diff options
| author | phk <phk@FreeBSD.org> | 1996-04-03 13:52:20 +0000 |
|---|---|---|
| committer | phk <phk@FreeBSD.org> | 1996-04-03 13:52:20 +0000 |
| commit | 8a4381b139489559851a24f7e7088354b0acf624 (patch) | |
| tree | 483ce3e46ff56905fdb02eea47e8607647309f56 /sys/netinet/ip_output.c | |
| parent | 1ed2b37fd0916198236f3d291a834deea1779c2f (diff) | |
| download | FreeBSD-src-8a4381b139489559851a24f7e7088354b0acf624.zip FreeBSD-src-8a4381b139489559851a24f7e7088354b0acf624.tar.gz | |
Add feature for tcp "established".
Change interface between netinet and ip_fw to be more general, and thus
hopefully also support other ip filtering implementations.
Diffstat (limited to 'sys/netinet/ip_output.c')
| -rw-r--r-- | sys/netinet/ip_output.c | 14 |
1 files changed, 6 insertions, 8 deletions
diff --git a/sys/netinet/ip_output.c b/sys/netinet/ip_output.c index 617fd5e..628921a 100644 --- a/sys/netinet/ip_output.c +++ b/sys/netinet/ip_output.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)ip_output.c 8.3 (Berkeley) 1/21/94 - * $Id: ip_output.c,v 1.32 1996/03/13 08:02:43 pst Exp $ + * $Id: ip_output.c,v 1.33 1996/03/26 18:56:51 fenner Exp $ */ #include <sys/param.h> @@ -54,8 +54,6 @@ #include <netinet/in_var.h> #include <netinet/ip_var.h> -#include <netinet/ip_fw.h> - #ifdef vax #include <machine/mtpr.h> #endif @@ -86,10 +84,10 @@ ip_output(m0, opt, ro, flags, imo) int flags; struct ip_moptions *imo; { - register struct ip *ip, *mhip; - register struct ifnet *ifp; - register struct mbuf *m = m0; - register int hlen = sizeof (struct ip); + struct ip *ip, *mhip; + struct ifnet *ifp; + struct mbuf *m = m0; + int hlen = sizeof (struct ip); int len, off, error = 0; /* * It might seem obvious at first glance that one could easily @@ -339,7 +337,7 @@ sendit: /* * Check with the firewall... */ - if (!(*ip_fw_chk_ptr)(m,ip,ifp,1)) { + if (ip_fw_chk_ptr && !(*ip_fw_chk_ptr)(&ip, hlen, ifp, 1, &m)) { error = EACCES; goto done; } |
