTL_RTMINEXPIRE	6	/* min value for expiration time */
533 #define	IPCTL_RTMAXCACHE	7	/* trigger level for dynamic expire */
534 #define	IPCTL_SOURCEROUTE	8	/* may perform source routes */
535 #define	IPCTL_DIRECTEDBROADCAST	9	/* may re-broadcast received packets */
536 #define	IPCTL_INTRQMAXLEN	10	/* max length of netisr queue */
537 #define	IPCTL_INTRQDROPS	11	/* number of netisr q drops */
538 #define	IPCTL_STATS		12	/* ipstat structure */
539 #define	IPCTL_ACCEPTSOURCEROUTE	13	/* may accept source routed packets */
540 #define	IPCTL_FASTFORWARDING	14	/* use fast IP forwarding code */
541 #define	IPCTL_KEEPFAITH		15	/* FAITH IPv4->IPv6 translater ctl */
542 #define	IPCTL_GIF_TTL		16	/* default TTL for gif encap packet */
543 #define	IPCTL_MAXID		17
544 
545 #define	IPCTL_NAMES { \
546 	{ 0, 0 }, \
547 	{ "forwarding", CTLTYPE_INT }, \
548 	{ "redirect", CTLTYPE_INT }, \
549 	{ "ttl", CTLTYPE_INT }, \
550 	{ "mtu", CTLTYPE_INT }, \
551 	{ "rtexpire", CTLTYPE_INT }, \
552 	{ "rtminexpire", CTLTYPE_INT }, \
553 	{ "rtmaxcache", CTLTYPE_INT }, \
554 	{ "sourceroute", CTLTYPE_INT }, \
555 	{ "directed-broadcast", CTLTYPE_INT }, \
556 	{ "intr-queue-maxlen", CTLTYPE_INT }, \
557 	{ "intr-queue-drops", CTLTYPE_INT }, \
558 	{ "stats", CTLTYPE_STRUCT }, \
559 	{ "accept_sourceroute", CTLTYPE_INT }, \
560 	{ "fastforwarding", CTLTYPE_INT }, \
561 }
562 
563 #endif /* __BSD_VISIBLE */
564 
565 #ifdef _KERNEL
566 
567 struct ifnet; struct mbuf;	/* forward declarations for Standard C */
568 
569 int	 in_broadcast(struct in_addr, struct ifnet *);
570 int	 in_canforward(struct in_addr);
571 int	 in_localaddr(struct in_addr);
572 int	 in_localip(struct in_addr);
573 char	*inet_ntoa(struct in_addr); /* in libkern */
574 char	*inet_ntoa_r(struct in_addr ina, char *buf); /* in libkern */
575 void	 in_ifdetach(struct ifnet *);
576 
577 #define	in_hosteq(s, t)	((s).s_addr == (t).s_addr)
578 #define	in_nullhost(x)	((x).s_addr == INADDR_ANY)
579 
580 #define	satosin(sa)	((struct sockaddr_in *)(sa))
581 #define	sintosa(sin)	((struct sockaddr *)(sin))
582 #define	ifatoia(ifa)	((struct in_ifaddr *)(ifa))
583 
584 #endif /* _KERNEL */
585 
586 /* INET6 stuff */
587 #if __POSIX_VISIBLE >= 200112
588 #define	__KAME_NETINET_IN_H_INCLUDED_
589 #include <netinet6/in6.h>
590 #undef __KAME_NETINET_IN_H_INCLUDED_
591 #endif
592 
593 #endif /* !_NETINET_IN_H_*/
594