summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
diff options
context:
space:
mode:
authormaxim <maxim@FreeBSD.org>2002-12-24 13:45:24 +0000
committermaxim <maxim@FreeBSD.org>2002-12-24 13:45:24 +0000
commitaa1de6479fe7e33be998a7186b8847bb0a9f9425 (patch)
tree8f2ef9a01a0a1d62c80be624da8f68cc7d269a95 /sys/netinet/ip_fw2.c
parent4979ab8d816b8ab1d2eb74e7179f8f63e04f0972 (diff)
downloadFreeBSD-src-aa1de6479fe7e33be998a7186b8847bb0a9f9425.zip
FreeBSD-src-aa1de6479fe7e33be998a7186b8847bb0a9f9425.tar.gz
o De-anonymity dummynet(4) and ipfw(4) messages, prepend them
by 'dummynet: ' and 'ipfw: ' prefixes. PR: kern/41609
Diffstat (limited to 'sys/netinet/ip_fw2.c')
-rw-r--r--sys/netinet/ip_fw2.c31
1 files changed, 16 insertions, 15 deletions
diff --git a/sys/netinet/ip_fw2.c b/sys/netinet/ip_fw2.c
index 433cb9e..1e2b84e 100644
--- a/sys/netinet/ip_fw2.c
+++ b/sys/netinet/ip_fw2.c
@@ -622,7 +622,7 @@ hash_packet(struct ipfw_flow_id *id)
/* remove a refcount to the parent */ \
if (q->dyn_type == O_LIMIT) \
q->parent->count--; \
- DEB(printf("-- unlink entry 0x%08x %d -> 0x%08x %d, %d left\n", \
+ DEB(printf("ipfw: unlink entry 0x%08x %d -> 0x%08x %d, %d left\n",\
(q->id.src_ip), (q->id.src_port), \
(q->id.dst_ip), (q->id.dst_port), dyn_count-1 ); ) \
if (prev != NULL) \
@@ -688,7 +688,7 @@ next_pass:
goto next;
if (FORCE && q->count != 0 ) {
/* XXX should not happen! */
- printf( "OUCH! cannot remove rule,"
+ printf("ipfw: OUCH! cannot remove rule,"
" count %d\n", q->count);
}
} else {
@@ -883,7 +883,7 @@ add_dyn_rule(struct ipfw_flow_id *id, u_int8_t dyn_type, struct ip_fw *rule)
r = malloc(sizeof *r, M_IPFW, M_NOWAIT | M_ZERO);
if (r == NULL) {
- printf ("sorry cannot allocate state\n");
+ printf ("ipfw: sorry cannot allocate state\n");
return NULL;
}
@@ -908,7 +908,7 @@ add_dyn_rule(struct ipfw_flow_id *id, u_int8_t dyn_type, struct ip_fw *rule)
r->next = ipfw_dyn_v[i];
ipfw_dyn_v[i] = r;
dyn_count++;
- DEB(printf("-- add dyn entry ty %d 0x%08x %d -> 0x%08x %d, total %d\n",
+ DEB(printf("ipfw: add dyn entry ty %d 0x%08x %d -> 0x%08x %d, total %d\n",
dyn_type,
(r->id.src_ip), (r->id.src_port),
(r->id.dst_ip), (r->id.dst_port),
@@ -937,7 +937,7 @@ lookup_dyn_parent(struct ipfw_flow_id *pkt, struct ip_fw *rule)
pkt->src_port == q->id.src_port &&
pkt->dst_port == q->id.dst_port) {
q->expire = time_second + dyn_short_lifetime;
- DEB(printf("lookup_dyn_parent found 0x%p\n",q);)
+ DEB(printf("ipfw: lookup_dyn_parent found 0x%p\n",q);)
return q;
}
}
@@ -958,7 +958,7 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
ipfw_dyn_rule *q;
- DEB(printf("-- install state type %d 0x%08x %u -> 0x%08x %u\n",
+ DEB(printf("ipfw: install state type %d 0x%08x %u -> 0x%08x %u\n",
cmd->o.opcode,
(args->f_id.src_ip), (args->f_id.src_port),
(args->f_id.dst_ip), (args->f_id.dst_port) );)
@@ -968,7 +968,7 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
if (q != NULL) { /* should never occur */
if (last_log != time_second) {
last_log = time_second;
- printf(" install_state: entry already present, done\n");
+ printf("ipfw: install_state: entry already present, done\n");
}
return 0;
}
@@ -982,7 +982,7 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
if (dyn_count >= dyn_max) {
if (last_log != time_second) {
last_log = time_second;
- printf("install_state: Too many dynamic rules\n");
+ printf("ipfw: install_state: Too many dynamic rules\n");
}
return 1; /* cannot install, notify caller */
}
@@ -998,7 +998,8 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
struct ipfw_flow_id id;
ipfw_dyn_rule *parent;
- DEB(printf("installing dyn-limit rule %d\n", cmd->conn_limit);)
+ DEB(printf("ipfw: installing dyn-limit rule %d\n",
+ cmd->conn_limit);)
id.dst_ip = id.src_ip = 0;
id.dst_port = id.src_port = 0;
@@ -1014,7 +1015,7 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
id.dst_port = args->f_id.dst_port;
parent = lookup_dyn_parent(&id, rule);
if (parent == NULL) {
- printf("add parent failed\n");
+ printf("ipfw: add parent failed\n");
return 1;
}
if (parent->count >= cmd->conn_limit) {
@@ -1035,7 +1036,7 @@ install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
}
break;
default:
- printf("unknown dynamic rule type %u\n", cmd->o.opcode);
+ printf("ipfw: unknown dynamic rule type %u\n", cmd->o.opcode);
return 1;
}
lookup_dyn_rule(&args->f_id, NULL, NULL); /* XXX just set lifetime */
@@ -1914,7 +1915,7 @@ check_body:
next_rule:; /* try next rule */
} /* end of outer for, scan rules */
- printf("+++ ipfw: ouch!, skip past end of rules, denying packet\n");
+ printf("ipfw: ouch!, skip past end of rules, denying packet\n");
return(IP_FW_PORT_DENY_FLAG);
done:
@@ -1926,7 +1927,7 @@ done:
pullup_failed:
if (fw_verbose)
- printf("pullup failed\n");
+ printf("ipfw: pullup failed\n");
return(IP_FW_PORT_DENY_FLAG);
}
@@ -2041,7 +2042,7 @@ done:
static_count++;
static_len += l;
splx(s);
- DEB(printf("++ installed rule %d, static count now %d\n",
+ DEB(printf("ipfw: installed rule %d, static count now %d\n",
rule->rulenum, static_count);)
return (0);
}
@@ -2609,7 +2610,7 @@ ipfw_ctl(struct sockopt *sopt)
break;
default:
- printf("ipfw_ctl invalid option %d\n", sopt->sopt_name);
+ printf("ipfw: ipfw_ctl invalid option %d\n", sopt->sopt_name);
error = EINVAL;
}
OpenPOWER on IntegriCloud