1c398230bSWarner Losh /*- 2df8bae1dSRodney W. Grimes * Copyright (c) 1982, 1986, 1993 3df8bae1dSRodney W. Grimes * The Regents of the University of California. All rights reserved. 4df8bae1dSRodney W. Grimes * 5df8bae1dSRodney W. Grimes * Redistribution and use in source and binary forms, with or without 6df8bae1dSRodney W. Grimes * modification, are permitted provided that the following conditions 7df8bae1dSRodney W. Grimes * are met: 8df8bae1dSRodney W. Grimes * 1. Redistributions of source code must retain the above copyright 9df8bae1dSRodney W. Grimes * notice, this list of conditions and the following disclaimer. 10df8bae1dSRodney W. Grimes * 2. Redistributions in binary form must reproduce the above copyright 11df8bae1dSRodney W. Grimes * notice, this list of conditions and the following disclaimer in the 12df8bae1dSRodney W. Grimes * documentation and/or other materials provided with the distribution. 13df8bae1dSRodney W. Grimes * 4. Neither the name of the University nor the names of its contributors 14df8bae1dSRodney W. Grimes * may be used to endorse or promote products derived from this software 15df8bae1dSRodney W. Grimes * without specific prior written permission. 16df8bae1dSRodney W. Grimes * 17df8bae1dSRodney W. Grimes * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 18df8bae1dSRodney W. Grimes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19df8bae1dSRodney W. Grimes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20df8bae1dSRodney W. Grimes * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 21df8bae1dSRodney W. Grimes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22df8bae1dSRodney W. Grimes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23df8bae1dSRodney W. Grimes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24df8bae1dSRodney W. Grimes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25df8bae1dSRodney W. Grimes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26df8bae1dSRodney W. Grimes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27df8bae1dSRodney W. Grimes * SUCH DAMAGE. 28df8bae1dSRodney W. Grimes * 293271ad14SGarrett Wollman * @(#)ip_var.h 8.2 (Berkeley) 1/9/95 30c3aac50fSPeter Wemm * $FreeBSD$ 31df8bae1dSRodney W. Grimes */ 32df8bae1dSRodney W. Grimes 33707f139eSPaul Richards #ifndef _NETINET_IP_VAR_H_ 34707f139eSPaul Richards #define _NETINET_IP_VAR_H_ 35707f139eSPaul Richards 3633841545SHajimu UMEMOTO #include <sys/queue.h> 3733841545SHajimu UMEMOTO 38df8bae1dSRodney W. Grimes /* 39df8bae1dSRodney W. Grimes * Overlay for ip header used by other protocols (tcp, udp). 40df8bae1dSRodney W. Grimes */ 41df8bae1dSRodney W. Grimes struct ipovly { 426effc713SDoug Rabson u_char ih_x1[9]; /* (unused) */ 43df8bae1dSRodney W. Grimes u_char ih_pr; /* protocol */ 44430d30d8SBill Fenner u_short ih_len; /* protocol length */ 45df8bae1dSRodney W. Grimes struct in_addr ih_src; /* source internet address */ 46df8bae1dSRodney W. Grimes struct in_addr ih_dst; /* destination internet address */ 47df8bae1dSRodney W. Grimes }; 48df8bae1dSRodney W. Grimes 4969dac2eaSRobert Watson #ifdef _KERNEL 50df8bae1dSRodney W. Grimes /* 51df8bae1dSRodney W. Grimes * Ip reassembly queue structure. Each fragment 52df8bae1dSRodney W. Grimes * being reassembled is attached to one of these structures. 53df8bae1dSRodney W. Grimes * They are timed out after ipq_ttl drops to 0, and may also 54df8bae1dSRodney W. Grimes * be reclaimed if memory becomes tight. 55df8bae1dSRodney W. Grimes */ 56df8bae1dSRodney W. Grimes struct ipq { 57462b86feSPoul-Henning Kamp TAILQ_ENTRY(ipq) ipq_list; /* to other reass headers */ 58df8bae1dSRodney W. Grimes u_char ipq_ttl; /* time for reass q to live */ 59df8bae1dSRodney W. Grimes u_char ipq_p; /* protocol of this fragment */ 60df8bae1dSRodney W. Grimes u_short ipq_id; /* sequence id for reassembly */ 616effc713SDoug Rabson struct mbuf *ipq_frags; /* to ip headers of fragments */ 62df8bae1dSRodney W. Grimes struct in_addr ipq_src,ipq_dst; 63375386e2SMike Silbersack u_char ipq_nfrags; /* # frags in this packet */ 64eca8a663SRobert Watson struct label *ipq_label; /* MAC label */ 65df8bae1dSRodney W. Grimes }; 6669dac2eaSRobert Watson #endif /* _KERNEL */ 67df8bae1dSRodney W. Grimes 68df8bae1dSRodney W. Grimes /* 69c444cddeSAndre Oppermann * Structure stored in mbuf in inpcb.ip_options 70c444cddeSAndre Oppermann * and passed to ip_output when ip options are in use. 71c444cddeSAndre Oppermann * The actual length of the options (including ipopt_dst) 72c444cddeSAndre Oppermann * is in m_len. 73c444cddeSAndre Oppermann */ 74c444cddeSAndre Oppermann #define MAX_IPOPTLEN 40 75c444cddeSAndre Oppermann 76c444cddeSAndre Oppermann struct ipoption { 77c444cddeSAndre Oppermann struct in_addr ipopt_dst; /* first-hop dst if source routed */ 78c444cddeSAndre Oppermann char ipopt_list[MAX_IPOPTLEN]; /* options proper */ 79c444cddeSAndre Oppermann }; 80c444cddeSAndre Oppermann 81c444cddeSAndre Oppermann /* 82df8bae1dSRodney W. Grimes * Structure attached to inpcb.ip_moptions and 83df8bae1dSRodney W. Grimes * passed to ip_output when IP multicast options are in use. 8471498f30SBruce M Simpson * This structure is lazy-allocated. 85df8bae1dSRodney W. Grimes */ 86df8bae1dSRodney W. Grimes struct ip_moptions { 87df8bae1dSRodney W. Grimes struct ifnet *imo_multicast_ifp; /* ifp for outgoing multicasts */ 8833841545SHajimu UMEMOTO struct in_addr imo_multicast_addr; /* ifindex/addr on MULTICAST_IF */ 893548bfc9SBruce M Simpson u_long imo_multicast_vif; /* vif num outgoing multicasts */ 90df8bae1dSRodney W. Grimes u_char imo_multicast_ttl; /* TTL for outgoing multicasts */ 91df8bae1dSRodney W. Grimes u_char imo_multicast_loop; /* 1 => hear sends if a member */ 92df8bae1dSRodney W. Grimes u_short imo_num_memberships; /* no. memberships this socket */ 933548bfc9SBruce M Simpson u_short imo_max_memberships; /* max memberships this socket */ 943548bfc9SBruce M Simpson struct in_multi **imo_membership; /* group memberships */ 9571498f30SBruce M Simpson struct in_mfilter *imo_mfilters; /* source filters */ 96df8bae1dSRodney W. Grimes }; 97df8bae1dSRodney W. Grimes 98df8bae1dSRodney W. Grimes struct ipstat { 99df8bae1dSRodney W. Grimes u_long ips_total; /* total packets received */ 100df8bae1dSRodney W. Grimes u_long ips_badsum; /* checksum bad */ 101df8bae1dSRodney W. Grimes u_long ips_tooshort; /* packet too short */ 102df8bae1dSRodney W. Grimes u_long ips_toosmall; /* not enough data */ 103df8bae1dSRodney W. Grimes u_long ips_badhlen; /* ip header length < data size */ 104df8bae1dSRodney W. Grimes u_long ips_badlen; /* ip length < ip header length */ 105df8bae1dSRodney W. Grimes u_long ips_fragments; /* fragments received */ 106df8bae1dSRodney W. Grimes u_long ips_fragdropped; /* frags dropped (dups, out of space) */ 107df8bae1dSRodney W. Grimes u_long ips_fragtimeout; /* fragments timed out */ 108df8bae1dSRodney W. Grimes u_long ips_forward; /* packets forwarded */ 1091f91d8c5SDavid Greenman u_long ips_fastforward; /* packets fast forwarded */ 110df8bae1dSRodney W. Grimes u_long ips_cantforward; /* packets rcvd for unreachable dest */ 111df8bae1dSRodney W. Grimes u_long ips_redirectsent; /* packets forwarded on same net */ 112df8bae1dSRodney W. Grimes u_long ips_noproto; /* unknown or unsupported protocol */ 113df8bae1dSRodney W. Grimes u_long ips_delivered; /* datagrams delivered to upper level*/ 114df8bae1dSRodney W. Grimes u_long ips_localout; /* total ip packets generated here */ 115df8bae1dSRodney W. Grimes u_long ips_odropped; /* lost packets due to nobufs, etc. */ 116df8bae1dSRodney W. Grimes u_long ips_reassembled; /* total packets reassembled ok */ 1176c5e9bbdSMike Pritchard u_long ips_fragmented; /* datagrams successfully fragmented */ 118df8bae1dSRodney W. Grimes u_long ips_ofragments; /* output fragments created */ 119df8bae1dSRodney W. Grimes u_long ips_cantfrag; /* don't fragment flag was set, etc. */ 120df8bae1dSRodney W. Grimes u_long ips_badoptions; /* error in option processing */ 121df8bae1dSRodney W. Grimes u_long ips_noroute; /* packets discarded due to no route */ 122df8bae1dSRodney W. Grimes u_long ips_badvers; /* ip version != 4 */ 123df8bae1dSRodney W. Grimes u_long ips_rawout; /* total raw ip packets generated */ 124430d30d8SBill Fenner u_long ips_toolong; /* ip length > max ip packet size */ 12582c39223SGarrett Wollman u_long ips_notmember; /* multicasts for unregistered grps */ 12676429de4SYoshinobu Inoue u_long ips_nogif; /* no match gif found */ 12733841545SHajimu UMEMOTO u_long ips_badaddr; /* invalid address on header */ 128df8bae1dSRodney W. Grimes }; 129df8bae1dSRodney W. Grimes 130664a31e4SPeter Wemm #ifdef _KERNEL 1315914e1eaSBruce Evans 132eddfbb76SRobert Watson #include <net/vnet.h> 133eddfbb76SRobert Watson 134315e3e38SRobert Watson /* 135315e3e38SRobert Watson * In-kernel consumers can use these accessor macros directly to update 136315e3e38SRobert Watson * stats. 137315e3e38SRobert Watson */ 13886425c62SRobert Watson #define IPSTAT_ADD(name, val) V_ipstat.name += (val) 13986425c62SRobert Watson #define IPSTAT_SUB(name, val) V_ipstat.name -= (val) 14086425c62SRobert Watson #define IPSTAT_INC(name) IPSTAT_ADD(name, 1) 14186425c62SRobert Watson #define IPSTAT_DEC(name) IPSTAT_SUB(name, 1) 14286425c62SRobert Watson 143315e3e38SRobert Watson /* 144315e3e38SRobert Watson * Kernel module consumers must use this accessor macro. 145315e3e38SRobert Watson */ 146315e3e38SRobert Watson void kmod_ipstat_inc(int statnum); 147315e3e38SRobert Watson #define KMOD_IPSTAT_INC(name) \ 148315e3e38SRobert Watson kmod_ipstat_inc(offsetof(struct ipstat, name) / sizeof(u_long)) 149315e3e38SRobert Watson void kmod_ipstat_dec(int statnum); 150315e3e38SRobert Watson #define KMOD_IPSTAT_DEC(name) \ 151315e3e38SRobert Watson kmod_ipstat_dec(offsetof(struct ipstat, name) / sizeof(u_long)) 152315e3e38SRobert Watson 15371498f30SBruce M Simpson /* flags passed to ip_output as last parameter */ 15471498f30SBruce M Simpson #define IP_FORWARDING 0x1 /* most of ip header exists */ 15571498f30SBruce M Simpson #define IP_RAWOUTPUT 0x2 /* raw ip header exists */ 15671498f30SBruce M Simpson #define IP_SENDONES 0x4 /* send all-ones broadcast */ 15771498f30SBruce M Simpson #define IP_SENDTOIF 0x8 /* send on specific ifnet */ 158beaa515eSAndre Oppermann #define IP_ROUTETOIF SO_DONTROUTE /* 0x10 bypass routing tables */ 159beaa515eSAndre Oppermann #define IP_ALLOWBROADCAST SO_BROADCAST /* 0x20 can send broadcast packets */ 160df8bae1dSRodney W. Grimes 161beaa515eSAndre Oppermann /* 162beaa515eSAndre Oppermann * mbuf flag used by ip_fastfwd 163beaa515eSAndre Oppermann */ 164ac9d7e26SMax Laier #define M_FASTFWD_OURS M_PROTO1 /* changed dst to local */ 165ac9d7e26SMax Laier 1662fcb030aSAndrew Thompson #ifdef __NO_STRICT_ALIGNMENT 1672fcb030aSAndrew Thompson #define IP_HDR_ALIGNED_P(ip) 1 1682fcb030aSAndrew Thompson #else 1692fcb030aSAndrew Thompson #define IP_HDR_ALIGNED_P(ip) ((((intptr_t) (ip)) & 3) == 0) 1702fcb030aSAndrew Thompson #endif 1712fcb030aSAndrew Thompson 172cfe8b629SGarrett Wollman struct ip; 173ca5d5e73SBruce Evans struct inpcb; 1745e26bd9aSBruce Evans struct route; 175cfe8b629SGarrett Wollman struct sockopt; 1765e26bd9aSBruce Evans 177eddfbb76SRobert Watson VNET_DECLARE(struct ipstat, ipstat); 178eddfbb76SRobert Watson VNET_DECLARE(u_short, ip_id); /* ip packet ctr, for ids */ 179eddfbb76SRobert Watson VNET_DECLARE(int, ip_defttl); /* default IP ttl */ 180eddfbb76SRobert Watson VNET_DECLARE(int, ipforwarding); /* ip forwarding */ 181c76ff708SAndre Oppermann #ifdef IPSTEALTH 182eddfbb76SRobert Watson VNET_DECLARE(int, ipstealth); /* stealth forwarding */ 183c76ff708SAndre Oppermann #endif 184*82cea7e6SBjoern A. Zeeb extern u_char ip_protox[]; 185eddfbb76SRobert Watson VNET_DECLARE(struct socket *, ip_rsvpd); /* reservation protocol daemon*/ 186eddfbb76SRobert Watson VNET_DECLARE(struct socket *, ip_mrouter); /* multicast routing daemon */ 187*82cea7e6SBjoern A. Zeeb extern int (*legal_vif_num)(int); 188*82cea7e6SBjoern A. Zeeb extern u_long (*ip_mcast_src)(int); 189*82cea7e6SBjoern A. Zeeb VNET_DECLARE(int, rsvp_on); 190*82cea7e6SBjoern A. Zeeb extern struct pr_usrreqs rip_usrreqs; 191eddfbb76SRobert Watson 1921e77c105SRobert Watson #define V_ipstat VNET(ipstat) 1931e77c105SRobert Watson #define V_ip_id VNET(ip_id) 1941e77c105SRobert Watson #define V_ip_defttl VNET(ip_defttl) 1951e77c105SRobert Watson #define V_ipforwarding VNET(ipforwarding) 196eddfbb76SRobert Watson #ifdef IPSTEALTH 1971e77c105SRobert Watson #define V_ipstealth VNET(ipstealth) 198eddfbb76SRobert Watson #endif 1991e77c105SRobert Watson #define V_ip_rsvpd VNET(ip_rsvpd) 2001e77c105SRobert Watson #define V_ip_mrouter VNET(ip_mrouter) 201*82cea7e6SBjoern A. Zeeb #define V_rsvp_on VNET(rsvp_on) 202df8bae1dSRodney W. Grimes 20371498f30SBruce M Simpson void inp_freemoptions(struct ip_moptions *); 20471498f30SBruce M Simpson int inp_getmoptions(struct inpcb *, struct sockopt *); 20571498f30SBruce M Simpson int inp_setmoptions(struct inpcb *, struct sockopt *); 20671498f30SBruce M Simpson 2074d77a549SAlfred Perlstein int ip_ctloutput(struct socket *, struct sockopt *sopt); 2084d77a549SAlfred Perlstein void ip_drain(void); 2095f311da2SMike Silbersack void ip_fini(void *xtp); 2101e78ac21SJeffrey Hsu int ip_fragment(struct ip *ip, struct mbuf **m_frag, int mtu, 2111e78ac21SJeffrey Hsu u_long if_hwassist_flags, int sw_csum); 212ef39adf0SAndre Oppermann void ip_forward(struct mbuf *m, int srcrt); 2134d77a549SAlfred Perlstein void ip_init(void); 2149802380eSBjoern A. Zeeb #ifdef VIMAGE 2159802380eSBjoern A. Zeeb void ip_destroy(void); 2169802380eSBjoern A. Zeeb #endif 217beaa515eSAndre Oppermann extern int 218beaa515eSAndre Oppermann (*ip_mforward)(struct ip *, struct ifnet *, struct mbuf *, 2194d77a549SAlfred Perlstein struct ip_moptions *); 2204d77a549SAlfred Perlstein int ip_output(struct mbuf *, 2215d846453SSam Leffler struct mbuf *, struct route *, int, struct ip_moptions *, 2225d846453SSam Leffler struct inpcb *); 223de38924dSAndre Oppermann int ipproto_register(u_char); 224de38924dSAndre Oppermann int ipproto_unregister(u_char); 2259b932e9eSAndre Oppermann struct mbuf * 2269b932e9eSAndre Oppermann ip_reass(struct mbuf *); 227bd714208SRuslan Ermilov struct in_ifaddr * 2288b07e49aSJulian Elischer ip_rtaddr(struct in_addr, u_int fibnum); 2294d77a549SAlfred Perlstein void ip_savecontrol(struct inpcb *, struct mbuf **, struct ip *, 2304d77a549SAlfred Perlstein struct mbuf *); 2314d77a549SAlfred Perlstein void ip_slowtimo(void); 2321f44b0a1SDavid Malone u_int16_t ip_randomid(void); 2334d77a549SAlfred Perlstein int rip_ctloutput(struct socket *, struct sockopt *); 2344d77a549SAlfred Perlstein void rip_ctlinput(int, struct sockaddr *, void *); 2354d77a549SAlfred Perlstein void rip_init(void); 236bc29160dSMarko Zec #ifdef VIMAGE 237bc29160dSMarko Zec void rip_destroy(void); 238bc29160dSMarko Zec #endif 2394d77a549SAlfred Perlstein void rip_input(struct mbuf *, int); 2404d77a549SAlfred Perlstein int rip_output(struct mbuf *, struct socket *, u_long); 2414d77a549SAlfred Perlstein void ipip_input(struct mbuf *, int); 2424d77a549SAlfred Perlstein void rsvp_input(struct mbuf *, int); 2434d77a549SAlfred Perlstein int ip_rsvp_init(struct socket *); 2444d77a549SAlfred Perlstein int ip_rsvp_done(void); 245bbb4330bSLuigi Rizzo extern int (*ip_rsvp_vif)(struct socket *, struct sockopt *); 246bbb4330bSLuigi Rizzo extern void (*ip_rsvp_force_done)(struct socket *); 247bbb4330bSLuigi Rizzo extern void (*rsvp_input_p)(struct mbuf *m, int off); 248bbb4330bSLuigi Rizzo 2490b4b0b0fSJulian Elischer VNET_DECLARE(struct pfil_head, inet_pfil_hook); /* packet filter hooks */ 2500b4b0b0fSJulian Elischer #define V_inet_pfil_hook VNET(inet_pfil_hook) 251134ea224SSam Leffler 2521c238475SJonathan Lemon void in_delayed_cksum(struct mbuf *m); 2531c238475SJonathan Lemon 254b2019e17SLuigi Rizzo /* Hooks for ipfw, dummynet, divert etc. Most are declared in raw_ip.c */ 255b2019e17SLuigi Rizzo /* 256b2019e17SLuigi Rizzo * Reference to an ipfw or packet filter rule that can be carried 257b2019e17SLuigi Rizzo * outside critical sections. 258b2019e17SLuigi Rizzo * A rule is identified by rulenum:rule_id which is ordered. 259b2019e17SLuigi Rizzo * In version chain_id the rule can be found in slot 'slot', so 260b2019e17SLuigi Rizzo * we don't need a lookup if chain_id == chain->id. 261b2019e17SLuigi Rizzo * 262b2019e17SLuigi Rizzo * On exit from the firewall this structure refers to the rule after 263b2019e17SLuigi Rizzo * the matching one (slot points to the new rule; rulenum:rule_id-1 264b2019e17SLuigi Rizzo * is the matching rule), and additional info (e.g. info often contains 265b2019e17SLuigi Rizzo * the insn argument or tablearg in the low 16 bits, in host format). 266b2019e17SLuigi Rizzo * On entry, the structure is valid if slot>0, and refers to the starting 267b2019e17SLuigi Rizzo * rules. 'info' contains the reason for reinject, e.g. divert port, 268b2019e17SLuigi Rizzo * divert direction, and so on. 269b2019e17SLuigi Rizzo */ 270b2019e17SLuigi Rizzo struct ipfw_rule_ref { 271b2019e17SLuigi Rizzo uint32_t slot; /* slot for matching rule */ 272b2019e17SLuigi Rizzo uint32_t rulenum; /* matching rule number */ 273b2019e17SLuigi Rizzo uint32_t rule_id; /* matching rule id */ 274b2019e17SLuigi Rizzo uint32_t chain_id; /* ruleset id */ 275b2019e17SLuigi Rizzo uint32_t info; /* see below */ 276b2019e17SLuigi Rizzo }; 277b2019e17SLuigi Rizzo 278b2019e17SLuigi Rizzo enum { 279b2019e17SLuigi Rizzo IPFW_INFO_MASK = 0x0000ffff, 280b2019e17SLuigi Rizzo IPFW_INFO_OUT = 0x00000000, /* outgoing, just for convenience */ 281b2019e17SLuigi Rizzo IPFW_INFO_IN = 0x80000000, /* incoming, overloads dir */ 282b2019e17SLuigi Rizzo IPFW_ONEPASS = 0x40000000, /* One-pass, do not reinject */ 283b2019e17SLuigi Rizzo IPFW_IS_MASK = 0x30000000, /* which source ? */ 284b2019e17SLuigi Rizzo IPFW_IS_DIVERT = 0x20000000, 285b2019e17SLuigi Rizzo IPFW_IS_DUMMYNET =0x10000000, 286b2019e17SLuigi Rizzo IPFW_IS_PIPE = 0x08000000, /* pip1=1, queue = 0 */ 287b2019e17SLuigi Rizzo }; 288b2019e17SLuigi Rizzo #define MTAG_IPFW 1148380143 /* IPFW-tagged cookie */ 289b2019e17SLuigi Rizzo #define MTAG_IPFW_RULE 1262273568 /* rule reference */ 290b2019e17SLuigi Rizzo 291115a40c7SLuigi Rizzo struct ip_fw_args; 2920b4b0b0fSJulian Elischer typedef int (*ip_fw_chk_ptr_t)(struct ip_fw_args *args); 2930b4b0b0fSJulian Elischer typedef int (*ip_fw_ctl_ptr_t)(struct sockopt *); 2940b4b0b0fSJulian Elischer VNET_DECLARE(ip_fw_chk_ptr_t, ip_fw_chk_ptr); 2950b4b0b0fSJulian Elischer VNET_DECLARE(ip_fw_ctl_ptr_t, ip_fw_ctl_ptr); 2960b4b0b0fSJulian Elischer #define V_ip_fw_chk_ptr VNET(ip_fw_chk_ptr) 2970b4b0b0fSJulian Elischer #define V_ip_fw_ctl_ptr VNET(ip_fw_ctl_ptr) 2980b4b0b0fSJulian Elischer 299b2019e17SLuigi Rizzo /* Divert hooks. */ 300b2019e17SLuigi Rizzo extern void (*ip_divert_ptr)(struct mbuf *m, int incoming); 301b2019e17SLuigi Rizzo /* ng_ipfw hooks -- XXX make it the same as divert and dummynet */ 302b2019e17SLuigi Rizzo extern int (*ng_ipfw_input_p)(struct mbuf **, int, 303b2019e17SLuigi Rizzo struct ip_fw_args *, int); 304b2019e17SLuigi Rizzo 305115a40c7SLuigi Rizzo extern int (*ip_dn_ctl_ptr)(struct sockopt *); 306b2019e17SLuigi Rizzo extern int (*ip_dn_io_ptr)(struct mbuf **, int, struct ip_fw_args *); 307eddfbb76SRobert Watson 308eddfbb76SRobert Watson VNET_DECLARE(int, ip_do_randomid); 3091e77c105SRobert Watson #define V_ip_do_randomid VNET(ip_do_randomid) 310eddfbb76SRobert Watson #define ip_newid() ((V_ip_do_randomid != 0) ? ip_randomid() : \ 311eddfbb76SRobert Watson htons(V_ip_id++)) 312eddfbb76SRobert Watson 313664a31e4SPeter Wemm #endif /* _KERNEL */ 314707f139eSPaul Richards 3155914e1eaSBruce Evans #endif /* !_NETINET_IP_VAR_H_ */ 316