diff options
| author | ru <ru@FreeBSD.org> | 2002-02-15 12:19:03 +0000 |
|---|---|---|
| committer | ru <ru@FreeBSD.org> | 2002-02-15 12:19:03 +0000 |
| commit | d2e47c3d2006c8116a8ebd273027328f483be987 (patch) | |
| tree | 495372083c97edd4ee857fe355fcb4061e771e62 /sys/netinet | |
| parent | 3247dc600ab4860773721fb11083dff5a5da82d4 (diff) | |
| download | FreeBSD-src-d2e47c3d2006c8116a8ebd273027328f483be987.zip FreeBSD-src-d2e47c3d2006c8116a8ebd273027328f483be987.tar.gz | |
Moved the 127/8 check below so that IPF redirects have a chance of working.
MFC after: 1 day
Diffstat (limited to 'sys/netinet')
| -rw-r--r-- | sys/netinet/ip_output.c | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/sys/netinet/ip_output.c b/sys/netinet/ip_output.c index 1b9c28d..aab04c9 100644 --- a/sys/netinet/ip_output.c +++ b/sys/netinet/ip_output.c @@ -426,16 +426,6 @@ ip_output(m0, opt, ro, flags, imo) goto bad; } - /* 127/8 must not appear on wire - RFC1122. */ - if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || - (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) { - if ((ifp->if_flags & IFF_LOOPBACK) == 0) { - ipstat.ips_badaddr++; - error = EADDRNOTAVAIL; - goto bad; - } - } - /* * Look for broadcast address and * verify user is allowed to send @@ -823,6 +813,16 @@ skip_ipsec: ip_fw_fwd_addr = NULL; pass: + /* 127/8 must not appear on wire - RFC1122. */ + if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || + (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) { + if ((ifp->if_flags & IFF_LOOPBACK) == 0) { + ipstat.ips_badaddr++; + error = EADDRNOTAVAIL; + goto bad; + } + } + m->m_pkthdr.csum_flags |= CSUM_IP; sw_csum = m->m_pkthdr.csum_flags & ~ifp->if_hwassist; if (sw_csum & CSUM_DELAY_DATA) { |
