xref: /dragonfly/sys/netinet/in.h (revision 333227be)
1 /*
2  * Copyright (c) 1982, 1986, 1990, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. All advertising materials mentioning features or use of this software
14  *    must display the following acknowledgement:
15  *	This product includes software developed by the University of
16  *	California, Berkeley and its contributors.
17  * 4. Neither the name of the University nor the names of its contributors
18  *    may be used to endorse or promote products derived from this software
19  *    without specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  *
33  *	@(#)in.h	8.3 (Berkeley) 1/3/94
34  * $FreeBSD: src/sys/netinet/in.h,v 1.48.2.10 2003/08/24 08:24:38 hsu Exp $
35  * $DragonFly: src/sys/netinet/in.h,v 1.9 2004/09/19 22:32:48 joerg Exp $
36  */
37 
38 #ifndef _NETINET_IN_H_
39 #define _NETINET_IN_H_
40 
41 #ifndef _KERNEL
42 #include <machine/endian.h>
43 #ifndef htonl
44 #define	htonl(x)	__htonl(x)
45 #endif
46 #ifndef htons
47 #define	htons(x)	__htons(x)
48 #endif
49 #ifndef ntohl
50 #define	ntohl(x)	__ntohl(x)
51 #endif
52 #ifndef ntohs
53 #define	ntohs(x)	__ntohs(x)
54 #endif
55 #endif
56 
57 /*
58  * Constants and structures defined by the internet system,
59  * Per RFC 790, September 1981, and numerous additions.
60  */
61 
62 /*
63  * Protocols (RFC 1700)
64  */
65 #define	IPPROTO_IP		0		/* dummy for IP */
66 #define	IPPROTO_HOPOPTS		0		/* IP6 hop-by-hop options */
67 #define	IPPROTO_ICMP		1		/* control message protocol */
68 #define	IPPROTO_IGMP		2		/* group mgmt protocol */
69 #define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
70 #define IPPROTO_IPV4		4 		/* IPv4 encapsulation */
71 #define IPPROTO_IPIP		IPPROTO_IPV4	/* for compatibility */
72 #define	IPPROTO_TCP		6		/* tcp */
73 #define	IPPROTO_ST		7		/* Stream protocol II */
74 #define	IPPROTO_EGP		8		/* exterior gateway protocol */
75 #define	IPPROTO_PIGP		9		/* private interior gateway */
76 #define	IPPROTO_RCCMON		10		/* BBN RCC Monitoring */
77 #define	IPPROTO_NVPII		11		/* network voice protocol*/
78 #define	IPPROTO_PUP		12		/* pup */
79 #define	IPPROTO_ARGUS		13		/* Argus */
80 #define	IPPROTO_EMCON		14		/* EMCON */
81 #define	IPPROTO_XNET		15		/* Cross Net Debugger */
82 #define	IPPROTO_CHAOS		16		/* Chaos*/
83 #define	IPPROTO_UDP		17		/* user datagram protocol */
84 #define	IPPROTO_MUX		18		/* Multiplexing */
85 #define	IPPROTO_MEAS		19		/* DCN Measurement Subsystems */
86 #define	IPPROTO_HMP		20		/* Host Monitoring */
87 #define	IPPROTO_PRM		21		/* Packet Radio Measurement */
88 #define	IPPROTO_IDP		22		/* xns idp */
89 #define	IPPROTO_TRUNK1		23		/* Trunk-1 */
90 #define	IPPROTO_TRUNK2		24		/* Trunk-2 */
91 #define	IPPROTO_LEAF1		25		/* Leaf-1 */
92 #define	IPPROTO_LEAF2		26		/* Leaf-2 */
93 #define	IPPROTO_RDP		27		/* Reliable Data */
94 #define	IPPROTO_IRTP		28		/* Reliable Transaction */
95 #define	IPPROTO_TP		29 		/* tp-4 w/ class negotiation */
96 #define	IPPROTO_BLT		30		/* Bulk Data Transfer */
97 #define	IPPROTO_NSP		31		/* Network Services */
98 #define	IPPROTO_INP		32		/* Merit Internodal */
99 #define	IPPROTO_SEP		33		/* Sequential Exchange */
100 #define	IPPROTO_3PC		34		/* Third Party Connect */
101 #define	IPPROTO_IDPR		35		/* InterDomain Policy Routing */
102 #define	IPPROTO_XTP		36		/* XTP */
103 #define	IPPROTO_DDP		37		/* Datagram Delivery */
104 #define	IPPROTO_CMTP		38		/* Control Message Transport */
105 #define	IPPROTO_TPXX		39		/* TP++ Transport */
106 #define	IPPROTO_IL		40		/* IL transport protocol */
107 #define	IPPROTO_IPV6		41		/* IP6 header */
108 #define	IPPROTO_SDRP		42		/* Source Demand Routing */
109 #define	IPPROTO_ROUTING		43		/* IP6 routing header */
110 #define	IPPROTO_FRAGMENT	44		/* IP6 fragmentation header */
111 #define	IPPROTO_IDRP		45		/* InterDomain Routing*/
112 #define	IPPROTO_RSVP		46 		/* resource reservation */
113 #define	IPPROTO_GRE		47		/* General Routing Encap. */
114 #define	IPPROTO_MHRP		48		/* Mobile Host Routing */
115 #define	IPPROTO_BHA		49		/* BHA */
116 #define	IPPROTO_ESP		50		/* IP6 Encap Sec. Payload */
117 #define	IPPROTO_AH		51		/* IP6 Auth Header */
118 #define	IPPROTO_INLSP		52		/* Integ. Net Layer Security */
119 #define	IPPROTO_SWIPE		53		/* IP with encryption */
120 #define	IPPROTO_NHRP		54		/* Next Hop Resolution */
121 #define	IPPROTO_MOBILE		55		/* IP Mobility */
122 #define	IPPROTO_TLSP		56		/* Transport Layer Security */
123 #define	IPPROTO_SKIP		57		/* SKIP */
124 #define	IPPROTO_ICMPV6		58		/* ICMP6 */
125 #define	IPPROTO_NONE		59		/* IP6 no next header */
126 #define	IPPROTO_DSTOPTS		60		/* IP6 destination option */
127 #define	IPPROTO_AHIP		61		/* any host internal protocol */
128 #define	IPPROTO_CFTP		62		/* CFTP */
129 #define	IPPROTO_HELLO		63		/* "hello" routing protocol */
130 #define	IPPROTO_SATEXPAK	64		/* SATNET/Backroom EXPAK */
131 #define	IPPROTO_KRYPTOLAN	65		/* Kryptolan */
132 #define	IPPROTO_RVD		66		/* Remote Virtual Disk */
133 #define	IPPROTO_IPPC		67		/* Pluribus Packet Core */
134 #define	IPPROTO_ADFS		68		/* Any distributed FS */
135 #define	IPPROTO_SATMON		69		/* Satnet Monitoring */
136 #define	IPPROTO_VISA		70		/* VISA Protocol */
137 #define	IPPROTO_IPCV		71		/* Packet Core Utility */
138 #define	IPPROTO_CPNX		72		/* Comp. Prot. Net. Executive */
139 #define	IPPROTO_CPHB		73		/* Comp. Prot. HeartBeat */
140 #define	IPPROTO_WSN		74		/* Wang Span Network */
141 #define	IPPROTO_PVP		75		/* Packet Video Protocol */
142 #define	IPPROTO_BRSATMON	76		/* BackRoom SATNET Monitoring */
143 #define	IPPROTO_ND		77		/* Sun net disk proto (temp.) */
144 #define	IPPROTO_WBMON		78		/* WIDEBAND Monitoring */
145 #define	IPPROTO_WBEXPAK		79		/* WIDEBAND EXPAK */
146 #define	IPPROTO_EON		80		/* ISO cnlp */
147 #define	IPPROTO_VMTP		81		/* VMTP */
148 #define	IPPROTO_SVMTP		82		/* Secure VMTP */
149 #define	IPPROTO_VINES		83		/* Banyon VINES */
150 #define	IPPROTO_TTP		84		/* TTP */
151 #define	IPPROTO_IGP		85		/* NSFNET-IGP */
152 #define	IPPROTO_DGP		86		/* dissimilar gateway prot. */
153 #define	IPPROTO_TCF		87		/* TCF */
154 #define	IPPROTO_IGRP		88		/* Cisco/GXS IGRP */
155 #define	IPPROTO_OSPFIGP		89		/* OSPFIGP */
156 #define	IPPROTO_SRPC		90		/* Strite RPC protocol */
157 #define	IPPROTO_LARP		91		/* Locus Address Resoloution */
158 #define	IPPROTO_MTP		92		/* Multicast Transport */
159 #define	IPPROTO_AX25		93		/* AX.25 Frames */
160 #define	IPPROTO_IPEIP		94		/* IP encapsulated in IP */
161 #define	IPPROTO_MICP		95		/* Mobile Int.ing control */
162 #define	IPPROTO_SCCSP		96		/* Semaphore Comm. security */
163 #define	IPPROTO_ETHERIP		97		/* Ethernet IP encapsulation */
164 #define	IPPROTO_ENCAP		98		/* encapsulation header */
165 #define	IPPROTO_APES		99		/* any private encr. scheme */
166 #define	IPPROTO_GMTP		100		/* GMTP*/
167 #define	IPPROTO_IPCOMP		108		/* payload compression (IPComp) */
168 /* 101-254: Partly Unassigned */
169 #define	IPPROTO_PIM		103		/* Protocol Independent Mcast */
170 #define	IPPROTO_PGM		113		/* PGM */
171 #define	IPPROTO_PFSYNC          240             /* PFSYNC */
172 /* 255: Reserved */
173 /* BSD Private, local use, namespace incursion */
174 #define	IPPROTO_DIVERT		254		/* divert pseudo-protocol */
175 #define	IPPROTO_RAW		255		/* raw IP packet */
176 #define	IPPROTO_MAX		256
177 
178 /* last return value of *_input(), meaning "all job for this pkt is done".  */
179 #define	IPPROTO_DONE		257
180 
181 /*
182  * Local port number conventions:
183  *
184  * When a user does a bind(2) or connect(2) with a port number of zero,
185  * a non-conflicting local port address is chosen.
186  * The default range is IPPORT_RESERVED through
187  * IPPORT_USERRESERVED, although that is settable by sysctl.
188  *
189  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
190  * default assignment range.
191  *
192  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
193  *
194  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
195  * into the "high" range.  These are reserved for client outbound connections
196  * which do not want to be filtered by any firewalls.
197  *
198  * The value IP_PORTRANGE_LOW changes the range to the "low" are
199  * that is (by convention) restricted to privileged processes.  This
200  * convention is based on "vouchsafe" principles only.  It is only secure
201  * if you trust the remote host to restrict these ports.
202  *
203  * The default range of ports and the high range can be changed by
204  * sysctl(3).  (net.inet.ip.port{hi,low}{first,last}_auto)
205  *
206  * Changing those values has bad security implications if you are
207  * using a a stateless firewall that is allowing packets outside of that
208  * range in order to allow transparent outgoing connections.
209  *
210  * Such a firewall configuration will generally depend on the use of these
211  * default values.  If you change them, you may find your Security
212  * Administrator looking for you with a heavy object.
213  *
214  * For a slightly more orthodox text view on this:
215  *
216  *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
217  *
218  *    port numbers are divided into three ranges:
219  *
220  *                0 -  1023 Well Known Ports
221  *             1024 - 49151 Registered Ports
222  *            49152 - 65535 Dynamic and/or Private Ports
223  *
224  */
225 
226 /*
227  * Ports < IPPORT_RESERVED are reserved for
228  * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
229  * Ports > IPPORT_USERRESERVED are reserved
230  * for servers, not necessarily privileged.  (IP_PORTRANGE_DEFAULT)
231  */
232 #define	IPPORT_RESERVED		1024
233 #define	IPPORT_USERRESERVED	5000
234 
235 /*
236  * Default local port range to use by setting IP_PORTRANGE_HIGH
237  */
238 #define	IPPORT_HIFIRSTAUTO	49152
239 #define	IPPORT_HILASTAUTO	65535
240 
241 /*
242  * Scanning for a free reserved port return a value below IPPORT_RESERVED,
243  * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
244  * 512, but that conflicts with some well-known-services that firewalls may
245  * have a fit if we use.
246  */
247 #define IPPORT_RESERVEDSTART	600
248 
249 /*
250  * Internet address (a structure for historical reasons)
251  */
252 struct in_addr {
253 	in_addr_t s_addr;
254 };
255 
256 /*
257  * Definitions of bits in internet address integers.
258  * On subnets, the decomposition of addresses to host and net parts
259  * is done according to subnet mask, not the masks here.
260  */
261 #define	IN_CLASSA(i)		(((u_int32_t)(i) & 0x80000000) == 0)
262 #define	IN_CLASSA_NET		0xff000000
263 #define	IN_CLASSA_NSHIFT	24
264 #define	IN_CLASSA_HOST		0x00ffffff
265 #define	IN_CLASSA_MAX		128
266 
267 #define	IN_CLASSB(i)		(((u_int32_t)(i) & 0xc0000000) == 0x80000000)
268 #define	IN_CLASSB_NET		0xffff0000
269 #define	IN_CLASSB_NSHIFT	16
270 #define	IN_CLASSB_HOST		0x0000ffff
271 #define	IN_CLASSB_MAX		65536
272 
273 #define	IN_CLASSC(i)		(((u_int32_t)(i) & 0xe0000000) == 0xc0000000)
274 #define	IN_CLASSC_NET		0xffffff00
275 #define	IN_CLASSC_NSHIFT	8
276 #define	IN_CLASSC_HOST		0x000000ff
277 
278 #define	IN_CLASSD(i)		(((u_int32_t)(i) & 0xf0000000) == 0xe0000000)
279 #define	IN_CLASSD_NET		0xf0000000	/* These ones aren't really */
280 #define	IN_CLASSD_NSHIFT	28		/* net and host fields, but */
281 #define	IN_CLASSD_HOST		0x0fffffff	/* routing needn't know.    */
282 #define	IN_MULTICAST(i)		IN_CLASSD(i)
283 
284 #define	IN_EXPERIMENTAL(i)	(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
285 #define	IN_BADCLASS(i)		(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
286 
287 #define	INADDR_ANY		(u_int32_t)0x00000000
288 #define	INADDR_LOOPBACK		(u_int32_t)0x7f000001
289 #define	INADDR_BROADCAST	(u_int32_t)0xffffffff	/* must be masked */
290 #ifndef _KERNEL
291 #define	INADDR_NONE		0xffffffff		/* -1 return */
292 #endif
293 
294 #define	INADDR_UNSPEC_GROUP	(u_int32_t)0xe0000000	/* 224.0.0.0 */
295 #define	INADDR_ALLHOSTS_GROUP	(u_int32_t)0xe0000001	/* 224.0.0.1 */
296 #define	INADDR_ALLRTRS_GROUP	(u_int32_t)0xe0000002	/* 224.0.0.2 */
297 #define	INADDR_PFSYNC_GROUP	(u_int32_t)0xe00000f0	/* 224.0.0.240 */
298 #define	INADDR_MAX_LOCAL_GROUP	(u_int32_t)0xe00000ff	/* 224.0.0.255 */
299 
300 #define	IN_LOOPBACKNET		127			/* official! */
301 
302 /*
303  * Socket address, internet style.
304  */
305 struct sockaddr_in {
306 	u_char	sin_len;
307 	u_char	sin_family;
308 	u_short	sin_port;
309 	struct	in_addr sin_addr;
310 	char	sin_zero[8];
311 };
312 
313 #define	INET_ADDRSTRLEN                 16
314 
315 /*
316  * Options for use with [gs]etsockopt at the IP level.
317  * First word of comment is data type; bool is stored in int.
318  */
319 #define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
320 #define	IP_HDRINCL		2    /* int; header is included with data */
321 #define	IP_TOS			3    /* int; IP type of service and preced. */
322 #define	IP_TTL			4    /* int; IP time to live */
323 #define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
324 #define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
325 #define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
326 #define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
327 #define	IP_MULTICAST_IF		9    /* u_char; set/get IP multicast i/f  */
328 #define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
329 #define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
330 #define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
331 #define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
332 #define IP_MULTICAST_VIF	14   /* set/get IP mcast virt. iface */
333 #define IP_RSVP_ON		15   /* enable RSVP in kernel */
334 #define IP_RSVP_OFF		16   /* disable RSVP in kernel */
335 #define IP_RSVP_VIF_ON		17   /* set RSVP per-vif socket */
336 #define IP_RSVP_VIF_OFF		18   /* unset RSVP per-vif socket */
337 #define IP_PORTRANGE		19   /* int; range to choose for unspec port */
338 #define	IP_RECVIF		20   /* bool; receive reception if w/dgram */
339 /* for IPSEC */
340 #define	IP_IPSEC_POLICY		21   /* int; set/get security policy */
341 #define	IP_FAITH		22   /* bool; accept FAITH'ed connections */
342 
343 #define	IP_FW_ADD     		50   /* add a firewall rule to chain */
344 #define	IP_FW_DEL    		51   /* delete a firewall rule from chain */
345 #define	IP_FW_FLUSH   		52   /* flush firewall rule chain */
346 #define	IP_FW_ZERO    		53   /* clear single/all firewall counter(s) */
347 #define	IP_FW_GET     		54   /* get entire firewall rule chain */
348 #define	IP_FW_RESETLOG		55   /* reset logging counters */
349 
350 #define	IP_DUMMYNET_CONFIGURE	60   /* add/configure a dummynet pipe */
351 #define	IP_DUMMYNET_DEL		61   /* delete a dummynet pipe from chain */
352 #define	IP_DUMMYNET_FLUSH	62   /* flush dummynet */
353 #define	IP_DUMMYNET_GET		64   /* get entire dummynet pipes */
354 
355 /*
356  * Defaults and limits for options
357  */
358 #define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
359 #define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
360 #define	IP_MAX_MEMBERSHIPS	20	/* per socket */
361 
362 /*
363  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
364  */
365 struct ip_mreq {
366 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
367 	struct	in_addr imr_interface;	/* local IP address of interface */
368 };
369 
370 /*
371  * Argument for IP_PORTRANGE:
372  * - which range to search when port is unspecified at bind() or connect()
373  */
374 #define	IP_PORTRANGE_DEFAULT	0	/* default range */
375 #define	IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
376 #define	IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
377 
378 /*
379  * Definitions for inet sysctl operations.
380  *
381  * Third level is protocol number.
382  * Fourth level is desired variable within that protocol.
383  */
384 #define	IPPROTO_MAXID	(IPPROTO_AH + 1)	/* don't list to IPPROTO_MAX */
385 
386 #define	CTL_IPPROTO_NAMES { \
387 	{ "ip", CTLTYPE_NODE }, \
388 	{ "icmp", CTLTYPE_NODE }, \
389 	{ "igmp", CTLTYPE_NODE }, \
390 	{ "ggp", CTLTYPE_NODE }, \
391 	{ 0, 0 }, \
392 	{ 0, 0 }, \
393 	{ "tcp", CTLTYPE_NODE }, \
394 	{ 0, 0 }, \
395 	{ "egp", CTLTYPE_NODE }, \
396 	{ 0, 0 }, \
397 	{ 0, 0 }, \
398 	{ 0, 0 }, \
399 	{ "pup", CTLTYPE_NODE }, \
400 	{ 0, 0 }, \
401 	{ 0, 0 }, \
402 	{ 0, 0 }, \
403 	{ 0, 0 }, \
404 	{ "udp", CTLTYPE_NODE }, \
405 	{ 0, 0 }, \
406 	{ 0, 0 }, \
407 	{ 0, 0 }, \
408 	{ 0, 0 }, \
409 	{ "idp", CTLTYPE_NODE }, \
410 	{ 0, 0 }, \
411 	{ 0, 0 }, \
412 	{ 0, 0 }, \
413 	{ 0, 0 }, \
414 	{ 0, 0 }, \
415 	{ 0, 0 }, \
416 	{ 0, 0 }, \
417 	{ 0, 0 }, \
418 	{ 0, 0 }, \
419 	{ 0, 0 }, \
420 	{ 0, 0 }, \
421 	{ 0, 0 }, \
422 	{ 0, 0 }, \
423 	{ 0, 0 }, \
424 	{ 0, 0 }, \
425 	{ 0, 0 }, \
426 	{ 0, 0 }, \
427 	{ 0, 0 }, \
428 	{ 0, 0 }, \
429 	{ 0, 0 }, \
430 	{ 0, 0 }, \
431 	{ 0, 0 }, \
432 	{ 0, 0 }, \
433 	{ 0, 0 }, \
434 	{ 0, 0 }, \
435 	{ 0, 0 }, \
436 	{ 0, 0 }, \
437 	{ 0, 0 }, \
438 	{ "ipsec", CTLTYPE_NODE }, \
439 	{ 0, 0 }, \
440 	{ 0, 0 }, \
441 	{ 0, 0 }, \
442 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
443 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
444 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
445 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
446 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
447 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
448 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
449 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
450 	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
451 	{ 0, 0 }, \
452 	{ 0, 0 }, \
453 	{ 0, 0 }, \
454 	{ "pim", CTLTYPE_NODE }, \
455 }
456 
457 /*
458  * Names for IP sysctl objects
459  */
460 #define	IPCTL_FORWARDING	1	/* act as router */
461 #define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
462 #define	IPCTL_DEFTTL		3	/* default TTL */
463 #ifdef notyet
464 #define	IPCTL_DEFMTU		4	/* default MTU */
465 #endif
466 #define IPCTL_RTEXPIRE		5	/* cloned route expiration time */
467 #define IPCTL_RTMINEXPIRE	6	/* min value for expiration time */
468 #define IPCTL_RTMAXCACHE	7	/* trigger level for dynamic expire */
469 #define	IPCTL_SOURCEROUTE	8	/* may perform source routes */
470 #define	IPCTL_DIRECTEDBROADCAST	9	/* may re-broadcast received packets */
471 #define IPCTL_INTRQMAXLEN	10	/* max length of netisr queue */
472 #define	IPCTL_INTRQDROPS	11	/* number of netisr q drops */
473 #define	IPCTL_STATS		12	/* ipstat structure */
474 #define	IPCTL_ACCEPTSOURCEROUTE	13	/* may accept source routed packets */
475 #define	IPCTL_FASTFORWARDING	14	/* use fast IP forwarding code */
476 #define	IPCTL_KEEPFAITH		15	/* FAITH IPv4->IPv6 translater ctl */
477 #define	IPCTL_GIF_TTL		16	/* default TTL for gif encap packet */
478 #define	IPCTL_MAXID		17
479 
480 #define	IPCTL_NAMES { \
481 	{ 0, 0 }, \
482 	{ "forwarding", CTLTYPE_INT }, \
483 	{ "redirect", CTLTYPE_INT }, \
484 	{ "ttl", CTLTYPE_INT }, \
485 	{ "mtu", CTLTYPE_INT }, \
486 	{ "rtexpire", CTLTYPE_INT }, \
487 	{ "rtminexpire", CTLTYPE_INT }, \
488 	{ "rtmaxcache", CTLTYPE_INT }, \
489 	{ "sourceroute", CTLTYPE_INT }, \
490  	{ "directed-broadcast", CTLTYPE_INT }, \
491 	{ "intr-queue-maxlen", CTLTYPE_INT }, \
492 	{ "intr-queue-drops", CTLTYPE_INT }, \
493 	{ "stats", CTLTYPE_STRUCT }, \
494 	{ "accept_sourceroute", CTLTYPE_INT }, \
495 	{ "fastforwarding", CTLTYPE_INT }, \
496 }
497 
498 #ifdef _KERNEL
499 struct ifnet; struct mbuf;	/* forward declarations for Standard C */
500 #endif
501 
502 /* INET6 stuff */
503 #define	__KAME_NETINET_IN_H_INCLUDED_
504 #include <netinet6/in6.h>
505 #undef __KAME_NETINET_IN_H_INCLUDED_
506 
507 #ifdef _KERNEL
508 
509 struct thread;
510 
511 int	 in_broadcast (struct in_addr, struct ifnet *);
512 int	 in_canforward (struct in_addr);
513 int	 in_localaddr (struct in_addr);
514 char 	*inet_ntoa (struct in_addr); /* in libkern */
515 
516 int	prison_ip (struct thread *td, int flag, u_int32_t *ip);
517 void	prison_remote_ip (struct thread *td, int flag, u_int32_t *ip);
518 
519 #define in_hosteq(s, t)	((s).s_addr == (t).s_addr)
520 #define in_nullhost(x)	((x).s_addr == INADDR_ANY)
521 
522 #define satosin(sa)	((struct sockaddr_in *)(sa))
523 #define sintosa(sin)	((struct sockaddr *)(sin))
524 #define ifatoia(ifa)	((struct in_ifaddr *)(ifa))
525 
526 #endif
527 
528 #endif
529