From 51c8ec4a3d2dba85e0295052e470fc7cd7530446 Mon Sep 17 00:00:00 2001 From: Ruslan Ermilov Date: Fri, 15 Feb 2002 12:19:03 +0000 Subject: [PATCH] Moved the 127/8 check below so that IPF redirects have a chance of working. MFC after: 1 day --- sys/netinet/ip_output.c | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/sys/netinet/ip_output.c b/sys/netinet/ip_output.c index 1b9c28d6d60d..aab04c935849 100644 --- a/sys/netinet/ip_output.c +++ b/sys/netinet/ip_output.c @@ -426,16 +426,6 @@ ip_output(m0, opt, ro, flags, imo) goto bad; } - /* 127/8 must not appear on wire - RFC1122. */ - if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || - (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) { - if ((ifp->if_flags & IFF_LOOPBACK) == 0) { - ipstat.ips_badaddr++; - error = EADDRNOTAVAIL; - goto bad; - } - } - /* * Look for broadcast address and * verify user is allowed to send @@ -823,6 +813,16 @@ skip_ipsec: ip_fw_fwd_addr = NULL; pass: + /* 127/8 must not appear on wire - RFC1122. */ + if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || + (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) { + if ((ifp->if_flags & IFF_LOOPBACK) == 0) { + ipstat.ips_badaddr++; + error = EADDRNOTAVAIL; + goto bad; + } + } + m->m_pkthdr.csum_flags |= CSUM_IP; sw_csum = m->m_pkthdr.csum_flags & ~ifp->if_hwassist; if (sw_csum & CSUM_DELAY_DATA) {