Andrey V. Elsukov ad9f4d6ab6 ip[6]_tryforward does inbound and outbound packet firewall processing. ...

This can lead to change of mbuf pointer (packet filter could do m_pullup(),
NAT, etc). Also in case of change of destination address, tryforward can
decide that packet should be handled by local system. In this case modified
mbuf can be returned to the ip[6]_input(). To handle this correctly, check
M_FASTFWD_OURS flag after return from ip[6]_tryforward. And if it is present,
update variables that depend from mbuf pointer and skip another inbound
firewall processing.

No objection from:	#network
MFC after:	3 weeks
Sponsored by:	Yandex LLC
Differential Revision:	https://reviews.freebsd.org/D8764

2016-12-19 11:02:49 +00:00

..

dest6.c

…

frag6.c

…

icmp6.c

Make ICMPv6 hard error handling for TCP consistent with the ICMPv4

2016-10-21 10:32:57 +00:00

icmp6.h

…

in6_cksum.c

…

in6_fib.c

…

in6_fib.h

…

in6_gif.c

…

in6_ifattach.c

Lock the ND prefix list and add refcounting for prefixes.

2016-10-07 21:10:53 +00:00

in6_ifattach.h

…

in6_jail.c

…

in6_mcast.c

…

in6_pcb.c

…

in6_pcb.h

…

in6_pcbgroup.c

…

in6_proto.c

…

in6_rmx.c

…

in6_rss.c

…

in6_rss.h

…

in6_src.c

…

in6_var.h

Add ip6_tryforward() - a run to completion forwarding implementation

2016-12-12 10:57:32 +00:00

in6.c

Lock the ND prefix list and add refcounting for prefixes.

2016-10-07 21:10:53 +00:00

in6.h

…

ip6_ecn.h

…

ip6_fastfwd.c

Add ip6_tryforward() - a run to completion forwarding implementation

2016-12-12 10:57:32 +00:00

ip6_forward.c

Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.

2016-09-15 07:41:48 +00:00

ip6_gre.c

…

ip6_id.c

…

ip6_input.c

ip[6]_tryforward does inbound and outbound packet firewall processing.

2016-12-19 11:02:49 +00:00

ip6_ipsec.c

…

ip6_ipsec.h

…

ip6_mroute.c

Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.

2016-09-15 07:41:48 +00:00

ip6_mroute.h

…

ip6_output.c

Limit the number of mbufs that can be allocated for IPV6_2292PKTOPTIONS

2016-10-17 23:25:31 +00:00

ip6_var.h

…

ip6.h

…

ip6protosw.h

…

ip_fw_nat64.h

…

ip_fw_nptv6.h

…

mld6_var.h

…

mld6.c

…

mld6.h

…

nd6_nbr.c

nd6_dad_timer(): don't assert that the address is tentative.

2016-10-01 01:30:34 +00:00

nd6_rtr.c

Lock the ND prefix list and add refcounting for prefixes.

2016-10-07 21:10:53 +00:00

nd6.c

Lock the ND prefix list and add refcounting for prefixes.

2016-10-07 21:10:53 +00:00

nd6.h

Lock the ND prefix list and add refcounting for prefixes.

2016-10-07 21:10:53 +00:00

pim6_var.h

…

pim6.h

…

raw_ip6.c

Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.

2016-09-15 07:41:48 +00:00

raw_ip6.h

…

route6.c

…

scope6_var.h

…

scope6.c

…

sctp6_usrreq.c

Whitespace changes.

2016-12-06 10:21:25 +00:00

sctp6_var.h

Whitespace changes.

2016-12-06 10:21:25 +00:00

send.c

…

send.h

…

tcp6_var.h

…

udp6_usrreq.c

Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.

2016-09-15 07:41:48 +00:00

udp6_var.h

…