d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Send a ICMP unreachable instead of dropping the packet silent, if we

Browse Source 
receive a packet not for us, and forwarding disabled.

PR:		kern/24512
Reviewed by:	jlemon
Approved by:	jlemon
This commit is contained in:
Jesper Skriver 2001-02-20 21:31:47 +00:00
parent c2221099a9
commit 2b18d82220
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sys/netinet/ip_input.c
View File

@ -124,6 +124,10 @@ SYSCTL_INT(_net_inet_ip, IPCTL_KEEPFAITH, keepfaith, CTLFLAG_RW,
&ip_keepfaith, 0,
"Enable packet capture for FAITH IPv4->IPv6 translater daemon");
int ip_send_unreach = 1;
SYSCTL_INT(_net_inet_ip, OID_AUTO, send_unreach, CTLFLAG_RW, &ip_send_unreach,
0, "Send ICMP unreach when packet not for us rx, and forwarding disabled");
#ifdef DIAGNOSTIC
static int ipprintfs = 0;
#endif
@ -585,7 +589,14 @@ pass:
*/
if (ipforwarding == 0) {
ipstat.ips_cantforward++;
m_freem(m);
/*
* If we receive a packet not for us, and forwarding disabled
* send a ICMP host unreachable back to the source.
*/
if (ip_send_unreach)
icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_HOST, 0, 0);
else
m_freem(m);
} else
ip_forward(m, 0);
#ifdef IPFIREWALL_FORWARD