d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

When not acting as a router (ipforwarding=0), silently discard source

Browse Source 
routed packets that aren't destined for us, as required by RFC-1122.
PR: 7191
This commit is contained in:
David Greenman 1998-07-08 08:49:51 +00:00
parent 90163a9b33
commit 0af8d3ec72
1 changed files with 21 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
sys/netinet/ip_input.c
View File

@ -31,7 +31,7 @@
* SUCH DAMAGE.
*
* @(#)ip_input.c 8.2 (Berkeley) 1/4/94
* $Id: ip_input.c,v 1.94 1998/07/06 09:06:58 julian Exp $
* $Id: ip_input.c,v 1.95 1998/07/06 09:10:56 julian Exp $
* $ANA: ip_input.c,v 1.5 1996/09/18 14:34:59 wollman Exp $
*/
@ -1029,16 +1029,27 @@ ip_dooptions(m)
}
if (!ip_dosourceroute) {
char buf[4*sizeof "123"];
if (ipforwarding) {
char buf[16]; /* aaa.bbb.ccc.ddd\0 */
/*
* Acting as a router, so generate ICMP
*/
nosourcerouting:
strcpy(buf, inet_ntoa(ip->ip_dst));
log(LOG_WARNING,
"attempted source route from %s to %s\n",
inet_ntoa(ip->ip_src), buf);
type = ICMP_UNREACH;
code = ICMP_UNREACH_SRCFAIL;
goto bad;
strcpy(buf, inet_ntoa(ip->ip_dst));
log(LOG_WARNING,
"attempted source route from %s to %s\n",
inet_ntoa(ip->ip_src), buf);
type = ICMP_UNREACH;
code = ICMP_UNREACH_SRCFAIL;
goto bad;
} else {
/*
* Not acting as a router, so silently drop.
*/
ipstat.ips_cantforward++;
m_freem(m);
return (1);
}
}
/*