1 /* $FreeBSD$ */ 2 /* $KAME: in6_proto.c,v 1.91 2001/05/27 13:28:35 itojun Exp $ */ 3 4 /* 5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 3. Neither the name of the project nor the names of its contributors 17 * may be used to endorse or promote products derived from this software 18 * without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 * SUCH DAMAGE. 31 */ 32 33 /* 34 * Copyright (c) 1982, 1986, 1993 35 * The Regents of the University of California. All rights reserved. 36 * 37 * Redistribution and use in source and binary forms, with or without 38 * modification, are permitted provided that the following conditions 39 * are met: 40 * 1. Redistributions of source code must retain the above copyright 41 * notice, this list of conditions and the following disclaimer. 42 * 2. Redistributions in binary form must reproduce the above copyright 43 * notice, this list of conditions and the following disclaimer in the 44 * documentation and/or other materials provided with the distribution. 45 * 4. Neither the name of the University nor the names of its contributors 46 * may be used to endorse or promote products derived from this software 47 * without specific prior written permission. 48 * 49 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 50 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 51 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 52 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 53 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 54 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 55 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 56 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 57 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 58 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 59 * SUCH DAMAGE. 60 * 61 * @(#)in_proto.c 8.1 (Berkeley) 6/10/93 62 */ 63 64 #include "opt_inet.h" 65 #include "opt_inet6.h" 66 #include "opt_ipsec.h" 67 #include "opt_random_ip_id.h" 68 69 #include <sys/param.h> 70 #include <sys/socket.h> 71 #include <sys/socketvar.h> 72 #include <sys/protosw.h> 73 #include <sys/kernel.h> 74 #include <sys/domain.h> 75 #include <sys/mbuf.h> 76 #include <sys/systm.h> 77 #include <sys/sysctl.h> 78 79 #include <net/if.h> 80 #include <net/radix.h> 81 #include <net/route.h> 82 83 #include <netinet/in.h> 84 #include <netinet/in_systm.h> 85 #include <netinet/in_var.h> 86 #include <netinet/ip_encap.h> 87 #include <netinet/ip.h> 88 #include <netinet/ip_var.h> 89 #include <netinet/ip6.h> 90 #include <netinet6/ip6_var.h> 91 #include <netinet/icmp6.h> 92 93 #include <netinet/tcp.h> 94 #include <netinet/tcp_timer.h> 95 #include <netinet/tcp_var.h> 96 #include <netinet/udp.h> 97 #include <netinet/udp_var.h> 98 #include <netinet6/tcp6_var.h> 99 #include <netinet6/raw_ip6.h> 100 #include <netinet6/udp6_var.h> 101 #include <netinet6/pim6_var.h> 102 #include <netinet6/nd6.h> 103 #include <netinet6/in6_prefix.h> 104 105 #ifdef IPSEC 106 #include <netinet6/ipsec.h> 107 #ifdef INET6 108 #include <netinet6/ipsec6.h> 109 #endif 110 #include <netinet6/ah.h> 111 #ifdef INET6 112 #include <netinet6/ah6.h> 113 #endif 114 #ifdef IPSEC_ESP 115 #include <netinet6/esp.h> 116 #ifdef INET6 117 #include <netinet6/esp6.h> 118 #endif 119 #endif 120 #include <netinet6/ipcomp.h> 121 #ifdef INET6 122 #include <netinet6/ipcomp6.h> 123 #endif 124 #endif /* IPSEC */ 125 126 #ifdef FAST_IPSEC 127 #include <netipsec/ipsec6.h> 128 #define IPSEC 129 #define IPSEC_ESP 130 #define ah6_input ipsec6_common_input 131 #define esp6_input ipsec6_common_input 132 #define ipcomp6_input ipsec6_common_input 133 #endif /* FAST_IPSEC */ 134 135 #include <netinet6/ip6protosw.h> 136 137 #include <net/net_osdep.h> 138 139 /* 140 * TCP/IP protocol family: IP6, ICMP6, UDP, TCP. 141 */ 142 143 extern struct domain inet6domain; 144 static struct pr_usrreqs nousrreqs; 145 146 #define PR_LISTEN 0 147 #define PR_ABRTACPTDIS 0 148 149 struct ip6protosw inet6sw[] = { 150 { 0, &inet6domain, IPPROTO_IPV6, 0, 151 0, 0, 0, 0, 152 0, 153 ip6_init, 0, frag6_slowtimo, frag6_drain, 154 &nousrreqs, 155 }, 156 { SOCK_DGRAM, &inet6domain, IPPROTO_UDP, PR_ATOMIC|PR_ADDR, 157 udp6_input, 0, udp6_ctlinput, ip6_ctloutput, 158 0, 159 0, 0, 0, 0, 160 &udp6_usrreqs, 161 }, 162 { SOCK_STREAM, &inet6domain, IPPROTO_TCP, PR_CONNREQUIRED|PR_WANTRCVD|PR_LISTEN, 163 tcp6_input, 0, tcp6_ctlinput, tcp_ctloutput, 164 0, 165 #ifdef INET /* don't call initialization and timeout routines twice */ 166 0, 0, 0, tcp_drain, 167 #else 168 tcp_init, tcp_fasttimo, tcp_slowtimo, tcp_drain, 169 #endif 170 &tcp6_usrreqs, 171 }, 172 { SOCK_RAW, &inet6domain, IPPROTO_RAW, PR_ATOMIC|PR_ADDR, 173 rip6_input, rip6_output, rip6_ctlinput, rip6_ctloutput, 174 0, 175 0, 0, 0, 0, 176 &rip6_usrreqs 177 }, 178 { SOCK_RAW, &inet6domain, IPPROTO_ICMPV6, PR_ATOMIC|PR_ADDR|PR_LASTHDR, 179 icmp6_input, rip6_output, rip6_ctlinput, rip6_ctloutput, 180 0, 181 icmp6_init, icmp6_fasttimo, 0, 0, 182 &rip6_usrreqs 183 }, 184 { SOCK_RAW, &inet6domain, IPPROTO_DSTOPTS,PR_ATOMIC|PR_ADDR, 185 dest6_input, 0, 0, 0, 186 0, 187 0, 0, 0, 0, 188 &nousrreqs 189 }, 190 { SOCK_RAW, &inet6domain, IPPROTO_ROUTING,PR_ATOMIC|PR_ADDR, 191 route6_input, 0, 0, 0, 192 0, 193 0, 0, 0, 0, 194 &nousrreqs 195 }, 196 { SOCK_RAW, &inet6domain, IPPROTO_FRAGMENT,PR_ATOMIC|PR_ADDR, 197 frag6_input, 0, 0, 0, 198 0, 199 0, 0, 0, 0, 200 &nousrreqs 201 }, 202 #ifdef IPSEC 203 { SOCK_RAW, &inet6domain, IPPROTO_AH, PR_ATOMIC|PR_ADDR, 204 ah6_input, 0, 0, 0, 205 0, 206 0, 0, 0, 0, 207 &nousrreqs, 208 }, 209 #ifdef IPSEC_ESP 210 { SOCK_RAW, &inet6domain, IPPROTO_ESP, PR_ATOMIC|PR_ADDR, 211 esp6_input, 0, 212 esp6_ctlinput, 213 0, 214 0, 215 0, 0, 0, 0, 216 &nousrreqs, 217 }, 218 #endif 219 { SOCK_RAW, &inet6domain, IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR, 220 ipcomp6_input, 0, 0, 0, 221 0, 222 0, 0, 0, 0, 223 &nousrreqs, 224 }, 225 #endif /* IPSEC */ 226 #ifdef INET 227 { SOCK_RAW, &inet6domain, IPPROTO_IPV4, PR_ATOMIC|PR_ADDR|PR_LASTHDR, 228 encap6_input, rip6_output, 0, rip6_ctloutput, 229 0, 230 encap_init, 0, 0, 0, 231 &rip6_usrreqs 232 }, 233 #endif /* INET */ 234 { SOCK_RAW, &inet6domain, IPPROTO_IPV6, PR_ATOMIC|PR_ADDR|PR_LASTHDR, 235 encap6_input, rip6_output, 0, rip6_ctloutput, 236 0, 237 encap_init, 0, 0, 0, 238 &rip6_usrreqs 239 }, 240 { SOCK_RAW, &inet6domain, IPPROTO_PIM, PR_ATOMIC|PR_ADDR|PR_LASTHDR, 241 pim6_input, rip6_output, 0, rip6_ctloutput, 242 0, 243 0, 0, 0, 0, 244 &rip6_usrreqs 245 }, 246 /* raw wildcard */ 247 { SOCK_RAW, &inet6domain, 0, PR_ATOMIC|PR_ADDR, 248 rip6_input, rip6_output, 0, rip6_ctloutput, 249 0, 250 0, 0, 0, 0, 251 &rip6_usrreqs 252 }, 253 }; 254 255 extern int in6_inithead __P((void **, int)); 256 257 struct domain inet6domain = 258 { AF_INET6, "internet6", 0, 0, 0, 259 (struct protosw *)inet6sw, 260 (struct protosw *)&inet6sw[sizeof(inet6sw)/sizeof(inet6sw[0])], 0, 261 in6_inithead, 262 offsetof(struct sockaddr_in6, sin6_addr) << 3, 263 sizeof(struct sockaddr_in6), 264 in6_domifattach, in6_domifdetach, }; 265 266 DOMAIN_SET(inet6); 267 268 /* 269 * Internet configuration info 270 */ 271 #ifndef IPV6FORWARDING 272 #ifdef GATEWAY6 273 #define IPV6FORWARDING 1 /* forward IP6 packets not for us */ 274 #else 275 #define IPV6FORWARDING 0 /* don't forward IP6 packets not for us */ 276 #endif /* GATEWAY6 */ 277 #endif /* !IPV6FORWARDING */ 278 279 #ifndef IPV6_SENDREDIRECTS 280 #define IPV6_SENDREDIRECTS 1 281 #endif 282 283 int ip6_forwarding = IPV6FORWARDING; /* act as router? */ 284 int ip6_sendredirects = IPV6_SENDREDIRECTS; 285 int ip6_defhlim = IPV6_DEFHLIM; 286 int ip6_defmcasthlim = IPV6_DEFAULT_MULTICAST_HOPS; 287 int ip6_accept_rtadv = 0; /* "IPV6FORWARDING ? 0 : 1" is dangerous */ 288 int ip6_maxfragpackets; /* initialized in frag6.c:frag6_init() */ 289 int ip6_maxfrags; /* initialized in frag6.c:frag6_init() */ 290 int ip6_log_interval = 5; 291 int ip6_hdrnestlimit = 50; /* appropriate? */ 292 int ip6_dad_count = 1; /* DupAddrDetectionTransmits */ 293 #ifndef RANDOM_IP_ID 294 u_int32_t ip6_flow_seq; 295 #endif 296 int ip6_auto_flowlabel = 1; 297 int ip6_gif_hlim = 0; 298 int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */ 299 int ip6_rr_prune = 5; /* router renumbering prefix 300 * walk list every 5 sec. */ 301 int ip6_v6only = 1; 302 303 #ifndef RANDOM_IP_ID 304 u_int32_t ip6_id = 0UL; 305 #endif 306 int ip6_keepfaith = 0; 307 time_t ip6_log_time = (time_t)0L; 308 309 /* icmp6 */ 310 /* 311 * BSDI4 defines these variables in in_proto.c... 312 * XXX: what if we don't define INET? Should we define pmtu6_expire 313 * or so? (jinmei@kame.net 19990310) 314 */ 315 int pmtu_expire = 60*10; 316 int pmtu_probe = 60*2; 317 318 /* raw IP6 parameters */ 319 /* 320 * Nominal space allocated to a raw ip socket. 321 */ 322 #define RIPV6SNDQ 8192 323 #define RIPV6RCVQ 8192 324 325 u_long rip6_sendspace = RIPV6SNDQ; 326 u_long rip6_recvspace = RIPV6RCVQ; 327 328 /* ICMPV6 parameters */ 329 int icmp6_rediraccept = 1; /* accept and process redirects */ 330 int icmp6_redirtimeout = 10 * 60; /* 10 minutes */ 331 int icmp6errppslim = 100; /* 100pps */ 332 int icmp6_nodeinfo = 3; /* enable/disable NI response */ 333 334 /* UDP on IP6 parameters */ 335 int udp6_sendspace = 9216; /* really max datagram size */ 336 int udp6_recvspace = 40 * (1024 + sizeof(struct sockaddr_in6)); 337 /* 40 1K datagrams */ 338 339 /* 340 * sysctl related items. 341 */ 342 SYSCTL_NODE(_net, PF_INET6, inet6, CTLFLAG_RW, 0, 343 "Internet6 Family"); 344 345 /* net.inet6 */ 346 SYSCTL_NODE(_net_inet6, IPPROTO_IPV6, ip6, CTLFLAG_RW, 0, "IP6"); 347 SYSCTL_NODE(_net_inet6, IPPROTO_ICMPV6, icmp6, CTLFLAG_RW, 0, "ICMP6"); 348 SYSCTL_NODE(_net_inet6, IPPROTO_UDP, udp6, CTLFLAG_RW, 0, "UDP6"); 349 SYSCTL_NODE(_net_inet6, IPPROTO_TCP, tcp6, CTLFLAG_RW, 0, "TCP6"); 350 #ifdef IPSEC 351 SYSCTL_NODE(_net_inet6, IPPROTO_ESP, ipsec6, CTLFLAG_RW, 0, "IPSEC6"); 352 #endif /* IPSEC */ 353 354 /* net.inet6.ip6 */ 355 static int 356 sysctl_ip6_temppltime(SYSCTL_HANDLER_ARGS) 357 { 358 int error = 0; 359 int old; 360 361 error = SYSCTL_OUT(req, arg1, sizeof(int)); 362 if (error || !req->newptr) 363 return (error); 364 old = ip6_temp_preferred_lifetime; 365 error = SYSCTL_IN(req, arg1, sizeof(int)); 366 if (ip6_temp_preferred_lifetime < 367 ip6_desync_factor + ip6_temp_regen_advance) { 368 ip6_temp_preferred_lifetime = old; 369 return (EINVAL); 370 } 371 return (error); 372 } 373 374 static int 375 sysctl_ip6_tempvltime(SYSCTL_HANDLER_ARGS) 376 { 377 int error = 0; 378 int old; 379 380 error = SYSCTL_OUT(req, arg1, sizeof(int)); 381 if (error || !req->newptr) 382 return (error); 383 old = ip6_temp_valid_lifetime; 384 error = SYSCTL_IN(req, arg1, sizeof(int)); 385 if (ip6_temp_valid_lifetime < ip6_temp_preferred_lifetime) { 386 ip6_temp_preferred_lifetime = old; 387 return (EINVAL); 388 } 389 return (error); 390 } 391 392 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_FORWARDING, 393 forwarding, CTLFLAG_RW, &ip6_forwarding, 0, ""); 394 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_SENDREDIRECTS, 395 redirect, CTLFLAG_RW, &ip6_sendredirects, 0, ""); 396 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFHLIM, 397 hlim, CTLFLAG_RW, &ip6_defhlim, 0, ""); 398 SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_STATS, stats, CTLFLAG_RD, 399 &ip6stat, ip6stat, ""); 400 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGPACKETS, 401 maxfragpackets, CTLFLAG_RW, &ip6_maxfragpackets, 0, ""); 402 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_ACCEPT_RTADV, 403 accept_rtadv, CTLFLAG_RW, &ip6_accept_rtadv, 0, ""); 404 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_KEEPFAITH, 405 keepfaith, CTLFLAG_RW, &ip6_keepfaith, 0, ""); 406 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_LOG_INTERVAL, 407 log_interval, CTLFLAG_RW, &ip6_log_interval, 0, ""); 408 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_HDRNESTLIMIT, 409 hdrnestlimit, CTLFLAG_RW, &ip6_hdrnestlimit, 0, ""); 410 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DAD_COUNT, 411 dad_count, CTLFLAG_RW, &ip6_dad_count, 0, ""); 412 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_FLOWLABEL, 413 auto_flowlabel, CTLFLAG_RW, &ip6_auto_flowlabel, 0, ""); 414 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFMCASTHLIM, 415 defmcasthlim, CTLFLAG_RW, &ip6_defmcasthlim, 0, ""); 416 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_GIF_HLIM, 417 gifhlim, CTLFLAG_RW, &ip6_gif_hlim, 0, ""); 418 SYSCTL_STRING(_net_inet6_ip6, IPV6CTL_KAME_VERSION, 419 kame_version, CTLFLAG_RD, __KAME_VERSION, 0, ""); 420 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USE_DEPRECATED, 421 use_deprecated, CTLFLAG_RW, &ip6_use_deprecated, 0, ""); 422 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_RR_PRUNE, 423 rr_prune, CTLFLAG_RW, &ip6_rr_prune, 0, ""); 424 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USETEMPADDR, 425 use_tempaddr, CTLFLAG_RW, &ip6_use_tempaddr, 0, ""); 426 SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPPLTIME, temppltime, 427 CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_preferred_lifetime, 0, 428 sysctl_ip6_temppltime, "I", ""); 429 SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPVLTIME, tempvltime, 430 CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_valid_lifetime, 0, 431 sysctl_ip6_tempvltime, "I", ""); 432 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_V6ONLY, 433 v6only, CTLFLAG_RW, &ip6_v6only, 0, ""); 434 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_LINKLOCAL, 435 auto_linklocal, CTLFLAG_RW, &ip6_auto_linklocal, 0, ""); 436 SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_RIP6STATS, rip6stats, CTLFLAG_RD, 437 &rip6stat, rip6stat, ""); 438 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_PREFER_TEMPADDR, 439 prefer_tempaddr, CTLFLAG_RW, &ip6_prefer_tempaddr, 0, ""); 440 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGS, 441 maxfrags, CTLFLAG_RW, &ip6_maxfrags, 0, ""); 442 443 /* net.inet6.icmp6 */ 444 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRACCEPT, 445 rediraccept, CTLFLAG_RW, &icmp6_rediraccept, 0, ""); 446 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRTIMEOUT, 447 redirtimeout, CTLFLAG_RW, &icmp6_redirtimeout, 0, ""); 448 SYSCTL_STRUCT(_net_inet6_icmp6, ICMPV6CTL_STATS, stats, CTLFLAG_RD, 449 &icmp6stat, icmp6stat, ""); 450 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PRUNE, 451 nd6_prune, CTLFLAG_RW, &nd6_prune, 0, ""); 452 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DELAY, 453 nd6_delay, CTLFLAG_RW, &nd6_delay, 0, ""); 454 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_UMAXTRIES, 455 nd6_umaxtries, CTLFLAG_RW, &nd6_umaxtries, 0, ""); 456 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MMAXTRIES, 457 nd6_mmaxtries, CTLFLAG_RW, &nd6_mmaxtries, 0, ""); 458 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_USELOOPBACK, 459 nd6_useloopback, CTLFLAG_RW, &nd6_useloopback, 0, ""); 460 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_NODEINFO, 461 nodeinfo, CTLFLAG_RW, &icmp6_nodeinfo, 0, ""); 462 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ERRPPSLIMIT, 463 errppslimit, CTLFLAG_RW, &icmp6errppslim, 0, ""); 464 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MAXNUDHINT, 465 nd6_maxnudhint, CTLFLAG_RW, &nd6_maxnudhint, 0, ""); 466 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DEBUG, 467 nd6_debug, CTLFLAG_RW, &nd6_debug, 0, ""); 468