diff options
author | mav <mav@FreeBSD.org> | 2009-01-20 22:26:09 +0000 |
---|---|---|
committer | mav <mav@FreeBSD.org> | 2009-01-20 22:26:09 +0000 |
commit | 6191153d9526b39f7145a66956b7e5ecc329ef83 (patch) | |
tree | 7cb1bb23448b9cf474c0ee12f64ee7538de87870 /sys/netgraph/ng_iface.h | |
parent | 3fd09aadc79eb9fe325206d1a974db2562d32578 (diff) | |
download | FreeBSD-src-6191153d9526b39f7145a66956b7e5ecc329ef83.zip FreeBSD-src-6191153d9526b39f7145a66956b7e5ecc329ef83.tar.gz |
Check for infinite recursion possible on some broken PPTP/L2TP/... VPN setups.
Mark packets with mbuf_tag on first interface passage and drop on second.
PR: ports/129625, ports/125303,
MFC after: 2 weeks
Diffstat (limited to 'sys/netgraph/ng_iface.h')
-rw-r--r-- | sys/netgraph/ng_iface.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/netgraph/ng_iface.h b/sys/netgraph/ng_iface.h index 54dfa8c..58fb442 100644 --- a/sys/netgraph/ng_iface.h +++ b/sys/netgraph/ng_iface.h @@ -72,4 +72,7 @@ enum { NGM_IFACE_GET_IFINDEX, }; +#define MTAG_NGIF NGM_IFACE_COOKIE +#define MTAG_NGIF_CALLED 0 | MTAG_PERSISTENT + #endif /* _NETGRAPH_NG_IFACE_H_ */ |