1 /* 2 * Copyright (c) 2008 The DragonFly Project. All rights reserved. 3 * 4 * This code is derived from software contributed to The DragonFly Project 5 * by Sepherosa Ziehau <sepherosa@gmail.com> 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in 15 * the documentation and/or other materials provided with the 16 * distribution. 17 * 3. Neither the name of The DragonFly Project nor the names of its 18 * contributors may be used to endorse or promote products derived 19 * from this software without specific, prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 22 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 23 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 24 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 25 * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 26 * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING, 27 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 28 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED 29 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 30 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT 31 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 * 34 * $DragonFly: src/sys/net/ipfw/ip_fw2_glue.c,v 1.3 2008/09/13 10:23:39 sephe Exp $ 35 */ 36 37 #include <sys/param.h> 38 #include <sys/socketvar.h> 39 40 #include <net/if.h> 41 #include <net/netisr2.h> 42 43 #include <netinet/in.h> 44 45 #include <net/ipfw/ip_fw2.h> 46 47 ip_fw_chk_t *ip_fw_chk_ptr; 48 ip_fw_dn_io_t *ip_fw_dn_io_ptr; 49 ip_fw_ctl_t *ip_fw_ctl_ptr; 50 int ip_fw_loaded; 51 int fw_enable = 1; 52 int fw_one_pass = 1; 53 54 int 55 ip_fw_sockopt(struct sockopt *sopt) 56 { 57 int error; 58 59 ASSERT_NETISR0; 60 61 /* 62 * Disallow modifications in really-really secure mode, but still allow 63 * the logging counters to be reset. 64 */ 65 if (sopt->sopt_name == IP_FW_ADD || 66 (sopt->sopt_dir == SOPT_SET && sopt->sopt_name != IP_FW_RESETLOG)) { 67 if (securelevel >= 3) 68 return EPERM; 69 } 70 if (IPFW_LOADED) 71 error = ip_fw_ctl_ptr(sopt); 72 else 73 error = ENOPROTOOPT; 74 return (error); 75 } 76