1 /*
2  * Copyright (C) 1993-2001, 2003 by Darren Reed.
3  *
4  * See the IPFILTER.LICENCE file for details on licencing.
5  *
6  * @(#)ip_compat.h	1.8 1/14/96
7  * $Id: ip_compat.h,v 2.142.2.30 2005/08/11 15:13:49 darrenr Exp $
8  *
9  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
10  * Use is subject to license terms.
11  */
12 
13 #ifndef	__IP_COMPAT_H__
14 #define	__IP_COMPAT_H__
15 
16 #ifndef	__P
17 # ifdef	__STDC__
18 #  define	__P(x)  x
19 # else
20 #  define	__P(x)  ()
21 # endif
22 #endif
23 #ifndef	__STDC__
24 # undef		const
25 # define	const
26 #endif
27 
28 #if defined(_KERNEL) || defined(KERNEL) || defined(__KERNEL__)
29 # undef	KERNEL
30 # undef	_KERNEL
31 # undef 	__KERNEL__
32 # define	KERNEL
33 # define	_KERNEL
34 # define 	__KERNEL__
35 #endif
36 
37 #ifndef	SOLARIS
38 #define	SOLARIS	(defined(sun) && (defined(__svr4__) || defined(__SVR4)))
39 #endif
40 #if SOLARIS2 >= 8
41 # ifndef	USE_INET6
42 #  define	USE_INET6
43 # endif
44 #endif
45 #if defined(__FreeBSD_version) && (__FreeBSD_version >= 400000) && \
46     !defined(_KERNEL) && !defined(USE_INET6) && !defined(NOINET6)
47 # define	USE_INET6
48 #endif
49 #if defined(__NetBSD_Version__) && (__NetBSD_Version__ >= 105000000) && \
50     !defined(_KERNEL) && !defined(USE_INET6)
51 # define	USE_INET6
52 # define	IPFILTER_M_IPFILTER
53 #endif
54 #if defined(OpenBSD) && (OpenBSD >= 200206) && \
55     !defined(_KERNEL) && !defined(USE_INET6)
56 # define	USE_INET6
57 #endif
58 #if defined(__osf__)
59 # define	USE_INET6
60 #endif
61 #if defined(linux) && (!defined(_KERNEL) || defined(CONFIG_IPV6))
62 # define	USE_INET6
63 #endif
64 #if defined(HPUXREV) && (HPUXREV >= 1111)
65 # define	USE_INET6
66 #endif
67 
68 #if defined(BSD) && (BSD < 199103) && defined(__osf__)
69 # undef BSD
70 # define BSD 199103
71 #endif
72 
73 #if defined(__SVR4) || defined(__svr4__) || defined(__sgi)
74 # define index   strchr
75 # if !defined(_KERNEL)
76 #  define	bzero(a,b)	memset(a,0,b)
77 #  define	bcmp		memcmp
78 #  define	bcopy(a,b,c)	memmove(b,a,c)
79 # endif
80 #endif
81 
82 #ifndef LIFNAMSIZ
83 # ifdef IF_NAMESIZE
84 #  define	LIFNAMSIZ	IF_NAMESIZE
85 # else
86 #  ifdef	IFNAMSIZ
87 #   define	LIFNAMSIZ	IFNAMSIZ
88 #  else
89 #   define	LIFNAMSIZ	16
90 #  endif
91 # endif
92 #endif
93 
94 #if defined(__sgi) || defined(bsdi) || defined(__hpux) || defined(hpux)
95 struct  ether_addr {
96         u_char  ether_addr_octet[6];
97 };
98 #endif
99 
100 #if defined(__sgi) && !defined(IPFILTER_LKM)
101 # ifdef __STDC__
102 #  define IPL_EXTERN(ep) ipfilter##ep
103 # else
104 #  define IPL_EXTERN(ep) ipfilter/**/ep
105 # endif
106 #else
107 # ifdef __STDC__
108 #  define IPL_EXTERN(ep) ipl##ep
109 # else
110 #  define IPL_EXTERN(ep) ipl/**/ep
111 # endif
112 #endif
113 
114 /*
115  * This is a workaround for <sys/uio.h> troubles on FreeBSD and OpenBSD.
116  */
117 #ifndef linux
118 # ifndef _KERNEL
119 #  define ADD_KERNEL
120 #  define _KERNEL
121 #  define KERNEL
122 # endif
123 # ifdef __OpenBSD__
124 struct file;
125 # endif
126 # include <sys/uio.h>
127 # ifdef ADD_KERNEL
128 #  undef _KERNEL
129 #  undef KERNEL
130 # endif
131 #endif
132 
133 
134 /* ----------------------------------------------------------------------- */
135 /*                                  S O L A R I S                          */
136 /* ----------------------------------------------------------------------- */
137 #ifdef SOLARIS
138 # define	MENTAT	1
139 # include	<sys/cmn_err.h>
140 # include	<sys/isa_defs.h>
141 # include	<sys/stream.h>
142 # include	<sys/ioccom.h>
143 # include	<sys/sysmacros.h>
144 # include	<sys/kmem.h>
145 # if SOLARIS2 >= 10
146 #  include	<sys/procset.h>
147 #  include	<sys/proc.h>
148 #  include	<sys/devops.h>
149 #  include	<sys/ddi_impldefs.h>
150 #  include	<sys/neti.h>
151 # endif
152 
153 /*
154  * inet/ip.h would end up including radix.h with _KERNEL, which is not
155  * what the tools intend, so include radix.h first.
156  */
157 #if SOLARIS2 > 10
158 # include <net/radix.h>
159 #endif
160 /*
161  * because Solaris 2 defines these in two places :-/
162  */
163 # ifndef	KERNEL
164 #  define	ADD_KERNEL
165 #  define	_KERNEL
166 #  undef	RES_INIT
167 # endif /* _KERNEL */
168 
169 # if SOLARIS2 >= 8
170 #  include <netinet/ip6.h>
171 #  include <netinet/icmp6.h>
172 # endif
173 
174 # include <inet/common.h>
175 /* These 5 are defined in <inet/ip.h> and <netinet/ip.h> */
176 # undef	IPOPT_EOL
177 # undef	IPOPT_NOP
178 # undef	IPOPT_LSRR
179 # undef	IPOPT_RR
180 # undef	IPOPT_SSRR
181 # ifdef i386
182 #  define _SYS_PROMIF_H
183 # endif
184 # ifdef ADD_KERNEL
185 #  undef _KERNEL
186 # endif
187 # include <inet/ip.h>
188 # undef COPYOUT
189 # include <inet/ip_ire.h>
190 # ifndef	KERNEL
191 #  undef	_KERNEL
192 # endif
193 # if SOLARIS2 >= 8
194 #  define SNPRINTF	snprintf
195 
196 #  include <inet/ip_if.h>
197 #  define	ipif_local_addr	ipif_lcl_addr
198 /* Only defined in private include file */
199 #  ifndef	V4_PART_OF_V6
200 #   define	V4_PART_OF_V6(v6)	v6.s6_addr32[3]
201 #  endif
202 struct ip6_ext {
203 	u_char	ip6e_nxt;
204 	u_char	ip6e_len;
205 };
206 # endif /* SOLARIS2 >= 8 */
207 
208 # ifdef FW_HOOKS
209 
210 #  define	SOLARIS_PFHOOKS	1
211 
212 typedef	struct	qpktinfo	{
213 	/* data that changes per-packet */
214 	void		*qpi_ill;	/* COPIED */
215 	mblk_t		*qpi_m;
216 	void		*qpi_data;	/* where layer 3 header starts */
217 	size_t		qpi_off;
218 	int		qpi_flags;	/* Uses FI_* flags */
219 } qpktinfo_t;
220 
221 extern void mb_copydata __P((mblk_t *, size_t , size_t, char *));
222 extern void mb_copyback __P((mblk_t *, size_t , size_t, char *));
223 # endif
224 
225 # if SOLARIS2 >= 6
226 #  include <sys/atomic.h>
227 typedef	uint32_t	u_32_t;
228 # else
229 typedef unsigned int	u_32_t;
230 # endif
231 # define	U_32_T	1
232 
233 # ifdef _KERNEL
234 #  define	KRWLOCK_T		krwlock_t
235 #  define	KMUTEX_T		kmutex_t
236 #  if SOLARIS2 >= 10
237 #   include <sys/sdt.h>
238 
239 #   define IPF_IS_LOOPBACK(f)	((f) & FI_NOCKSUM)
240 #  endif /* SOLARIS2 >= 10 */
241 #  if SOLARIS2 >= 6
242 #   if SOLARIS2 == 6
243 #    define	ATOMIC_INCL(x)		atomic_inc_ulong((uint32_t *)&(x))
244 #    define	ATOMIC_DECL(x)		atomic_dec_ulong((uint32_t *)&(x))
245 #   else
246 #    define	ATOMIC_INCL(x)		atomic_inc_ulong(&(x))
247 #    define	ATOMIC_DECL(x)		atomic_dec_ulong(&(x))
248 #   endif /* SOLARIS2 == 6 */
249 #   define	ATOMIC_INC64(x)		atomic_inc_64((uint64_t *)&(x))
250 #   define	ATOMIC_INC32(x)		atomic_inc_32((uint32_t *)&(x))
251 #   define	ATOMIC_INC16(x)		atomic_inc_16((uint16_t *)&(x))
252 #   define	ATOMIC_DEC64(x)		atomic_dec_64((uint64_t *)&(x))
253 #   define	ATOMIC_DEC32(x)		atomic_dec_32((uint32_t *)&(x))
254 #   define	ATOMIC_DEC16(x)		atomic_dec_16((uint16_t *)&(x))
255 #  else
256 #   define	ATOMIC_INC(x)		{ mutex_enter(&ipf_rw); (x)++; \
257 					  mutex_exit(&ipf_rw); }
258 #   define	ATOMIC_DEC(x)		{ mutex_enter(&ipf_rw); (x)--; \
259 					  mutex_exit(&ipf_rw); }
260 #  endif /* SOLARIS2 >= 6 */
261 #  define	USE_MUTEXES
262 #  define	MUTEX_ENTER(x)		mutex_enter(&(x)->ipf_lk)
263 #  define	READ_ENTER(x)		rw_enter(&(x)->ipf_lk, RW_READER)
264 #  define	WRITE_ENTER(x)		rw_enter(&(x)->ipf_lk, RW_WRITER)
265 #  define	MUTEX_DOWNGRADE(x)	rw_downgrade(&(x)->ipf_lk)
266 #  define	RWLOCK_INIT(x, y)	rw_init(&(x)->ipf_lk, (y),  \
267 						RW_DRIVER, NULL)
268 #  define	RWLOCK_EXIT(x)		rw_exit(&(x)->ipf_lk)
269 #  define	RW_DESTROY(x)		rw_destroy(&(x)->ipf_lk)
270 #  define	MUTEX_INIT(x, y)	mutex_init(&(x)->ipf_lk, (y), \
271 						   MUTEX_DRIVER, NULL)
272 #  define	MUTEX_DESTROY(x)	mutex_destroy(&(x)->ipf_lk)
273 #  define	MUTEX_NUKE(x)		bzero((x), sizeof(*(x)))
274 #  define	MUTEX_EXIT(x)		mutex_exit(&(x)->ipf_lk)
275 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
276 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
277 #  define	BCOPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
278 #  define	BCOPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
279 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a,b,c,d)
280 #  define	KFREE(x)	kmem_free((char *)(x), sizeof(*(x)))
281 #  define	KFREES(x,s)	kmem_free((char *)(x), (s))
282 #  define	SPL_NET(x)	;
283 #  define	SPL_IMP(x)	;
284 #  undef	SPL_X
285 #  define	SPL_X(x)	;
286 #  ifdef sparc
287 #   define	ntohs(x)	(x)
288 #   define	ntohl(x)	(x)
289 #   define	htons(x)	(x)
290 #   define	htonl(x)	(x)
291 #  endif /* sparc */
292 #  define	KMALLOC(a,b)	(a) = (b)kmem_alloc(sizeof(*(a)), KM_NOSLEEP)
293 #  define	KMALLOCS(a,b,c)	(a) = (b)kmem_alloc((c), KM_NOSLEEP)
294 #  define	GET_MINOR(x)	getminor(x)
295 /*extern	phy_if_t	get_unit __P((char *, int, ipf_stack_t *));*/
296 #  define	GETIFP(n, v, ifs)	(void *)get_unit(n, v, ifs)
297 #  define	IFNAME(x)	((ill_t *)x)->ill_name
298 #  define	COPYIFNAME(x, b, v)	(void) net_getifname(((v) == 4) ? \
299 					ifs->ifs_ipf_ipv4 : ifs->ifs_ipf_ipv6,\
300 					(phy_if_t)(x), (b), sizeof(b))
301 #  define	GETKTIME(x)	uniqtime((struct timeval *)x)
302 #  define	MSGDSIZE(x)	msgdsize(x)
303 #  define	M_LEN(x)	((x)->b_wptr - (x)->b_rptr)
304 #  define	M_DUPLICATE(x)	copymsg((x))
305 #  define	MTOD(m,t)	((t)((m)->b_rptr))
306 #  define	MTYPE(m)	((m)->b_datap->db_type)
307 #  define	FREE_MB_T(m)	freemsg(m)
308 #  define	m_next		b_cont
309 #  define	CACHE_HASH(x)	(((phy_if_t)(x)->fin_ifp) & 7)
310 #  define	IPF_PANIC(x,y)	if (x) { printf y; cmn_err(CE_PANIC, "ipf_panic"); }
311 typedef mblk_t mb_t;
312 # endif /* _KERNEL */
313 
314 # if (SOLARIS2 >= 7)
315 #  ifdef lint
316 #   define ALIGN32(ptr)    (ptr ? 0L : 0L)
317 #   define ALIGN16(ptr)    (ptr ? 0L : 0L)
318 #  else
319 #   define ALIGN32(ptr)    (ptr)
320 #   define ALIGN16(ptr)    (ptr)
321 #  endif
322 # endif
323 
324 # if SOLARIS2 < 6
325 typedef	struct uio	uio_t;
326 # endif
327 typedef	int		ioctlcmd_t;
328 typedef	uint8_t		u_int8_t;
329 
330 # define OS_RECOGNISED 1
331 
332 #endif /* SOLARIS */
333 
334 /* ----------------------------------------------------------------------- */
335 /*                                  H P U X                                */
336 /* ----------------------------------------------------------------------- */
337 #ifdef __hpux
338 # define	MENTAT	1
339 # include	<sys/sysmacros.h>
340 # include	<sys/spinlock.h>
341 # include	<sys/lock.h>
342 # include	<sys/stream.h>
343 # ifdef USE_INET6
344 #  include	<netinet/if_ether.h>
345 #  include	<netinet/ip6.h>
346 #  include	<netinet/icmp6.h>
347 typedef	struct	ip6_hdr	ip6_t;
348 # endif
349 
350 # ifdef _KERNEL
351 #  define SNPRINTF	sprintf
352 #  if (HPUXREV >= 1111)
353 #   define	IPL_SELECT
354 #   ifdef	IPL_SELECT
355 #    include	<machine/sys/user.h>
356 #    include	<sys/kthread_iface.h>
357 #    define	READ_COLLISION	0x01
358 
359 typedef	struct	iplog_select_s {
360 	kthread_t	*read_waiter;
361 	int		state;
362 } iplog_select_t;
363 #   endif
364 #  endif
365 
366 #  define	GETKTIME(x)	uniqtime((struct timeval *)x)
367 
368 #  if HPUXREV == 1111
369 #   include	"kern_svcs.h"
370 #  else
371 #   include	<sys/kern_svcs.h>
372 #  endif
373 #  undef	ti_flags
374 #  undef	TCP_NODELAY
375 #  undef	TCP_MAXSEG
376 #  include <sys/reg.h>
377 #  include "../netinet/ip_info.h"
378 /*
379  * According to /usr/include/sys/spinlock.h on HP-UX 11.00, these functions
380  * are available.  Attempting to use them actually results in unresolved
381  * symbols when it comes time to load the module.
382  * This has been fixed!  Yipee!
383  */
384 #  if 1
385 #   ifdef __LP64__
386 #    define	ATOMIC_INCL(x)		lock_and_incr_int64(&ipf_rw.ipf_lk, &(x), 1)
387 #    define	ATOMIC_DECL(x)		lock_and_incr_int64(&ipf_rw.ipf_lk, &(x), -1)
388 #   else
389 #    define	ATOMIC_INCL(x)		lock_and_incr_int32(&ipf_rw.ipf_lk, &(x), 1)
390 #    define	ATOMIC_DECL(x)		lock_and_incr_int32(&ipf_rw.ipf_lk, &(x), -1)
391 #   endif
392 #   define	ATOMIC_INC64(x)		lock_and_incr_int64(&ipf_rw.ipf_lk, &(x), 1)
393 #   define	ATOMIC_INC32(x)		lock_and_incr_int32(&ipf_rw.ipf_lk, &(x), 1)
394 #   define	ATOMIC_INC16(x)		lock_and_incr_int16(&ipf_rw.ipf_lk, &(x), 1)
395 #   define	ATOMIC_DEC64(x)		lock_and_incr_int64(&ipf_rw.ipf_lk, &(x), -1)
396 #   define	ATOMIC_DEC32(x)		lock_and_incr_int32(&ipf_rw.ipf_lk, &(x), -1)
397 #   define	ATOMIC_DEC16(x)		lock_and_incr_int16(&ipf_rw.ipf_lk, &(x), -1)
398 #  else /* 0 */
399 #   define	ATOMIC_INC64(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
400 					  MUTEX_EXIT(&ipf_rw); }
401 #   define	ATOMIC_DEC64(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
402 					  MUTEX_EXIT(&ipf_rw); }
403 #   define	ATOMIC_INC32(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
404 					  MUTEX_EXIT(&ipf_rw); }
405 #   define	ATOMIC_DEC32(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
406 					  MUTEX_EXIT(&ipf_rw); }
407 #   define	ATOMIC_INCL(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
408 					  MUTEX_EXIT(&ipf_rw); }
409 #   define	ATOMIC_DECL(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
410 					  MUTEX_EXIT(&ipf_rw); }
411 #   define	ATOMIC_INC(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
412 					  MUTEX_EXIT(&ipf_rw); }
413 #   define	ATOMIC_DEC(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
414 					  MUTEX_EXIT(&ipf_rw); }
415 #  endif
416 #  define	ip_cksum		ip_csuma
417 #  define	memcpy(a,b,c)		bcopy((caddr_t)b, (caddr_t)a, c)
418 #  define	USE_MUTEXES
419 #  define	MUTEX_INIT(x, y)	initlock(&(x)->ipf_lk, 0, 0, (y))
420 #  define	MUTEX_ENTER(x)		spinlock(&(x)->ipf_lk)
421 #  define	MUTEX_EXIT(x)		spinunlock(&(x)->ipf_lk);
422 #  define	MUTEX_DESTROY(x)
423 #  define	MUTEX_NUKE(x)		bzero((char *)(x), sizeof(*(x)))
424 #  define	KMUTEX_T		lock_t
425 #  define	kmutex_t		lock_t		/* for pfil.h */
426 #  define	krwlock_t		lock_t		/* for pfil.h */
427 /*
428  * The read-write lock implementation in HP-UX 11.0 is crippled - it can
429  * only be used by threads working in a user context!
430  * This has been fixed!  Yipee! (Or at least it does in 11.00, not 11.11..)
431  */
432 #  if HPUXREV < 1111
433 #   define	MUTEX_DOWNGRADE(x)	lock_write_to_read(x)
434 #   define	KRWLOCK_T		struct rw_lock
435 #   define	READ_ENTER(x)		lock_read(&(x)->ipf_lk)
436 #   define	WRITE_ENTER(x)		lock_write(&(x)->ipf_lk)
437 #   if HPUXREV >= 1111
438 #    define	RWLOCK_INIT(x, y)	rwlock_init4(&(x)->ipf_lk, 0, RWLCK_CANSLEEP, 0, y)
439 #   else
440 #    define	RWLOCK_INIT(x, y)	lock_init3(&(x)->ipf_lk, 0, 1, 0, 0, y)
441 #   endif
442 #   define	RWLOCK_EXIT(x)		lock_done(&(x)->ipf_lk)
443 #  else
444 #   define	KRWLOCK_T		lock_t
445 #   define	KMUTEX_T		lock_t
446 #   define	READ_ENTER(x)		MUTEX_ENTER(x)
447 #   define	WRITE_ENTER(x)		MUTEX_ENTER(x)
448 #   define	MUTEX_DOWNGRADE(x)
449 #   define	RWLOCK_INIT(x, y)	initlock(&(x)->ipf_lk, 0, 0, y)
450 #   define	RWLOCK_EXIT(x)		MUTEX_EXIT(x)
451 #  endif
452 #  define	RW_DESTROY(x)
453 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
454 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
455 #  if HPUXREV >= 1111
456 #   define	BCOPYIN(a,b,c)	0; bcopy((caddr_t)(a), (caddr_t)(b), (c))
457 #   define	BCOPYOUT(a,b,c)	0; bcopy((caddr_t)(a), (caddr_t)(b), (c))
458 #  else
459 #   define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
460 #   define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
461 #  endif
462 #  define	SPL_NET(x)	;
463 #  define	SPL_IMP(x)	;
464 #  undef	SPL_X
465 #  define	SPL_X(x)	;
466 /*extern	void	*get_unit __P((char *, int, ipf_stack_t *));*/
467 #  define	GETIFP(n, v, ifs)	get_unit(n, v, ifs)
468 #  define	IFNAME(x, b)	((ill_t *)x)->ill_name
469 #  define	COPYIFNAME(x, b, v) \
470 				strncpy(b, ((ifinfo_t *)x)->ifi_name, \
471 					LIFNAMSIZ)
472 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a,b,c,d)
473 #  define	SLEEP(id, n)	{ lock_t *_l = get_sleep_lock((caddr_t)id); \
474 				  sleep(id, PZERO+1); \
475 				  spinunlock(_l); \
476 				}
477 #  define	WAKEUP(id,x)	{ lock_t *_l = get_sleep_lock((caddr_t)id); \
478 				  wakeup(id + x); \
479 				  spinunlock(_l); \
480 				}
481 #  define	KMALLOC(a, b)	MALLOC((a), b, sizeof(*(a)), M_IOSYS, M_NOWAIT)
482 #  define	KMALLOCS(a, b, c)	MALLOC((a), b, (c), M_IOSYS, M_NOWAIT)
483 #  define	KFREE(x)	kmem_free((char *)(x), sizeof(*(x)))
484 #  define	KFREES(x,s)	kmem_free((char *)(x), (s))
485 #  define	MSGDSIZE(x)	msgdsize(x)
486 #  define	M_LEN(x)	((x)->b_wptr - (x)->b_rptr)
487 #  define	M_DUPLICATE(x)	dupmsg((x))
488 #  define	MTOD(m,t)	((t)((m)->b_rptr))
489 #  define	MTYPE(m)	((m)->b_datap->db_type)
490 #  define	FREE_MB_T(m)	freemsg(m)
491 #  define	m_next		b_cont
492 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
493 typedef mblk_t mb_t;
494 
495 #  define	CACHE_HASH(x)	(((phy_if_t)(x)->fin_ifp) & 7)
496 
497 #  include "qif.h"
498 #  include "pfil.h"
499 
500 # else /* _KERNEL */
501 
502 typedef	unsigned char uchar_t;
503 
504 #  ifndef	_SYS_STREAM_INCLUDED
505 typedef char * mblk_t;
506 typedef void * queue_t;
507 typedef	u_long ulong;
508 #  endif
509 #  include <netinet/ip_info.h>
510 
511 # endif /* _KERNEL */
512 
513 # ifdef lint
514 #  define ALIGN32(ptr)    (ptr ? 0L : 0L)
515 #  define ALIGN16(ptr)    (ptr ? 0L : 0L)
516 # else
517 #  define ALIGN32(ptr)    (ptr)
518 #  define ALIGN16(ptr)    (ptr)
519 # endif
520 
521 typedef	struct uio	uio_t;
522 typedef	int		ioctlcmd_t;
523 typedef	int		minor_t;
524 typedef unsigned int	u_32_t;
525 # define	U_32_T	1
526 
527 # define OS_RECOGNISED 1
528 
529 #endif /* __hpux */
530 
531 /* ----------------------------------------------------------------------- */
532 /*                                  I R I X                                */
533 /* ----------------------------------------------------------------------- */
534 #ifdef __sgi
535 # undef		MENTAT
536 # if IRIX < 60500
537 typedef	struct uio	uio_t;
538 # endif
539 typedef	int		ioctlcmd_t;
540 typedef u_int32_t       u_32_t;
541 # define	U_32_T	1
542 
543 # ifdef INET6
544 #  define USE_INET6
545 # endif
546 
547 # define  hz HZ
548 # include <sys/ksynch.h>
549 # define	IPF_LOCK_PL	plhi
550 # include <sys/sema.h>
551 # undef kmutex_t
552 typedef struct {
553 	lock_t *l;
554 	int pl;
555 } kmutex_t;
556 
557 # ifdef MUTEX_INIT
558 #  define	KMUTEX_T		mutex_t
559 # else
560 #  define	KMUTEX_T		kmutex_t
561 #  define	KRWLOCK_T		kmutex_t
562 # endif
563 
564 # ifdef _KERNEL
565 #  define	NEED_LOCAL_RAND	1
566 #  define	ipf_random		arc4random
567 #  define	ATOMIC_INC(x)		{ MUTEX_ENTER(&ipf_rw); \
568 					  (x)++; MUTEX_EXIT(&ipf_rw); }
569 #  define	ATOMIC_DEC(x)		{ MUTEX_ENTER(&ipf_rw); \
570 					  (x)--; MUTEX_EXIT(&ipf_rw); }
571 #  define	USE_MUTEXES
572 #  ifdef MUTEX_INIT
573 #   include <sys/atomic_ops.h>
574 #   define	ATOMIC_INCL(x)		atomicAddUlong(&(x), 1)
575 #   define	ATOMIC_INC64(x)		atomicAddUint64(&(x), 1)
576 #   define	ATOMIC_INC32(x)		atomicAddUint(&(x), 1)
577 #   define	ATOMIC_INC16		ATOMIC_INC
578 #   define	ATOMIC_DECL(x)		atomicAddUlong(&(x), -1)
579 #   define	ATOMIC_DEC64(x)		atomicAddUint64(&(x), -1)
580 #   define	ATOMIC_DEC32(x)		atomicAddUint(&(x), -1)
581 #   define	ATOMIC_DEC16		ATOMIC_DEC
582 #   undef	MUTEX_INIT
583 #   define	MUTEX_INIT(x, y)	mutex_init(&(x)->ipf_lk,  \
584 						   MUTEX_DEFAULT, y)
585 #   undef	MUTEX_ENTER
586 #   define	MUTEX_ENTER(x)		mutex_lock(&(x)->ipf_lk, 0)
587 #   undef	MUTEX_EXIT
588 #   define	MUTEX_EXIT(x)		mutex_unlock(&(x)->ipf_lk)
589 #   undef	MUTEX_DESTROY
590 #   define	MUTEX_DESTROY(x)	mutex_destroy(&(x)->ipf_lk)
591 #   define	MUTEX_DOWNGRADE(x)	mrdemote(&(x)->ipf_lk)
592 #   define	KRWLOCK_T		mrlock_t
593 #   define	RWLOCK_INIT(x, y)	mrinit(&(x)->ipf_lk, y)
594 #   undef	RW_DESTROY
595 #   define	RW_DESTROY(x)		mrfree(&(x)->ipf_lk)
596 #   define	READ_ENTER(x)		RW_RDLOCK(&(x)->ipf_lk)
597 #   define	WRITE_ENTER(x)		RW_WRLOCK(&(x)->ipf_lk)
598 #   define	RWLOCK_EXIT(x)		RW_UNLOCK(&(x)->ipf_lk)
599 #  else
600 #   define	READ_ENTER(x)		MUTEX_ENTER(&(x)->ipf_lk)
601 #   define	WRITE_ENTER(x)		MUTEX_ENTER(&(x)->ipf_lk)
602 #   define	MUTEX_DOWNGRADE(x)	;
603 #   define	RWLOCK_EXIT(x)		MUTEX_EXIT(&(x)->ipf_lk)
604 #   define	MUTEX_EXIT(x)		UNLOCK((x)->ipf_lk.l, (x)->ipf_lk.pl);
605 #   define	MUTEX_INIT(x,y)		(x)->ipf_lk.l = LOCK_ALLOC((uchar_t)-1, IPF_LOCK_PL, (lkinfo_t *)-1, KM_NOSLEEP)
606 #   define	MUTEX_DESTROY(x)	LOCK_DEALLOC((x)->ipf_lk.l)
607 #   define	MUTEX_ENTER(x)		(x)->ipf_lk.pl = LOCK((x)->ipf_lk.l, \
608 							      IPF_LOCK_PL);
609 #  endif
610 #  define	MUTEX_NUKE(x)		bzero((x), sizeof(*(x)))
611 #  define	FREE_MB_T(m)	m_freem(m)
612 #  define	MTOD(m,t)	mtod(m,t)
613 #  define	COPYIN(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
614 #  define	COPYOUT(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
615 #  define	BCOPYIN(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
616 #  define	BCOPYOUT(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
617 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a,b,c,d)
618 #  define	SLEEP(id, n)	sleep((id), PZERO+1)
619 #  define	WAKEUP(id,x)	wakeup(id+x)
620 #  define	KFREE(x)	kmem_free((char *)(x), sizeof(*(x)))
621 #  define	KFREES(x,s)	kmem_free((char *)(x), (s))
622 #  define	GETIFP(n,v, ifs)	ifunit(n)
623 #  include <sys/kmem.h>
624 #  include <sys/ddi.h>
625 #  define	KMALLOC(a,b)	(a) = (b)kmem_alloc(sizeof(*(a)), KM_NOSLEEP)
626 #  define	KMALLOCS(a,b,c)	(a) = (b)kmem_alloc((c), KM_NOSLEEP)
627 #  define	GET_MINOR(x)	getminor(x)
628 #  define	USE_SPL		1
629 #  define	SPL_IMP(x)	(x) = splimp()
630 #  define	SPL_NET(x)	(x) = splnet()
631 #  define	SPL_X(x)	(void) splx(x)
632 extern	void	m_copydata __P((struct mbuf *, int, int, caddr_t));
633 extern	void	m_copyback __P((struct mbuf *, int, int, caddr_t));
634 #  define	MSGDSIZE(x)	mbufchainlen(x)
635 #  define	M_LEN(x)	(x)->m_len
636 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
637 #  define	GETKTIME(x)	microtime((struct timeval *)x)
638 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
639 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
640 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
641 typedef struct mbuf mb_t;
642 # else
643 #  undef RW_DESTROY
644 #  undef MUTEX_INIT
645 #  undef MUTEX_DESTROY
646 # endif /* _KERNEL */
647 
648 # define OS_RECOGNISED 1
649 
650 #endif /* __sgi */
651 
652 /* ----------------------------------------------------------------------- */
653 /*                                  T R U 6 4                              */
654 /* ----------------------------------------------------------------------- */
655 #ifdef __osf__
656 # undef		MENTAT
657 
658 # include <kern/lock.h>
659 # include <sys/sysmacros.h>
660 
661 # ifdef _KERNEL
662 #  define	NEED_LOCAL_RAND		1
663 #  define	ipf_random		arc4random
664 #  define	KMUTEX_T		simple_lock_data_t
665 #  define	KRWLOCK_T		lock_data_t
666 #  include <net/net_globals.h>
667 #  define	USE_MUTEXES
668 #  define	READ_ENTER(x)		lock_read(&(x)->ipf_lk)
669 #  define	WRITE_ENTER(x)		lock_write(&(x)->ipf_lk)
670 #  define	MUTEX_DOWNGRADE(x)	lock_write_to_read(&(x)->ipf_lk)
671 #  define	RWLOCK_INIT(x, y)	lock_init(&(x)->ipf_lk, TRUE)
672 #  define	RWLOCK_EXIT(x)		lock_done(&(x)->ipf_lk)
673 #  define	RW_DESTROY(x)		lock_terminate(&(x)->ipf_lk)
674 #  define	MUTEX_ENTER(x)		simple_lock(&(x)->ipf_lk)
675 #  define	MUTEX_INIT(x, y)	simple_lock_init(&(x)->ipf_lk)
676 #  define	MUTEX_DESTROY(x)	simple_lock_terminate(&(x)->ipf_lk)
677 #  define	MUTEX_EXIT(x)		simple_unlock(&(x)->ipf_lk)
678 #  define	MUTEX_NUKE(x)		bzero(x, sizeof(*(x)))
679 #  define	ATOMIC_INC64(x)		atomic_incq((uint64_t*)&(x))
680 #  define	ATOMIC_DEC64(x)		atomic_decq((uint64_t*)&(x))
681 #  define	ATOMIC_INC32(x)		atomic_incl((uint32_t*)&(x))
682 #  define	ATOMIC_DEC32(x)		atomic_decl((uint32_t*)&(x))
683 #  define	ATOMIC_INC16(x)		{ simple_lock(&ipf_rw); (x)++; \
684 					  simple_unlock(&ipf_rw); }
685 #  define	ATOMIC_DEC16(x)		{ simple_lock(&ipf_rw); (x)--; \
686 					  simple_unlock(&ipf_rw); }
687 #  define	ATOMIC_INCL(x)		atomic_incl((uint32_t*)&(x))
688 #  define	ATOMIC_DECL(x)		atomic_decl((uint32_t*)&(x))
689 #  define	ATOMIC_INC(x)		{ simple_lock(&ipf_rw); (x)++; \
690 					  simple_unlock(&ipf_rw); }
691 #  define	ATOMIC_DEC(x)		{ simple_lock(&ipf_rw); (x)--; \
692 					  simple_unlock(&ipf_rw); }
693 #  define	SPL_NET(x)		;
694 #  define	SPL_IMP(x)		;
695 #  undef	SPL_X
696 #  define	SPL_X(x)		;
697 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a, b, d)
698 #  define	FREE_MB_T(m)		m_freem(m)
699 #  define	MTOD(m,t)		mtod(m,t)
700 #  define	GETIFP(n, v, ifs)	ifunit(n)
701 #  define	GET_MINOR		getminor
702 #  define	WAKEUP(id,x)		wakeup(id + x)
703 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
704 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
705 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
706 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
707 #  define	KMALLOC(a, b)	MALLOC((a), b, sizeof(*(a)), M_PFILT, M_NOWAIT)
708 #  define	KMALLOCS(a, b, c)	MALLOC((a), b, (c), M_PFILT, \
709 					    ((c) > 4096) ? M_WAITOK : M_NOWAIT)
710 #  define	KFREE(x)	FREE((x), M_PFILT)
711 #  define	KFREES(x,s)	FREE((x), M_PFILT)
712 #  define	MSGDSIZE(x)	mbufchainlen(x)
713 #  define	M_LEN(x)	(x)->m_len
714 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
715 #  define	GETKTIME(x)	microtime((struct timeval *)x)
716 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
717 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
718 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
719 typedef struct mbuf mb_t;
720 # endif /* _KERNEL */
721 
722 # if (defined(_KERNEL) || defined(_NO_BITFIELDS) || (__STDC__ == 1))
723 #  define	IP_V(x)		((x)->ip_vhl >> 4)
724 #  define	IP_HL(x)	((x)->ip_vhl & 0xf)
725 #  define	IP_V_A(x,y)	(x)->ip_vhl |= (((y) << 4) & 0xf0)
726 #  define	IP_HL_A(x,y)	(x)->ip_vhl |= ((y) & 0xf)
727 #  define	TCP_X2(x)	((x)->th_xoff & 0xf)
728 #  define	TCP_X2_A(x,y)	(x)->th_xoff |= ((y) & 0xf)
729 #  define	TCP_OFF(x)	((x)->th_xoff >> 4)
730 #  define	TCP_OFF_A(x,y)	(x)->th_xoff |= (((y) << 4) & 0xf0)
731 # endif
732 
733 /*
734  * These are from's Solaris' #defines for little endian.
735  */
736 #define	IP6F_MORE_FRAG		0x0100
737 #define	IP6F_RESERVED_MASK	0x0600
738 #define	IP6F_OFF_MASK		0xf8ff
739 
740 struct ip6_ext {
741 	u_char	ip6e_nxt;
742 	u_char	ip6e_len;
743 };
744 
745 typedef	int		ioctlcmd_t;
746 /*
747  * Really, any arch where sizeof(long) != sizeof(int).
748  */
749 typedef unsigned int    u_32_t;
750 # define	U_32_T	1
751 
752 # define OS_RECOGNISED 1
753 #endif /* __osf__ */
754 
755 /* ----------------------------------------------------------------------- */
756 /*                                  N E T B S D                            */
757 /* ----------------------------------------------------------------------- */
758 #ifdef __NetBSD__
759 # if defined(_KERNEL) && !defined(IPFILTER_LKM)
760 #  include "bpfilter.h"
761 #  if defined(__NetBSD_Version__) && (__NetBSD_Version__ >= 104110000)
762 #   include "opt_inet.h"
763 #  endif
764 #  ifdef INET6
765 #   define USE_INET6
766 #  endif
767 #  if (__NetBSD_Version__ >= 105000000)
768 #   define HAVE_M_PULLDOWN 1
769 #  endif
770 # endif
771 
772 # ifdef _KERNEL
773 #  define	MSGDSIZE(x)	mbufchainlen(x)
774 #  define	M_LEN(x)	(x)->m_len
775 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
776 #  define	GETKTIME(x)	microtime((struct timeval *)x)
777 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
778 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
779 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
780 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
781 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
782 typedef struct mbuf mb_t;
783 # endif /* _KERNEL */
784 # if (NetBSD <= 1991011) && (NetBSD >= 199606)
785 #  define	IFNAME(x)	((struct ifnet *)x)->if_xname
786 #  define	COPYIFNAME(x, b, v) \
787 				(void) strncpy(b, \
788 					       ((struct ifnet *)x)->if_xname, \
789 					       LIFNAMSIZ)
790 #  define	CACHE_HASH(x)	((((struct ifnet *)fin->fin_ifp)->if_index)&7)
791 # else
792 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
793 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
794 # endif
795 
796 typedef	struct uio	uio_t;
797 typedef	u_long		ioctlcmd_t;
798 typedef	int		minor_t;
799 typedef	u_int32_t	u_32_t;
800 # define	U_32_T	1
801 
802 # define OS_RECOGNISED 1
803 #endif /* __NetBSD__ */
804 
805 
806 /* ----------------------------------------------------------------------- */
807 /*                                F R E E B S D                            */
808 /* ----------------------------------------------------------------------- */
809 #ifdef __FreeBSD__
810 # if defined(_KERNEL)
811 #  if (__FreeBSD_version >= 500000)
812 #   include "opt_bpf.h"
813 #  else
814 #   include "bpf.h"
815 #  endif
816 #  if defined(__FreeBSD_version) && (__FreeBSD_version >= 400000)
817 #   include "opt_inet6.h"
818 #  endif
819 #  if defined(INET6) && !defined(USE_INET6)
820 #   define USE_INET6
821 #  endif
822 # endif
823 
824 # if defined(_KERNEL)
825 #  if (__FreeBSD_version >= 400000)
826 /*
827  * When #define'd, the 5.2.1 kernel panics when used with the ftp proxy.
828  * There may be other, safe, kernels but this is not extensively tested yet.
829  */
830 #   define HAVE_M_PULLDOWN
831 #  endif
832 #  if !defined(IPFILTER_LKM) && (__FreeBSD_version >= 300000)
833 #   include "opt_ipfilter.h"
834 #  endif
835 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
836 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
837 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
838 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
839 
840 #  if (__FreeBSD_version >= 500043)
841 #   define NETBSD_PF
842 #  endif
843 # endif /* _KERNEL */
844 
845 # if (__FreeBSD_version >= 500043)
846 #  include <sys/mutex.h>
847 #  include <sys/sx.h>
848 /*
849  * Whilst the sx(9) locks on FreeBSD have the right semantics and interface
850  * for what we want to use them for, despite testing showing they work -
851  * with a WITNESS kernel, it generates LOR messages.
852  */
853 #  define	KMUTEX_T		struct mtx
854 #  if 1
855 #   define	KRWLOCK_T		struct mtx
856 #  else
857 #   define	KRWLOCK_T		struct sx
858 #  endif
859 # endif
860 
861 # if (__FreeBSD_version >= 501113)
862 #  include <net/if_var.h>
863 #  define	IFNAME(x)	((struct ifnet *)x)->if_xname
864 #  define	COPYIFNAME(x, b) \
865 				(void) strncpy(b, \
866 					       ((struct ifnet *)x)->if_xname, \
867 					       LIFNAMSIZ)
868 # endif
869 # if (__FreeBSD_version >= 500043)
870 #  define	CACHE_HASH(x)	((((struct ifnet *)fin->fin_ifp)->if_index) & 7)
871 # else
872 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
873 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
874 # endif
875 
876 # ifdef _KERNEL
877 #  define	GETKTIME(x)	microtime((struct timeval *)x)
878 
879 #  if (__FreeBSD_version >= 500002)
880 #   include <netinet/in_systm.h>
881 #   include <netinet/ip.h>
882 #   include <machine/in_cksum.h>
883 #  endif
884 
885 #  if (__FreeBSD_version >= 500043)
886 #   define	USE_MUTEXES
887 #   define	MUTEX_ENTER(x)		mtx_lock(&(x)->ipf_lk)
888 #   define	MUTEX_EXIT(x)		mtx_unlock(&(x)->ipf_lk)
889 #   define	MUTEX_INIT(x,y)		mtx_init(&(x)->ipf_lk, (y), NULL,\
890 						 MTX_DEF)
891 #   define	MUTEX_DESTROY(x)	mtx_destroy(&(x)->ipf_lk)
892 #   define	MUTEX_NUKE(x)		bzero((x), sizeof(*(x)))
893 /*
894  * Whilst the sx(9) locks on FreeBSD have the right semantics and interface
895  * for what we want to use them for, despite testing showing they work -
896  * with a WITNESS kernel, it generates LOR messages.
897  */
898 #   if 1
899 #    define	READ_ENTER(x)		mtx_lock(&(x)->ipf_lk)
900 #    define	WRITE_ENTER(x)		mtx_lock(&(x)->ipf_lk)
901 #    define	RWLOCK_EXIT(x)		mtx_unlock(&(x)->ipf_lk)
902 #    define	MUTEX_DOWNGRADE(x)	;
903 #    define	RWLOCK_INIT(x,y)	mtx_init(&(x)->ipf_lk, (y), NULL,\
904 						 MTX_DEF)
905 #    define	RW_DESTROY(x)		mtx_destroy(&(x)->ipf_lk)
906 #   else
907 #    define	READ_ENTER(x)		sx_slock(&(x)->ipf_lk)
908 #    define	WRITE_ENTER(x)		sx_xlock(&(x)->ipf_lk)
909 #    define	MUTEX_DOWNGRADE(x)	sx_downgrade(&(x)->ipf_lk)
910 #    define	RWLOCK_INIT(x, y)	sx_init(&(x)->ipf_lk, (y))
911 #    define	RW_DESTROY(x)		sx_destroy(&(x)->ipf_lk)
912 #    ifdef sx_unlock
913 #     define	RWLOCK_EXIT(x)		sx_unlock(x)
914 #    else
915 #     define	RWLOCK_EXIT(x)		do { \
916 					    if ((x)->ipf_lk.sx_cnt < 0) \
917 						sx_xunlock(&(x)->ipf_lk); \
918 					    else \
919 						sx_sunlock(&(x)->ipf_lk); \
920 					} while (0)
921 #    endif
922 #   endif
923 #   include <machine/atomic.h>
924 #   define	ATOMIC_INC(x)		{ mtx_lock(&ipf_rw.ipf_lk); (x)++; \
925 					  mtx_unlock(&ipf_rw.ipf_lk); }
926 #   define	ATOMIC_DEC(x)		{ mtx_lock(&ipf_rw.ipf_lk); (x)--; \
927 					  mtx_unlock(&ipf_rw.ipf_lk); }
928 #   define	ATOMIC_INCL(x)		atomic_inc_ulong(&(x))
929 #   define	ATOMIC_INC64(x)		ATOMIC_INC(x)
930 #   define	ATOMIC_INC32(x)		atomic_inc_32(&(x))
931 #   define	ATOMIC_INC16(x)		atomic_inc_16(&(x))
932 #   define	ATOMIC_DECL(x)		atomic_dec_ulong(&(x))
933 #   define	ATOMIC_DEC64(x)		ATOMIC_DEC(x)
934 #   define	ATOMIC_DEC32(x)		atomic_dec_32(&(x))
935 #   define	ATOMIC_DEC16(x)		atomic_dec_16(&(x))
936 #   define	SPL_X(x)	;
937 #   define	SPL_NET(x)	;
938 #   define	SPL_IMP(x)	;
939 extern	int	in_cksum __P((struct mbuf *, int));
940 #  endif /* __FreeBSD_version >= 500043 */
941 #  define	MSGDSIZE(x)	mbufchainlen(x)
942 #  define	M_LEN(x)	(x)->m_len
943 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
944 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
945 typedef struct mbuf mb_t;
946 # endif /* _KERNEL */
947 
948 # if __FreeBSD__ < 3
949 #  include <machine/spl.h>
950 # else
951 #  if __FreeBSD__ == 3
952 #   if defined(IPFILTER_LKM) && !defined(ACTUALLY_LKM_NOT_KERNEL)
953 #    define	ACTUALLY_LKM_NOT_KERNEL
954 #   endif
955 #  endif
956 # endif
957 
958 # if (__FreeBSD_version >= 300000)
959 typedef	u_long		ioctlcmd_t;
960 # else
961 typedef	int		ioctlcmd_t;
962 # endif
963 typedef	struct uio	uio_t;
964 typedef	int		minor_t;
965 typedef	u_int32_t	u_32_t;
966 # define	U_32_T	1
967 
968 # define OS_RECOGNISED 1
969 #endif /* __FreeBSD__ */
970 
971 
972 /* ----------------------------------------------------------------------- */
973 /*                                O P E N B S D                            */
974 /* ----------------------------------------------------------------------- */
975 #ifdef __OpenBSD__
976 # ifdef INET6
977 #  define USE_INET6
978 # endif
979 
980 # ifdef _KERNEL
981 #  if !defined(IPFILTER_LKM)
982 #   include "bpfilter.h"
983 #  endif
984 #  if (OpenBSD >= 200311)
985 #   define SNPRINTF	snprintf
986 #   if defined(USE_INET6)
987 #    include "netinet6/in6_var.h"
988 #    include "netinet6/nd6.h"
989 #   endif
990 #  endif
991 #  if (OpenBSD >= 200012)
992 #   define HAVE_M_PULLDOWN 1
993 #  endif
994 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
995 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
996 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
997 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
998 #  define	GETKTIME(x)	microtime((struct timeval *)x)
999 #  define	MSGDSIZE(x)	mbufchainlen(x)
1000 #  define	M_LEN(x)	(x)->m_len
1001 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
1002 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
1003 typedef struct mbuf mb_t;
1004 # endif /* _KERNEL */
1005 # if (OpenBSD >= 199603)
1006 #  define	IFNAME(x, b)	((struct ifnet *)x)->if_xname
1007 #  define	COPYIFNAME(x, b, v) \
1008 				(void) strncpy(b, \
1009 					       ((struct ifnet *)x)->if_xname, \
1010 					       LIFNAMSIZ)
1011 #  define	CACHE_HASH(x)	((((struct ifnet *)fin->fin_ifp)->if_index)&7)
1012 # else
1013 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1014 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
1015 # endif
1016 
1017 typedef	struct uio	uio_t;
1018 typedef	u_long		ioctlcmd_t;
1019 typedef	int		minor_t;
1020 typedef	u_int32_t	u_32_t;
1021 # define	U_32_T	1
1022 
1023 # define OS_RECOGNISED 1
1024 #endif /* __OpenBSD__ */
1025 
1026 
1027 /* ----------------------------------------------------------------------- */
1028 /*                                B S D O S                                */
1029 /* ----------------------------------------------------------------------- */
1030 #ifdef _BSDI_VERSION
1031 # ifdef INET6
1032 #  define USE_INET6
1033 # endif
1034 
1035 # ifdef _KERNEL
1036 #  define	GETKTIME(x)	microtime((struct timeval *)x)
1037 #  define	MSGDSIZE(x)	mbufchainlen(x)
1038 #  define	M_LEN(x)	(x)->m_len
1039 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
1040 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1041 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
1042 typedef struct mbuf mb_t;
1043 # endif /* _KERNEL */
1044 
1045 # if (_BSDI_VERSION >= 199701)
1046 typedef	u_long		ioctlcmd_t;
1047 # else
1048 typedef	int		ioctlcmd_t;
1049 # endif
1050 typedef	u_int32_t	u_32_t;
1051 # define	U_32_T	1
1052 
1053 #endif /* _BSDI_VERSION */
1054 
1055 
1056 /* ----------------------------------------------------------------------- */
1057 /*                                  S U N O S 4                            */
1058 /* ----------------------------------------------------------------------- */
1059 #if defined(sun) && !defined(OS_RECOGNISED) /* SunOS4 */
1060 # ifdef _KERNEL
1061 #  include	<sys/kmem_alloc.h>
1062 #  define	GETKTIME(x)	uniqtime((struct timeval *)x)
1063 #  define	MSGDSIZE(x)	mbufchainlen(x)
1064 #  define	M_LEN(x)	(x)->m_len
1065 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
1066 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1067 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
1068 #  define	GETIFP(n, v, ifs)	ifunit(n, IFNAMSIZ)
1069 #  define	KFREE(x)	kmem_free((char *)(x), sizeof(*(x)))
1070 #  define	KFREES(x,s)	kmem_free((char *)(x), (s))
1071 #  define	SLEEP(id, n)	sleep((id), PZERO+1)
1072 #  define	WAKEUP(id,x)	wakeup(id + x)
1073 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a,b,c,d)
1074 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
1075 
1076 extern	void	m_copydata __P((struct mbuf *, int, int, caddr_t));
1077 extern	void	m_copyback __P((struct mbuf *, int, int, caddr_t));
1078 
1079 typedef struct mbuf mb_t;
1080 # endif
1081 
1082 typedef	struct uio	uio_t;
1083 typedef	int		ioctlcmd_t;
1084 typedef	int		minor_t;
1085 typedef	unsigned int	u_32_t;
1086 # define	U_32_T	1
1087 
1088 # define OS_RECOGNISED 1
1089 
1090 #endif /* SunOS 4 */
1091 
1092 /* ----------------------------------------------------------------------- */
1093 /*                            L I N U X                                    */
1094 /* ----------------------------------------------------------------------- */
1095 #if defined(linux) && !defined(OS_RECOGNISED)
1096 #include <linux/config.h>
1097 #include <linux/version.h>
1098 # if LINUX >= 20600
1099 #  define	 HDR_T_PRIVATE	1
1100 # endif
1101 # undef USE_INET6
1102 # ifdef USE_INET6
1103 struct ip6_ext {
1104 	u_char	ip6e_nxt;
1105 	u_char	ip6e_len;
1106 };
1107 # endif
1108 
1109 # ifdef _KERNEL
1110 #  define	IPF_PANIC(x,y)	if (x) { printf y; panic("ipf_panic"); }
1111 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
1112 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
1113 #  define	COPYIN(a,b,c)	copy_from_user((caddr_t)(b), (caddr_t)(a), (c))
1114 #  define	COPYOUT(a,b,c)	copy_to_user((caddr_t)(b), (caddr_t)(a), (c))
1115 #  define	FREE_MB_T(m)	kfree_skb(m)
1116 #  define	GETKTIME(x)	do_gettimeofday((struct timeval *)x)
1117 #  define	SLEEP(x,s)	0, interruptible_sleep_on(x##_linux)
1118 #  define	WAKEUP(x,y)	wake_up(x##_linux + y)
1119 #  define	UIOMOVE(a,b,c,d)	uiomove(a,b,c,d)
1120 #  define	USE_MUTEXES
1121 #  define	KRWLOCK_T		rwlock_t
1122 #  define	KMUTEX_T		spinlock_t
1123 #  define	MUTEX_INIT(x,y)		spin_lock_init(&(x)->ipf_lk)
1124 #  define	MUTEX_ENTER(x)		spin_lock(&(x)->ipf_lk)
1125 #  define	MUTEX_EXIT(x)		spin_unlock(&(x)->ipf_lk)
1126 #  define	MUTEX_DESTROY(x)	do { } while (0)
1127 #  define	MUTEX_NUKE(x)		bzero(&(x)->ipf_lk, sizeof((x)->ipf_lk))
1128 #  define	READ_ENTER(x)		ipf_read_enter(x)
1129 #  define	WRITE_ENTER(x)		ipf_write_enter(x)
1130 #  define	RWLOCK_INIT(x,y)	rwlock_init(&(x)->ipf_lk)
1131 #  define	RW_DESTROY(x)		do { } while (0)
1132 #  define	RWLOCK_EXIT(x)		ipf_rw_exit(x)
1133 #  define	MUTEX_DOWNGRADE(x)	ipf_rw_downgrade(x)
1134 #  define	ATOMIC_INCL(x)		MUTEX_ENTER(&ipf_rw); (x)++; \
1135 					MUTEX_EXIT(&ipf_rw)
1136 #  define	ATOMIC_DECL(x)		MUTEX_ENTER(&ipf_rw); (x)--; \
1137 					MUTEX_EXIT(&ipf_rw)
1138 #  define	ATOMIC_INC64(x)		MUTEX_ENTER(&ipf_rw); (x)++; \
1139 					MUTEX_EXIT(&ipf_rw)
1140 #  define	ATOMIC_INC32(x)		MUTEX_ENTER(&ipf_rw); (x)++; \
1141 					MUTEX_EXIT(&ipf_rw)
1142 #  define	ATOMIC_INC16(x)		MUTEX_ENTER(&ipf_rw); (x)++; \
1143 					MUTEX_EXIT(&ipf_rw)
1144 #  define	ATOMIC_DEC64(x)		MUTEX_ENTER(&ipf_rw); (x)--; \
1145 					MUTEX_EXIT(&ipf_rw)
1146 #  define	ATOMIC_DEC32(x)		MUTEX_ENTER(&ipf_rw); (x)--; \
1147 					MUTEX_EXIT(&ipf_rw)
1148 #  define	ATOMIC_DEC16(x)		MUTEX_ENTER(&ipf_rw); (x)--; \
1149 					MUTEX_EXIT(&ipf_rw)
1150 #  define	SPL_IMP(x)		do { } while (0)
1151 #  define	SPL_NET(x)		do { } while (0)
1152 #  define	SPL_X(x)		do { } while (0)
1153 #  define	IFNAME(x)		((struct net_device*)x)->name
1154 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1155 			  ((struct net_device *)fin->fin_ifp)->ifindex) & 7)
1156 typedef	struct	sk_buff	mb_t;
1157 extern	void	m_copydata __P((mb_t *, int, int, caddr_t));
1158 extern	void	m_copyback __P((mb_t *, int, int, caddr_t));
1159 extern	void	m_adj __P((mb_t *, int));
1160 extern	mb_t	*m_pullup __P((mb_t *, int));
1161 #  define	mbuf	sk_buff
1162 
1163 #  define	mtod(m, t)	((t)(m)->data)
1164 #  define	m_len		len
1165 #  define	m_next		next
1166 #  define	M_DUPLICATE(m)	skb_clone((m), in_interrupt() ? GFP_ATOMIC : \
1167 								GFP_KERNEL)
1168 #  define	MSGDSIZE(m)	(m)->len
1169 #  define	M_LEN(m)	(m)->len
1170 
1171 #  define	splnet(x)	;
1172 #  define	printf		printk
1173 #  define	bcopy(s,d,z)	memmove(d, s, z)
1174 #  define	bzero(s,z)	memset(s, 0, z)
1175 #  define	bcmp(a,b,z)	memcmp(a, b, z)
1176 
1177 #  define	ifnet		net_device
1178 #  define	if_xname	name
1179 #  define	if_unit		ifindex
1180 
1181 #  define	KMALLOC(x,t)	(x) = (t)kmalloc(sizeof(*(x)), \
1182 				    in_interrupt() ? GFP_ATOMIC : GFP_KERNEL)
1183 #  define	KFREE(x)	kfree(x)
1184 #  define	KMALLOCS(x,t,s)	(x) = (t)kmalloc((s), \
1185 				    in_interrupt() ? GFP_ATOMIC : GFP_KERNEL)
1186 #  define	KFREES(x,s)	kfree(x)
1187 
1188 #  define GETIFP(n,v)	dev_get_by_name(n)
1189 
1190 # else
1191 #  include <net/ethernet.h>
1192 
1193 struct mbuf {
1194 };
1195 
1196 #  ifndef _NET_ROUTE_H
1197 struct rtentry {
1198 };
1199 #  endif
1200 
1201 struct ifnet {
1202 	char	if_xname[IFNAMSIZ];
1203 	int	if_unit;
1204 	int	(* if_output) __P((struct ifnet *, struct mbuf *, struct sockaddr *, struct rtentry *));
1205 	struct	ifaddr	*if_addrlist;
1206 };
1207 # define	IFNAME(x)	((struct ifnet *)x)->if_xname
1208 
1209 # endif	/* _KERNEL */
1210 
1211 # define	COPYIFNAME(x, b) \
1212 				(void) strncpy(b, \
1213 					       ((struct ifnet *)x)->if_xname, \
1214 					       LIFNAMSIZ)
1215 
1216 # include <linux/fs.h>
1217 # define	FWRITE	FMODE_WRITE
1218 # define	FREAD	FMODE_READ
1219 
1220 # define	__USE_MISC	1
1221 # define	__FAVOR_BSD	1
1222 
1223 typedef	struct uio {
1224 	struct iovec	*uio_iov;
1225 	void	*uio_file;
1226 	char	*uio_buf;
1227 	int	uio_iovcnt;
1228 	int	uio_offset;
1229 	size_t	uio_resid;
1230 	int	uio_rw;
1231 } uio_t;
1232 
1233 extern	int	uiomove __P((caddr_t, size_t, int, struct uio *));
1234 
1235 # define	UIO_READ	1
1236 # define	UIO_WRITE	2
1237 
1238 typedef	u_long		ioctlcmd_t;
1239 typedef	int		minor_t;
1240 typedef u_int32_t 	u_32_t;
1241 # define	U_32_T	1
1242 
1243 # define OS_RECOGNISED 1
1244 
1245 #endif
1246 
1247 
1248 /* ----------------------------------------------------------------------- */
1249 /*                                    A I X                                */
1250 /* ----------------------------------------------------------------------- */
1251 #if defined(_AIX51)
1252 # undef		MENTAT
1253 
1254 # include <sys/lock.h>
1255 # include <sys/sysmacros.h>
1256 
1257 # ifdef _KERNEL
1258 #  define rw_read_locked(x)		0
1259 #  include <net/net_globals.h>
1260 #  include <net/net_malloc.h>
1261 #  define	KMUTEX_T		simple_lock_t
1262 #  define	KRWLOCK_T		complex_lock_t
1263 #  define	USE_MUTEXES		1
1264 #  define	USE_SPL			1
1265 #  define	READ_ENTER(x)		lock_read((x)->ipf_lk)
1266 #  define	WRITE_ENTER(x)		lock_write((x)->ipf_lk)
1267 #  define	MUTEX_DOWNGRADE(x)	lock_write_to_read((x)->ipf_lk)
1268 #  define	RWLOCK_INIT(x, y)	lock_alloc(&(x)->ipf_lk, \
1269 						   LOCK_ALLOC_PIN, \
1270 						   (u_short)y, 0); \
1271 					lock_init((x)->ipf_lk, TRUE)
1272 #  define	RWLOCK_EXIT(x)		lock_done((x)->ipf_lk)
1273 #  define	RW_DESTROY(x)		lock_free(&(x)->ipf_lk)
1274 #  define	MUTEX_ENTER(x)		simple_lock((x)->ipf_lk)
1275 #  define	MUTEX_INIT(x, y)	lock_alloc(&(x)->ipf_lk, \
1276 						   LOCK_ALLOC_PIN, \
1277 						   (u_short)y, 0); \
1278 					simple_lock_init((x)->ipf_lk)
1279 #  define	MUTEX_DESTROY(x)	lock_free(&(x)->ipf_lk)
1280 #  define	MUTEX_EXIT(x)		simple_unlock((x)->ipf_lk)
1281 #  define	MUTEX_NUKE(x)		bzero(&(x)->ipf_lk, sizeof((x)->ipf_lk))
1282 #   define	ATOMIC_INC64(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
1283 					  MUTEX_EXIT(&ipf_rw); }
1284 #   define	ATOMIC_DEC64(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
1285 					  MUTEX_EXIT(&ipf_rw); }
1286 #   define	ATOMIC_INC32(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
1287 					  MUTEX_EXIT(&ipf_rw); }
1288 #   define	ATOMIC_DEC32(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
1289 					  MUTEX_EXIT(&ipf_rw); }
1290 #   define	ATOMIC_INCL(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
1291 					  MUTEX_EXIT(&ipf_rw); }
1292 #   define	ATOMIC_DECL(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
1293 					  MUTEX_EXIT(&ipf_rw); }
1294 #   define	ATOMIC_INC(x)		{ MUTEX_ENTER(&ipf_rw); (x)++; \
1295 					  MUTEX_EXIT(&ipf_rw); }
1296 #   define	ATOMIC_DEC(x)		{ MUTEX_ENTER(&ipf_rw); (x)--; \
1297 					  MUTEX_EXIT(&ipf_rw); }
1298 #  define	SPL_NET(x)		x = splnet()
1299 #  define	SPL_IMP(x)		x = splimp()
1300 #  undef	SPL_X
1301 #  define	SPL_X(x)		splx(x)
1302 #  define	UIOMOVE(a,b,c,d)	uiomove((caddr_t)a,b,c,d)
1303 extern void* getifp __P((char *, int));
1304 #  define	GETIFP(n, v)		getifp(n, v)
1305 #  define	GET_MINOR		minor
1306 #  define	SLEEP(id, n)	sleepx((id), PZERO+1, 0)
1307 #  define	WAKEUP(id,x)	wakeup(id)
1308 #  define	COPYIN(a,b,c)	copyin((caddr_t)(a), (caddr_t)(b), (c))
1309 #  define	COPYOUT(a,b,c)	copyout((caddr_t)(a), (caddr_t)(b), (c))
1310 #  define	BCOPYIN(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
1311 #  define	BCOPYOUT(a,b,c)	bcopy((caddr_t)(a), (caddr_t)(b), (c))
1312 #  define	KMALLOC(a, b)	MALLOC((a), b, sizeof(*(a)), M_TEMP, M_NOWAIT)
1313 #  define	KMALLOCS(a, b, c)	MALLOC((a), b, (c), M_TEMP, \
1314 					    ((c) > 4096) ? M_WAITOK : M_NOWAIT)
1315 #  define	KFREE(x)	FREE((x), M_TEMP)
1316 #  define	KFREES(x,s)	FREE((x), M_TEMP)
1317 #  define	MSGDSIZE(x)	mbufchainlen(x)
1318 #  define	M_LEN(x)	(x)->m_len
1319 #  define	M_DUPLICATE(x)	m_copy((x), 0, M_COPYALL)
1320 #  define	GETKTIME(x)
1321 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1322 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
1323 #  define	IPF_PANIC(x,y)
1324 typedef struct mbuf mb_t;
1325 # endif /* _KERNEL */
1326 
1327 /*
1328  * These are from's Solaris' #defines for little endian.
1329  */
1330 #if !defined(IP6F_MORE_FRAG)
1331 # define	IP6F_MORE_FRAG		0x0100
1332 #endif
1333 #if !defined(IP6F_RESERVED_MASK)
1334 # define	IP6F_RESERVED_MASK	0x0600
1335 #endif
1336 #if !defined(IP6F_OFF_MASK)
1337 # define	IP6F_OFF_MASK		0xf8ff
1338 #endif
1339 
1340 struct ip6_ext {
1341 	u_char	ip6e_nxt;
1342 	u_char	ip6e_len;
1343 };
1344 
1345 typedef	int		ioctlcmd_t;
1346 typedef	int		minor_t;
1347 /*
1348  * Really, any arch where sizeof(long) != sizeof(int).
1349  */
1350 typedef unsigned int    u_32_t;
1351 # define	U_32_T	1
1352 
1353 # define OS_RECOGNISED 1
1354 #endif	/* _AIX51 */
1355 
1356 
1357 #ifndef	OS_RECOGNISED
1358 #error	ip_compat.h does not recognise this platform/OS.
1359 #endif
1360 
1361 
1362 /* ----------------------------------------------------------------------- */
1363 /*                           G E N E R I C                                 */
1364 /* ----------------------------------------------------------------------- */
1365 #ifndef OS_RECOGNISED
1366 #endif
1367 
1368 /*
1369  * For BSD kernels, if bpf is in the kernel, enable ipfilter to use bpf in
1370  * filter rules.
1371  */
1372 #if !defined(IPFILTER_BPF) && ((NBPF > 0) || (NBPFILTER > 0) || (DEV_BPF > 0))
1373 # define IPFILTER_BPF
1374 #endif
1375 
1376 /*
1377  * Userland locking primitives
1378  */
1379 typedef	struct	{
1380 	char	*eMm_owner;
1381 	char	*eMm_heldin;
1382 	u_int	eMm_magic;
1383 	int	eMm_held;
1384 	int	eMm_heldat;
1385 #ifdef __hpux
1386 	char	eMm_fill[8];
1387 #endif
1388 } eMmutex_t;
1389 
1390 typedef	struct	{
1391 	char	*eMrw_owner;
1392 	char	*eMrw_heldin;
1393 	u_int	eMrw_magic;
1394 	short	eMrw_read;
1395 	short	eMrw_write;
1396 	int	eMrw_heldat;
1397 #ifdef __hpux
1398 	char	eMm_fill[24];
1399 #endif
1400 } eMrwlock_t;
1401 
1402 typedef union {
1403 #ifdef KMUTEX_T
1404 	struct	{
1405 		KMUTEX_T	ipf_slk;
1406 		char		*ipf_lname;
1407 	} ipf_lkun_s;
1408 #endif
1409 	eMmutex_t	ipf_emu;
1410 } ipfmutex_t;
1411 
1412 typedef union {
1413 #ifdef KRWLOCK_T
1414 	struct	{
1415 		KRWLOCK_T	ipf_slk;
1416 		char		*ipf_lname;
1417 		int		ipf_sr;
1418 		int		ipf_sw;
1419 		u_int		ipf_magic;
1420 	} ipf_lkun_s;
1421 #endif
1422 	eMrwlock_t	ipf_emu;
1423 } ipfrwlock_t;
1424 
1425 #define	ipf_lk		ipf_lkun_s.ipf_slk
1426 #define	ipf_lname	ipf_lkun_s.ipf_lname
1427 #define	ipf_isr		ipf_lkun_s.ipf_sr
1428 #define	ipf_isw		ipf_lkun_s.ipf_sw
1429 #define	ipf_magic	ipf_lkun_s.ipf_magic
1430 
1431 #if !defined(__GNUC__) || \
1432     (defined(__FreeBSD_version) && (__FreeBSD_version >= 503000))
1433 # ifndef	INLINE
1434 #  define	INLINE
1435 # endif
1436 #else
1437 # define	INLINE	__inline__
1438 #endif
1439 
1440 #if defined(linux) && defined(_KERNEL)
1441 extern	INLINE	void	ipf_read_enter __P((ipfrwlock_t *));
1442 extern	INLINE	void	ipf_write_enter __P((ipfrwlock_t *));
1443 extern	INLINE	void	ipf_rw_exit __P((ipfrwlock_t *));
1444 extern	INLINE	void	ipf_rw_downgrade __P((ipfrwlock_t *));
1445 #endif
1446 
1447 /*
1448  * In a non-kernel environment, there are a lot of macros that need to be
1449  * filled in to be null-ops or to point to some compatibility function,
1450  * somewhere in userland.
1451  */
1452 #ifndef _KERNEL
1453 typedef	struct	mb_s	{
1454 	struct	mb_s	*mb_next;
1455 	int		mb_len;
1456 	u_long		mb_buf[2048];
1457 } mb_t;
1458 # undef		m_next
1459 # define	m_next		mb_next
1460 # define	MSGDSIZE(x)	(x)->mb_len	/* XXX - from ipt.c */
1461 # define	M_LEN(x)	(x)->mb_len
1462 # define	M_DUPLICATE(x)	(x)
1463 # define	GETKTIME(x)	gettimeofday((struct timeval *)(x), NULL)
1464 # undef		MTOD
1465 # define	MTOD(m, t)	((t)(m)->mb_buf)
1466 # define	FREE_MB_T(x)
1467 # define	SLEEP(x,y)	1;
1468 # define	WAKEUP(x,y)	;
1469 # define	IPF_PANIC(x,y)	;
1470 # define	PANIC(x,y)	;
1471 # define	SPL_NET(x)	;
1472 # define	SPL_IMP(x)	;
1473 # define	SPL_X(x)	;
1474 # define	KMALLOC(a,b)	(a) = (b)malloc(sizeof(*a))
1475 # define	KMALLOCS(a,b,c)	(a) = (b)malloc(c)
1476 # define	KFREE(x)	free(x)
1477 # define	KFREES(x,s)	free(x)
1478 # define	GETIFP(x, v, ifs)	get_unit(x,v, ifs)
1479 # define	COPYIN(a,b,c)	(bcopy((a), (b), (c)), 0)
1480 # define	COPYOUT(a,b,c)	(bcopy((a), (b), (c)), 0)
1481 # define	BCOPYIN(a,b,c)	(bcopy((a), (b), (c)), 0)
1482 # define	BCOPYOUT(a,b,c)	(bcopy((a), (b), (c)), 0)
1483 # define	COPYDATA(m, o, l, b)	bcopy(MTOD((mb_t *)m, char *) + (o), \
1484 					      (b), (l))
1485 # define	COPYBACK(m, o, l, b)	bcopy((b), \
1486 					      MTOD((mb_t *)m, char *) + (o), \
1487 					      (l))
1488 # define	UIOMOVE(a,b,c,d)	ipfuiomove(a,b,c,d)
1489 extern	void	m_copydata __P((mb_t *, int, int, caddr_t));
1490 extern	int	ipfuiomove __P((caddr_t, int, int, struct uio *));
1491 # ifndef CACHE_HASH
1492 #  define	CACHE_HASH(x)	((IFNAME(fin->fin_ifp)[0] + \
1493 				  ((struct ifnet *)fin->fin_ifp)->if_unit) & 7)
1494 # endif
1495 
1496 # define	MUTEX_DESTROY(x)	eMmutex_destroy(&(x)->ipf_emu)
1497 # define	MUTEX_ENTER(x)		eMmutex_enter(&(x)->ipf_emu, \
1498 						      __FILE__, __LINE__)
1499 # define	MUTEX_EXIT(x)		eMmutex_exit(&(x)->ipf_emu)
1500 # define	MUTEX_INIT(x,y)		eMmutex_init(&(x)->ipf_emu, y)
1501 # define	MUTEX_NUKE(x)		bzero((x), sizeof(*(x)))
1502 
1503 # define	MUTEX_DOWNGRADE(x)	eMrwlock_downgrade(&(x)->ipf_emu, \
1504 							   __FILE__, __LINE__)
1505 # define	READ_ENTER(x)		eMrwlock_read_enter(&(x)->ipf_emu, \
1506 							    __FILE__, __LINE__)
1507 # define	RWLOCK_INIT(x, y)	eMrwlock_init(&(x)->ipf_emu, y)
1508 # define	RWLOCK_EXIT(x)		eMrwlock_exit(&(x)->ipf_emu)
1509 # define	RW_DESTROY(x)		eMrwlock_destroy(&(x)->ipf_emu)
1510 # define	WRITE_ENTER(x)		eMrwlock_write_enter(&(x)->ipf_emu, \
1511 							     __FILE__, \
1512 							     __LINE__)
1513 
1514 # define	USE_MUTEXES		1
1515 
1516 extern void eMmutex_destroy __P((eMmutex_t *));
1517 extern void eMmutex_enter __P((eMmutex_t *, char *, int));
1518 extern void eMmutex_exit __P((eMmutex_t *));
1519 extern void eMmutex_init __P((eMmutex_t *, char *));
1520 extern void eMrwlock_destroy __P((eMrwlock_t *));
1521 extern void eMrwlock_exit __P((eMrwlock_t *));
1522 extern void eMrwlock_init __P((eMrwlock_t *, char *));
1523 extern void eMrwlock_read_enter __P((eMrwlock_t *, char *, int));
1524 extern void eMrwlock_write_enter __P((eMrwlock_t *, char *, int));
1525 extern void eMrwlock_downgrade __P((eMrwlock_t *, char *, int));
1526 
1527 #undef NET_IS_HCK_L3_FULL
1528 #define	NET_IS_HCK_L3_FULL(n, x) (0)
1529 #undef NET_IS_HCK_L3_PART
1530 #define	NET_IS_HCK_L3_PART(n, x) (0)
1531 #undef NET_IS_HCK_L4_FULL
1532 #define	NET_IS_HCK_L4_FULL(n, x) (0)
1533 #undef NET_IS_HCK_L4_PART
1534 #define	NET_IS_HCK_L4_PART(n, x) (0)
1535 
1536 #endif
1537 
1538 #define	MAX_IPV4HDR	((0xf << 2) + sizeof(struct icmp) + sizeof(ip_t) + 8)
1539 
1540 #ifndef	IP_OFFMASK
1541 # define	IP_OFFMASK	0x1fff
1542 #endif
1543 
1544 
1545 /*
1546  * On BSD's use quad_t as a guarantee for getting at least a 64bit sized
1547  * object.
1548  */
1549 #if	BSD > 199306
1550 # define	USE_QUAD_T
1551 # define	U_QUAD_T	u_quad_t
1552 # define	QUAD_T		quad_t
1553 #else /* BSD > 199306 */
1554 # define	U_QUAD_T	u_long
1555 # define	QUAD_T		long
1556 #endif /* BSD > 199306 */
1557 
1558 
1559 #ifdef	USE_INET6
1560 # if defined(__NetBSD__) || defined(__OpenBSD__) || defined(__FreeBSD__) || \
1561      defined(__osf__) || defined(linux)
1562 #  include <netinet/ip6.h>
1563 #  include <netinet/icmp6.h>
1564 #  if !defined(linux)
1565 #   if defined(_KERNEL) && !defined(__osf__)
1566 #    include <netinet6/ip6_var.h>
1567 #   endif
1568 #  endif
1569 typedef	struct ip6_hdr	ip6_t;
1570 # endif
1571 #endif
1572 
1573 #ifndef	MAX
1574 # define	MAX(a,b)	(((a) > (b)) ? (a) : (b))
1575 #endif
1576 
1577 #if defined(_KERNEL)
1578 # ifdef MENTAT
1579 #  define	COPYDATA	mb_copydata
1580 #  define	COPYBACK	mb_copyback
1581 # else
1582 #  define	COPYDATA	m_copydata
1583 #  define	COPYBACK	m_copyback
1584 # endif
1585 # if (BSD >= 199306) || defined(__FreeBSD__)
1586 #  if (defined(__NetBSD_Version__) && (__NetBSD_Version__ < 105180000)) || \
1587        defined(__FreeBSD__) || (defined(OpenBSD) && (OpenBSD < 200206)) || \
1588        defined(_BSDI_VERSION)
1589 #   include <vm/vm.h>
1590 #  endif
1591 #  if !defined(__FreeBSD__) || (defined (__FreeBSD_version) && \
1592       (__FreeBSD_version >= 300000))
1593 #   if (defined(__NetBSD_Version__) && (__NetBSD_Version__ >= 105180000)) || \
1594        (defined(OpenBSD) && (OpenBSD >= 200111))
1595 #    include <uvm/uvm_extern.h>
1596 #   else
1597 #    include <vm/vm_extern.h>
1598 extern  vm_map_t        kmem_map;
1599 #   endif
1600 #   include <sys/proc.h>
1601 #  else /* !__FreeBSD__ || (__FreeBSD__ && __FreeBSD_version >= 300000) */
1602 #   include <vm/vm_kern.h>
1603 #  endif /* !__FreeBSD__ || (__FreeBSD__ && __FreeBSD_version >= 300000) */
1604 
1605 #  ifdef IPFILTER_M_IPFILTER
1606 #    include <sys/malloc.h>
1607 MALLOC_DECLARE(M_IPFILTER);
1608 #    define	_M_IPF		M_IPFILTER
1609 #  else /* IPFILTER_M_IPFILTER */
1610 #   ifdef M_PFIL
1611 #    define	_M_IPF		M_PFIL
1612 #   else
1613 #    ifdef M_IPFILTER
1614 #     define	_M_IPF		M_IPFILTER
1615 #    else
1616 #     define	_M_IPF		M_TEMP
1617 #    endif /* M_IPFILTER */
1618 #   endif /* M_PFIL */
1619 #  endif /* IPFILTER_M_IPFILTER */
1620 #  define	KMALLOC(a, b)	MALLOC((a), b, sizeof(*(a)), _M_IPF, M_NOWAIT)
1621 #  define	KMALLOCS(a, b, c)	MALLOC((a), b, (c), _M_IPF, M_NOWAIT)
1622 #  define	KFREE(x)	FREE((x), _M_IPF)
1623 #  define	KFREES(x,s)	FREE((x), _M_IPF)
1624 #  define	UIOMOVE(a,b,c,d)	uiomove(a,b,d)
1625 #  define	SLEEP(id, n)	tsleep((id), PPAUSE|PCATCH, n, 0)
1626 #  define	WAKEUP(id,x)	wakeup(id+x)
1627 #  define	GETIFP(n, v, ifs)	ifunit(n)
1628 # endif /* (Free)BSD */
1629 
1630 # if !defined(USE_MUTEXES) && !defined(SPL_NET)
1631 #  if (defined(NetBSD) && (NetBSD <= 1991011) && (NetBSD >= 199407)) || \
1632       (defined(OpenBSD) && (OpenBSD >= 200006))
1633 #   define	SPL_NET(x)	x = splsoftnet()
1634 #  else
1635 #   define	SPL_IMP(x)	x = splimp()
1636 #   define	SPL_NET(x)	x = splnet()
1637 #  endif /* NetBSD && (NetBSD <= 1991011) && (NetBSD >= 199407) */
1638 #  define	SPL_X(x)	(void) splx(x)
1639 # endif /* !USE_MUTEXES */
1640 
1641 # ifndef FREE_MB_T
1642 #  define	FREE_MB_T(m)	m_freem(m)
1643 # endif
1644 
1645 # ifndef MTOD
1646 #  define	MTOD(m,t)	mtod(m,t)
1647 # endif
1648 
1649 # ifndef COPYIN
1650 #  define	COPYIN(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
1651 #  define	COPYOUT(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
1652 #  define	BCOPYIN(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
1653 #  define	BCOPYOUT(a,b,c)	(bcopy((caddr_t)(a), (caddr_t)(b), (c)), 0)
1654 # endif
1655 
1656 # ifndef KMALLOC
1657 #  define	KMALLOC(a,b)	(a) = (b)new_kmem_alloc(sizeof(*(a)), \
1658 							KMEM_NOSLEEP)
1659 #  define	KMALLOCS(a,b,c)	(a) = (b)new_kmem_alloc((c), KMEM_NOSLEEP)
1660 # endif
1661 
1662 # ifndef	GET_MINOR
1663 #  define	GET_MINOR(x)	minor(x)
1664 # endif
1665 # define	PANIC(x,y)	if (x) panic y
1666 #endif /* _KERNEL */
1667 
1668 #ifndef	IFNAME
1669 # define	IFNAME(x)	((struct ifnet *)x)->if_name
1670 #endif
1671 #ifndef	COPYIFNAME
1672 # define	NEED_FRGETIFNAME
1673 extern	char	*fr_getifname __P((struct ifnet *, char *));
1674 # define	COPYIFNAME(x, b, v) \
1675 				fr_getifname((struct ifnet *)x, b)
1676 #endif
1677 
1678 #ifndef ASSERT
1679 # define	ASSERT(x)
1680 #endif
1681 
1682 /*
1683  * Because the ctype(3) posix definition, if used "safely" in code everywhere,
1684  * would mean all normal code that walks through strings needed casts.  Yuck.
1685  */
1686 #define	ISALNUM(x)	isalnum((u_char)(x))
1687 #define	ISALPHA(x)	isalpha((u_char)(x))
1688 #define	ISASCII(x)	isascii((u_char)(x))
1689 #define	ISDIGIT(x)	isdigit((u_char)(x))
1690 #define	ISPRINT(x)	isprint((u_char)(x))
1691 #define	ISSPACE(x)	isspace((u_char)(x))
1692 #define	ISUPPER(x)	isupper((u_char)(x))
1693 #define	ISXDIGIT(x)	isxdigit((u_char)(x))
1694 #define	ISLOWER(x)	islower((u_char)(x))
1695 #define	TOUPPER(x)	toupper((u_char)(x))
1696 #define	TOLOWER(x)	tolower((u_char)(x))
1697 
1698 /*
1699  * If mutexes aren't being used, turn all the mutex functions into null-ops.
1700  */
1701 #if !defined(USE_MUTEXES)
1702 # define	USE_SPL			1
1703 # undef		RW_DESTROY
1704 # undef		MUTEX_INIT
1705 # undef		MUTEX_NUKE
1706 # undef		MUTEX_DESTROY
1707 # define	MUTEX_ENTER(x)		;
1708 # define	READ_ENTER(x)		;
1709 # define	WRITE_ENTER(x)		;
1710 # define	MUTEX_DOWNGRADE(x)	;
1711 # define	RWLOCK_INIT(x, y)	;
1712 # define	RWLOCK_EXIT(x)		;
1713 # define	RW_DESTROY(x)		;
1714 # define	MUTEX_EXIT(x)		;
1715 # define	MUTEX_INIT(x,y)		;
1716 # define	MUTEX_DESTROY(x)	;
1717 # define	MUTEX_NUKE(x)		;
1718 #endif /* !USE_MUTEXES */
1719 #ifndef	ATOMIC_INC
1720 # define	ATOMIC_INC(x)		(x)++
1721 # define	ATOMIC_DEC(x)		(x)--
1722 #endif
1723 
1724 #if defined(USE_SPL) && defined(_KERNEL)
1725 # define	SPL_INT(x)	int x
1726 #else
1727 # define	SPL_INT(x)
1728 #endif
1729 
1730 /*
1731  * If there are no atomic operations for bit sizes defined, define them to all
1732  * use a generic one that works for all sizes.
1733  */
1734 #ifndef	ATOMIC_INCL
1735 # define	ATOMIC_INCL		ATOMIC_INC
1736 # define	ATOMIC_INC64		ATOMIC_INC
1737 # define	ATOMIC_INC32		ATOMIC_INC
1738 # define	ATOMIC_INC16		ATOMIC_INC
1739 # define	ATOMIC_DECL		ATOMIC_DEC
1740 # define	ATOMIC_DEC64		ATOMIC_DEC
1741 # define	ATOMIC_DEC32		ATOMIC_DEC
1742 # define	ATOMIC_DEC16		ATOMIC_DEC
1743 #endif
1744 
1745 #ifndef HDR_T_PRIVATE
1746 typedef	struct	tcphdr	tcphdr_t;
1747 typedef	struct	udphdr	udphdr_t;
1748 #endif
1749 typedef	struct	icmp	icmphdr_t;
1750 typedef	struct	ip	ip_t;
1751 typedef	struct	ether_header	ether_header_t;
1752 typedef	struct	tcpiphdr	tcpiphdr_t;
1753 
1754 #ifndef	FR_GROUPLEN
1755 # define	FR_GROUPLEN	16
1756 #endif
1757 
1758 #ifdef offsetof
1759 # undef	offsetof
1760 #endif
1761 #ifndef offsetof
1762 # define offsetof(t,m) (size_t)((&((t *)0)->m))
1763 #endif
1764 
1765 /*
1766  * This set of macros has been brought about because on Tru64 it is not
1767  * possible to easily assign or examine values in a structure that are
1768  * bit fields.
1769  */
1770 #ifndef IP_V
1771 # define	IP_V(x)		(x)->ip_v
1772 #endif
1773 #ifndef	IP_V_A
1774 # define	IP_V_A(x,y)	(x)->ip_v = (y)
1775 #endif
1776 #ifndef	IP_HL
1777 # define	IP_HL(x)	(x)->ip_hl
1778 #endif
1779 #ifndef	IP_HL_A
1780 # define	IP_HL_A(x,y)	(x)->ip_hl = ((y) & 0xf)
1781 #endif
1782 #ifndef	TCP_X2
1783 # define	TCP_X2(x)	(x)->th_x2
1784 #endif
1785 #ifndef	TCP_X2_A
1786 # define	TCP_X2_A(x,y)	(x)->th_x2 = (y)
1787 #endif
1788 #ifndef	TCP_OFF
1789 # define	TCP_OFF(x)	(x)->th_off
1790 #endif
1791 #ifndef	TCP_OFF_A
1792 # define	TCP_OFF_A(x,y)	(x)->th_off = (y)
1793 #endif
1794 #define	IPMINLEN(i, h)	((i)->ip_len >= (IP_HL(i) * 4 + sizeof(struct h)))
1795 
1796 
1797 /*
1798  * XXX - This is one of those *awful* hacks which nobody likes
1799  */
1800 #ifdef	ultrix
1801 #define	A_A
1802 #else
1803 #define	A_A	&
1804 #endif
1805 
1806 #define	TCPF_ALL	(TH_FIN|TH_SYN|TH_RST|TH_PUSH|TH_ACK|TH_URG|\
1807 			 TH_ECN|TH_CWR)
1808 
1809 #if (BSD >= 199306) && !defined(m_act)
1810 # define	m_act	m_nextpkt
1811 #endif
1812 
1813 /*
1814  * Security Options for Intenet Protocol (IPSO) as defined in RFC 1108.
1815  *
1816  * Basic Option
1817  *
1818  * 00000001   -   (Reserved 4)
1819  * 00111101   -   Top Secret
1820  * 01011010   -   Secret
1821  * 10010110   -   Confidential
1822  * 01100110   -   (Reserved 3)
1823  * 11001100   -   (Reserved 2)
1824  * 10101011   -   Unclassified
1825  * 11110001   -   (Reserved 1)
1826  */
1827 #define	IPSO_CLASS_RES4		0x01
1828 #define	IPSO_CLASS_TOPS		0x3d
1829 #define	IPSO_CLASS_SECR		0x5a
1830 #define	IPSO_CLASS_CONF		0x96
1831 #define	IPSO_CLASS_RES3		0x66
1832 #define	IPSO_CLASS_RES2		0xcc
1833 #define	IPSO_CLASS_UNCL		0xab
1834 #define	IPSO_CLASS_RES1		0xf1
1835 
1836 #define	IPSO_AUTH_GENSER	0x80
1837 #define	IPSO_AUTH_ESI		0x40
1838 #define	IPSO_AUTH_SCI		0x20
1839 #define	IPSO_AUTH_NSA		0x10
1840 #define	IPSO_AUTH_DOE		0x08
1841 #define	IPSO_AUTH_UN		0x06
1842 #define	IPSO_AUTH_FTE		0x01
1843 
1844 /*
1845  * IP option #defines
1846  */
1847 #undef	IPOPT_RR
1848 #define	IPOPT_RR	7
1849 #undef	IPOPT_ZSU
1850 #define	IPOPT_ZSU	10	/* ZSU */
1851 #undef	IPOPT_MTUP
1852 #define	IPOPT_MTUP	11	/* MTUP */
1853 #undef	IPOPT_MTUR
1854 #define	IPOPT_MTUR	12	/* MTUR */
1855 #undef	IPOPT_ENCODE
1856 #define	IPOPT_ENCODE	15	/* ENCODE */
1857 #undef	IPOPT_TS
1858 #define	IPOPT_TS	68
1859 #undef	IPOPT_TR
1860 #define	IPOPT_TR	82	/* TR */
1861 #undef	IPOPT_SECURITY
1862 #define	IPOPT_SECURITY	130
1863 #undef	IPOPT_LSRR
1864 #define	IPOPT_LSRR	131
1865 #undef	IPOPT_E_SEC
1866 #define	IPOPT_E_SEC	133	/* E-SEC */
1867 #undef	IPOPT_CIPSO
1868 #define	IPOPT_CIPSO	134	/* CIPSO */
1869 #undef	IPOPT_SATID
1870 #define	IPOPT_SATID	136
1871 #ifndef	IPOPT_SID
1872 # define	IPOPT_SID	IPOPT_SATID
1873 #endif
1874 #undef	IPOPT_SSRR
1875 #define	IPOPT_SSRR	137
1876 #undef	IPOPT_ADDEXT
1877 #define	IPOPT_ADDEXT	147	/* ADDEXT */
1878 #undef	IPOPT_VISA
1879 #define	IPOPT_VISA	142	/* VISA */
1880 #undef	IPOPT_IMITD
1881 #define	IPOPT_IMITD	144	/* IMITD */
1882 #undef	IPOPT_EIP
1883 #define	IPOPT_EIP	145	/* EIP */
1884 #undef	IPOPT_RTRALRT
1885 #define	IPOPT_RTRALRT	148	/* RTRALRT */
1886 #undef	IPOPT_SDB
1887 #define	IPOPT_SDB	149
1888 #undef	IPOPT_NSAPA
1889 #define	IPOPT_NSAPA	150
1890 #undef	IPOPT_DPS
1891 #define	IPOPT_DPS	151
1892 #undef	IPOPT_UMP
1893 #define	IPOPT_UMP	152
1894 #undef	IPOPT_FINN
1895 #define	IPOPT_FINN	205	/* FINN */
1896 
1897 #ifndef TCPOPT_EOL
1898 # define TCPOPT_EOL		0
1899 #endif
1900 #ifndef TCPOPT_NOP
1901 # define TCPOPT_NOP		1
1902 #endif
1903 #ifndef TCPOPT_MAXSEG
1904 # define TCPOPT_MAXSEG		2
1905 #endif
1906 #ifndef TCPOLEN_MAXSEG
1907 # define TCPOLEN_MAXSEG		4
1908 #endif
1909 #ifndef TCPOPT_WINDOW
1910 # define TCPOPT_WINDOW		3
1911 #endif
1912 #ifndef TCPOLEN_WINDOW
1913 # define TCPOLEN_WINDOW		3
1914 #endif
1915 #ifndef TCPOPT_SACK_PERMITTED
1916 # define TCPOPT_SACK_PERMITTED	4
1917 #endif
1918 #ifndef TCPOLEN_SACK_PERMITTED
1919 # define TCPOLEN_SACK_PERMITTED	2
1920 #endif
1921 #ifndef TCPOPT_SACK
1922 # define TCPOPT_SACK		5
1923 #endif
1924 #ifndef TCPOPT_TIMESTAMP
1925 # define TCPOPT_TIMESTAMP	8
1926 #endif
1927 
1928 #ifndef	ICMP_MINLEN
1929 # define	ICMP_MINLEN	8
1930 #endif
1931 #ifndef	ICMP_ECHOREPLY
1932 # define	ICMP_ECHOREPLY	0
1933 #endif
1934 #ifndef	ICMP_UNREACH
1935 # define	ICMP_UNREACH	3
1936 #endif
1937 #ifndef	ICMP_UNREACH_NET
1938 # define	ICMP_UNREACH_NET	0
1939 #endif
1940 #ifndef	ICMP_UNREACH_HOST
1941 # define	ICMP_UNREACH_HOST	1
1942 #endif
1943 #ifndef	ICMP_UNREACH_PROTOCOL
1944 # define	ICMP_UNREACH_PROTOCOL	2
1945 #endif
1946 #ifndef	ICMP_UNREACH_PORT
1947 # define	ICMP_UNREACH_PORT	3
1948 #endif
1949 #ifndef	ICMP_UNREACH_NEEDFRAG
1950 # define	ICMP_UNREACH_NEEDFRAG	4
1951 #endif
1952 #ifndef	ICMP_UNREACH_SRCFAIL
1953 # define	ICMP_UNREACH_SRCFAIL	5
1954 #endif
1955 #ifndef	ICMP_UNREACH_NET_UNKNOWN
1956 # define	ICMP_UNREACH_NET_UNKNOWN	6
1957 #endif
1958 #ifndef	ICMP_UNREACH_HOST_UNKNOWN
1959 # define	ICMP_UNREACH_HOST_UNKNOWN	7
1960 #endif
1961 #ifndef	ICMP_UNREACH_ISOLATED
1962 # define	ICMP_UNREACH_ISOLATED	8
1963 #endif
1964 #ifndef	ICMP_UNREACH_NET_PROHIB
1965 # define	ICMP_UNREACH_NET_PROHIB	9
1966 #endif
1967 #ifndef	ICMP_UNREACH_HOST_PROHIB
1968 # define	ICMP_UNREACH_HOST_PROHIB	10
1969 #endif
1970 #ifndef	ICMP_UNREACH_TOSNET
1971 # define	ICMP_UNREACH_TOSNET	11
1972 #endif
1973 #ifndef	ICMP_UNREACH_TOSHOST
1974 # define	ICMP_UNREACH_TOSHOST	12
1975 #endif
1976 #ifndef	ICMP_UNREACH_ADMIN_PROHIBIT
1977 # define	ICMP_UNREACH_ADMIN_PROHIBIT	13
1978 #endif
1979 #ifndef	ICMP_UNREACH_FILTER
1980 # define	ICMP_UNREACH_FILTER	13
1981 #endif
1982 #ifndef	ICMP_UNREACH_HOST_PRECEDENCE
1983 # define	ICMP_UNREACH_HOST_PRECEDENCE	14
1984 #endif
1985 #ifndef	ICMP_UNREACH_PRECEDENCE_CUTOFF
1986 # define	ICMP_UNREACH_PRECEDENCE_CUTOFF	15
1987 #endif
1988 #ifndef	ICMP_SOURCEQUENCH
1989 # define	ICMP_SOURCEQUENCH	4
1990 #endif
1991 #ifndef	ICMP_REDIRECT_NET
1992 # define	ICMP_REDIRECT_NET	0
1993 #endif
1994 #ifndef	ICMP_REDIRECT_HOST
1995 # define	ICMP_REDIRECT_HOST	1
1996 #endif
1997 #ifndef	ICMP_REDIRECT_TOSNET
1998 # define	ICMP_REDIRECT_TOSNET	2
1999 #endif
2000 #ifndef	ICMP_REDIRECT_TOSHOST
2001 # define	ICMP_REDIRECT_TOSHOST	3
2002 #endif
2003 #ifndef	ICMP_ALTHOSTADDR
2004 # define	ICMP_ALTHOSTADDR	6
2005 #endif
2006 #ifndef	ICMP_TIMXCEED
2007 # define	ICMP_TIMXCEED	11
2008 #endif
2009 #ifndef	ICMP_TIMXCEED_INTRANS
2010 # define	ICMP_TIMXCEED_INTRANS	0
2011 #endif
2012 #ifndef	ICMP_TIMXCEED_REASS
2013 # define		ICMP_TIMXCEED_REASS	1
2014 #endif
2015 #ifndef	ICMP_PARAMPROB
2016 # define	ICMP_PARAMPROB	12
2017 #endif
2018 #ifndef	ICMP_PARAMPROB_ERRATPTR
2019 # define	ICMP_PARAMPROB_ERRATPTR	0
2020 #endif
2021 #ifndef	ICMP_PARAMPROB_OPTABSENT
2022 # define	ICMP_PARAMPROB_OPTABSENT	1
2023 #endif
2024 #ifndef	ICMP_PARAMPROB_LENGTH
2025 # define	ICMP_PARAMPROB_LENGTH	2
2026 #endif
2027 #ifndef ICMP_TSTAMP
2028 # define	ICMP_TSTAMP	13
2029 #endif
2030 #ifndef ICMP_TSTAMPREPLY
2031 # define	ICMP_TSTAMPREPLY	14
2032 #endif
2033 #ifndef ICMP_IREQ
2034 # define	ICMP_IREQ	15
2035 #endif
2036 #ifndef ICMP_IREQREPLY
2037 # define	ICMP_IREQREPLY	16
2038 #endif
2039 #ifndef	ICMP_MASKREQ
2040 # define	ICMP_MASKREQ	17
2041 #endif
2042 #ifndef ICMP_MASKREPLY
2043 # define	ICMP_MASKREPLY	18
2044 #endif
2045 #ifndef	ICMP_TRACEROUTE
2046 # define	ICMP_TRACEROUTE	30
2047 #endif
2048 #ifndef	ICMP_DATACONVERR
2049 # define	ICMP_DATACONVERR	31
2050 #endif
2051 #ifndef	ICMP_MOBILE_REDIRECT
2052 # define	ICMP_MOBILE_REDIRECT	32
2053 #endif
2054 #ifndef	ICMP_IPV6_WHEREAREYOU
2055 # define	ICMP_IPV6_WHEREAREYOU	33
2056 #endif
2057 #ifndef	ICMP_IPV6_IAMHERE
2058 # define	ICMP_IPV6_IAMHERE	34
2059 #endif
2060 #ifndef	ICMP_MOBILE_REGREQUEST
2061 # define	ICMP_MOBILE_REGREQUEST	35
2062 #endif
2063 #ifndef	ICMP_MOBILE_REGREPLY
2064 # define	ICMP_MOBILE_REGREPLY	36
2065 #endif
2066 #ifndef	ICMP_SKIP
2067 # define	ICMP_SKIP	39
2068 #endif
2069 #ifndef	ICMP_PHOTURIS
2070 # define	ICMP_PHOTURIS	40
2071 #endif
2072 #ifndef	ICMP_PHOTURIS_UNKNOWN_INDEX
2073 # define	ICMP_PHOTURIS_UNKNOWN_INDEX	1
2074 #endif
2075 #ifndef	ICMP_PHOTURIS_AUTH_FAILED
2076 # define	ICMP_PHOTURIS_AUTH_FAILED	2
2077 #endif
2078 #ifndef	ICMP_PHOTURIS_DECRYPT_FAILED
2079 # define	ICMP_PHOTURIS_DECRYPT_FAILED	3
2080 #endif
2081 #ifndef	IPVERSION
2082 # define	IPVERSION	4
2083 #endif
2084 #ifndef	IPOPT_MINOFF
2085 # define	IPOPT_MINOFF	4
2086 #endif
2087 #ifndef	IPOPT_COPIED
2088 # define	IPOPT_COPIED(x)	((x)&0x80)
2089 #endif
2090 #ifndef	IPOPT_EOL
2091 # define	IPOPT_EOL	0
2092 #endif
2093 #ifndef	IPOPT_NOP
2094 # define	IPOPT_NOP	1
2095 #endif
2096 #ifndef	IP_MF
2097 # define	IP_MF	((u_short)0x2000)
2098 #endif
2099 #ifndef	ETHERTYPE_IP
2100 # define	ETHERTYPE_IP	((u_short)0x0800)
2101 #endif
2102 #ifndef	TH_FIN
2103 # define	TH_FIN	0x01
2104 #endif
2105 #ifndef	TH_SYN
2106 # define	TH_SYN	0x02
2107 #endif
2108 #ifndef	TH_RST
2109 # define	TH_RST	0x04
2110 #endif
2111 #ifndef	TH_PUSH
2112 # define	TH_PUSH	0x08
2113 #endif
2114 #ifndef	TH_ACK
2115 # define	TH_ACK	0x10
2116 #endif
2117 #ifndef	TH_URG
2118 # define	TH_URG	0x20
2119 #endif
2120 #undef	TH_ACKMASK
2121 #define	TH_ACKMASK	(TH_FIN|TH_SYN|TH_RST|TH_ACK)
2122 
2123 #ifndef	IPOPT_EOL
2124 # define	IPOPT_EOL	0
2125 #endif
2126 #ifndef	IPOPT_NOP
2127 # define	IPOPT_NOP	1
2128 #endif
2129 #ifndef	IPOPT_RR
2130 # define	IPOPT_RR	7
2131 #endif
2132 #ifndef	IPOPT_TS
2133 # define	IPOPT_TS	68
2134 #endif
2135 #ifndef	IPOPT_SECURITY
2136 # define	IPOPT_SECURITY	130
2137 #endif
2138 #ifndef	IPOPT_LSRR
2139 # define	IPOPT_LSRR	131
2140 #endif
2141 #ifndef	IPOPT_SATID
2142 # define	IPOPT_SATID	136
2143 #endif
2144 #ifndef	IPOPT_SSRR
2145 # define	IPOPT_SSRR	137
2146 #endif
2147 #ifndef	IPOPT_SECUR_UNCLASS
2148 # define	IPOPT_SECUR_UNCLASS	((u_short)0x0000)
2149 #endif
2150 #ifndef	IPOPT_SECUR_CONFID
2151 # define	IPOPT_SECUR_CONFID	((u_short)0xf135)
2152 #endif
2153 #ifndef	IPOPT_SECUR_EFTO
2154 # define	IPOPT_SECUR_EFTO	((u_short)0x789a)
2155 #endif
2156 #ifndef	IPOPT_SECUR_MMMM
2157 # define	IPOPT_SECUR_MMMM	((u_short)0xbc4d)
2158 #endif
2159 #ifndef	IPOPT_SECUR_RESTR
2160 # define	IPOPT_SECUR_RESTR	((u_short)0xaf13)
2161 #endif
2162 #ifndef	IPOPT_SECUR_SECRET
2163 # define	IPOPT_SECUR_SECRET	((u_short)0xd788)
2164 #endif
2165 #ifndef IPOPT_SECUR_TOPSECRET
2166 # define	IPOPT_SECUR_TOPSECRET	((u_short)0x6bc5)
2167 #endif
2168 #ifndef IPOPT_OLEN
2169 # define	IPOPT_OLEN	1
2170 #endif
2171 #ifndef	IPPROTO_HOPOPTS
2172 # define	IPPROTO_HOPOPTS	0
2173 #endif
2174 #ifndef	IPPROTO_ENCAP
2175 # define	IPPROTO_ENCAP	4
2176 #endif
2177 #ifndef	IPPROTO_IPV6
2178 # define	IPPROTO_IPV6	41
2179 #endif
2180 #ifndef	IPPROTO_ROUTING
2181 # define	IPPROTO_ROUTING	43
2182 #endif
2183 #ifndef	IPPROTO_FRAGMENT
2184 # define	IPPROTO_FRAGMENT	44
2185 #endif
2186 #ifndef	IPPROTO_GRE
2187 # define	IPPROTO_GRE	47	/* GRE encaps RFC 1701 */
2188 #endif
2189 #ifndef	IPPROTO_ESP
2190 # define	IPPROTO_ESP	50
2191 #endif
2192 #ifndef	IPPROTO_AH
2193 # define	IPPROTO_AH	51
2194 #endif
2195 #ifndef	IPPROTO_ICMPV6
2196 # define	IPPROTO_ICMPV6	58
2197 #endif
2198 #ifndef	IPPROTO_NONE
2199 # define	IPPROTO_NONE	59
2200 #endif
2201 #ifndef	IPPROTO_DSTOPTS
2202 # define	IPPROTO_DSTOPTS	60
2203 #endif
2204 #ifndef	IPPROTO_FRAGMENT
2205 # define	IPPROTO_FRAGMENT	44
2206 #endif
2207 #ifndef	ICMP_ROUTERADVERT
2208 # define	ICMP_ROUTERADVERT	9
2209 #endif
2210 #ifndef	ICMP_ROUTERSOLICIT
2211 # define	ICMP_ROUTERSOLICIT	10
2212 #endif
2213 #ifndef	ICMP6_DST_UNREACH
2214 # define	ICMP6_DST_UNREACH	1
2215 #endif
2216 #ifndef	ICMP6_PACKET_TOO_BIG
2217 # define	ICMP6_PACKET_TOO_BIG	2
2218 #endif
2219 #ifndef	ICMP6_TIME_EXCEEDED
2220 # define	ICMP6_TIME_EXCEEDED	3
2221 #endif
2222 #ifndef	ICMP6_PARAM_PROB
2223 # define	ICMP6_PARAM_PROB	4
2224 #endif
2225 
2226 #ifndef	ICMP6_ECHO_REQUEST
2227 # define	ICMP6_ECHO_REQUEST	128
2228 #endif
2229 #ifndef	ICMP6_ECHO_REPLY
2230 # define	ICMP6_ECHO_REPLY	129
2231 #endif
2232 #ifndef	ICMP6_MEMBERSHIP_QUERY
2233 # define	ICMP6_MEMBERSHIP_QUERY	130
2234 #endif
2235 #ifndef	MLD6_LISTENER_QUERY
2236 # define	MLD6_LISTENER_QUERY	130
2237 #endif
2238 #ifndef	ICMP6_MEMBERSHIP_REPORT
2239 # define	ICMP6_MEMBERSHIP_REPORT	131
2240 #endif
2241 #ifndef	MLD6_LISTENER_REPORT
2242 # define	MLD6_LISTENER_REPORT	131
2243 #endif
2244 #ifndef	ICMP6_MEMBERSHIP_REDUCTION
2245 # define	ICMP6_MEMBERSHIP_REDUCTION	132
2246 #endif
2247 #ifndef	MLD6_LISTENER_DONE
2248 # define	MLD6_LISTENER_DONE	132
2249 #endif
2250 #ifndef	ND_ROUTER_SOLICIT
2251 # define	ND_ROUTER_SOLICIT	133
2252 #endif
2253 #ifndef	ND_ROUTER_ADVERT
2254 # define	ND_ROUTER_ADVERT	134
2255 #endif
2256 #ifndef	ND_NEIGHBOR_SOLICIT
2257 # define	ND_NEIGHBOR_SOLICIT	135
2258 #endif
2259 #ifndef	ND_NEIGHBOR_ADVERT
2260 # define	ND_NEIGHBOR_ADVERT	136
2261 #endif
2262 #ifndef	ND_REDIRECT
2263 # define	ND_REDIRECT	137
2264 #endif
2265 #ifndef	ICMP6_ROUTER_RENUMBERING
2266 # define	ICMP6_ROUTER_RENUMBERING	138
2267 #endif
2268 #ifndef	ICMP6_WRUREQUEST
2269 # define	ICMP6_WRUREQUEST	139
2270 #endif
2271 #ifndef	ICMP6_WRUREPLY
2272 # define	ICMP6_WRUREPLY		140
2273 #endif
2274 #ifndef	ICMP6_FQDN_QUERY
2275 # define	ICMP6_FQDN_QUERY	139
2276 #endif
2277 #ifndef	ICMP6_FQDN_REPLY
2278 # define	ICMP6_FQDN_REPLY	140
2279 #endif
2280 #ifndef	ICMP6_NI_QUERY
2281 # define	ICMP6_NI_QUERY		139
2282 #endif
2283 #ifndef	ICMP6_NI_REPLY
2284 # define	ICMP6_NI_REPLY		140
2285 #endif
2286 #ifndef	MLD6_MTRACE_RESP
2287 # define	MLD6_MTRACE_RESP	200
2288 #endif
2289 #ifndef	MLD6_MTRACE
2290 # define	MLD6_MTRACE		201
2291 #endif
2292 #ifndef	ICMP6_HADISCOV_REQUEST
2293 # define	ICMP6_HADISCOV_REQUEST	202
2294 #endif
2295 #ifndef	ICMP6_HADISCOV_REPLY
2296 # define	ICMP6_HADISCOV_REPLY	203
2297 #endif
2298 #ifndef	ICMP6_MOBILEPREFIX_SOLICIT
2299 # define	ICMP6_MOBILEPREFIX_SOLICIT	204
2300 #endif
2301 #ifndef	ICMP6_MOBILEPREFIX_ADVERT
2302 # define	ICMP6_MOBILEPREFIX_ADVERT	205
2303 #endif
2304 #ifndef	ICMP6_MAXTYPE
2305 # define	ICMP6_MAXTYPE		205
2306 #endif
2307 
2308 #ifndef	ICMP6_DST_UNREACH_NOROUTE
2309 # define	ICMP6_DST_UNREACH_NOROUTE	0
2310 #endif
2311 #ifndef	ICMP6_DST_UNREACH_ADMIN
2312 # define	ICMP6_DST_UNREACH_ADMIN		1
2313 #endif
2314 #ifndef	ICMP6_DST_UNREACH_NOTNEIGHBOR
2315 # define	ICMP6_DST_UNREACH_NOTNEIGHBOR	2
2316 #endif
2317 #ifndef	ICMP6_DST_UNREACH_BEYONDSCOPE
2318 # define	ICMP6_DST_UNREACH_BEYONDSCOPE	2
2319 #endif
2320 #ifndef	ICMP6_DST_UNREACH_ADDR
2321 # define	ICMP6_DST_UNREACH_ADDR		3
2322 #endif
2323 #ifndef	ICMP6_DST_UNREACH_NOPORT
2324 # define	ICMP6_DST_UNREACH_NOPORT	4
2325 #endif
2326 #ifndef	ICMP6_TIME_EXCEED_TRANSIT
2327 # define	ICMP6_TIME_EXCEED_TRANSIT	0
2328 #endif
2329 #ifndef	ICMP6_TIME_EXCEED_REASSEMBLY
2330 # define	ICMP6_TIME_EXCEED_REASSEMBLY	1
2331 #endif
2332 
2333 #ifndef	ICMP6_NI_SUCCESS
2334 # define	ICMP6_NI_SUCCESS	0
2335 #endif
2336 #ifndef	ICMP6_NI_REFUSED
2337 # define	ICMP6_NI_REFUSED	1
2338 #endif
2339 #ifndef	ICMP6_NI_UNKNOWN
2340 # define	ICMP6_NI_UNKNOWN	2
2341 #endif
2342 
2343 #ifndef	ICMP6_ROUTER_RENUMBERING_COMMAND
2344 # define	ICMP6_ROUTER_RENUMBERING_COMMAND	0
2345 #endif
2346 #ifndef	ICMP6_ROUTER_RENUMBERING_RESULT
2347 # define	ICMP6_ROUTER_RENUMBERING_RESULT	1
2348 #endif
2349 #ifndef	ICMP6_ROUTER_RENUMBERING_SEQNUM_RESET
2350 # define	ICMP6_ROUTER_RENUMBERING_SEQNUM_RESET	255
2351 #endif
2352 
2353 #ifndef	ICMP6_PARAMPROB_HEADER
2354 # define	ICMP6_PARAMPROB_HEADER	0
2355 #endif
2356 #ifndef	ICMP6_PARAMPROB_NEXTHEADER
2357 # define	ICMP6_PARAMPROB_NEXTHEADER	1
2358 #endif
2359 #ifndef	ICMP6_PARAMPROB_OPTION
2360 # define	ICMP6_PARAMPROB_OPTION	2
2361 #endif
2362 
2363 #ifndef	ICMP6_NI_SUBJ_IPV6
2364 # define	ICMP6_NI_SUBJ_IPV6	0
2365 #endif
2366 #ifndef	ICMP6_NI_SUBJ_FQDN
2367 # define	ICMP6_NI_SUBJ_FQDN	1
2368 #endif
2369 #ifndef	ICMP6_NI_SUBJ_IPV4
2370 # define	ICMP6_NI_SUBJ_IPV4	2
2371 #endif
2372 
2373 #if !defined(IPV6_FLOWINFO_MASK)
2374 # if (BYTE_ORDER == BIG_ENDIAN) || defined(_BIG_ENDIAN)
2375 #  define IPV6_FLOWINFO_MASK    0x0fffffff      /* flow info (28 bits) */
2376 # else
2377 #  if(BYTE_ORDER == LITTLE_ENDIAN) || !defined(_BIG_ENDIAN)
2378 #   define IPV6_FLOWINFO_MASK   0xffffff0f      /* flow info (28 bits) */
2379 #  endif /* LITTLE_ENDIAN */
2380 # endif
2381 #endif
2382 #if !defined(IPV6_FLOWLABEL_MASK)
2383 # if (BYTE_ORDER == BIG_ENDIAN) || defined(_BIG_ENDIAN)
2384 #  define IPV6_FLOWLABEL_MASK   0x000fffff      /* flow label (20 bits) */
2385 # else
2386 #  if (BYTE_ORDER == LITTLE_ENDIAN) || !defined(_BIG_ENDIAN)
2387 #   define IPV6_FLOWLABEL_MASK  0xffff0f00      /* flow label (20 bits) */
2388 #  endif /* LITTLE_ENDIAN */
2389 # endif
2390 #endif
2391 
2392 /*
2393  * ECN is a new addition to TCP - RFC 2481
2394  */
2395 #ifndef TH_ECN
2396 # define	TH_ECN	0x40
2397 #endif
2398 #ifndef TH_CWR
2399 # define	TH_CWR	0x80
2400 #endif
2401 #define	TH_ECNALL	(TH_ECN|TH_CWR)
2402 
2403 /*
2404  * TCP States
2405  */
2406 #define IPF_TCPS_LISTEN		0	/* listening for connection */
2407 #define IPF_TCPS_SYN_SENT	1	/* active, have sent syn */
2408 #define IPF_TCPS_SYN_RECEIVED	2	/* have send and received syn */
2409 #define IPF_TCPS_HALF_ESTAB	3	/* for connections not fully "up" */
2410 /* states < IPF_TCPS_ESTABLISHED are those where connections not established */
2411 #define IPF_TCPS_ESTABLISHED	4	/* established */
2412 #define IPF_TCPS_CLOSE_WAIT	5	/* rcvd fin, waiting for close */
2413 /* states > IPF_TCPS_CLOSE_WAIT are those where user has closed */
2414 #define IPF_TCPS_FIN_WAIT_1	6	/* have closed, sent fin */
2415 #define IPF_TCPS_CLOSING	7	/* closed xchd FIN; await FIN ACK */
2416 #define IPF_TCPS_LAST_ACK	8	/* had fin and close; await FIN ACK */
2417 /* states > IPF_TCPS_CLOSE_WAIT && < IPF_TCPS_FIN_WAIT_2 await ACK of FIN */
2418 #define IPF_TCPS_FIN_WAIT_2	9	/* have closed, fin is acked */
2419 #define IPF_TCPS_TIME_WAIT	10	/* in 2*msl quiet wait after close */
2420 #define IPF_TCPS_CLOSED		11	/* closed */
2421 #define IPF_TCP_NSTATES		12
2422 
2423 #define	TCP_MSL			120
2424 
2425 #undef	ICMP_MAX_UNREACH
2426 #define	ICMP_MAX_UNREACH	14
2427 #undef	ICMP_MAXTYPE
2428 #define	ICMP_MAXTYPE		18
2429 
2430 #ifndef	IFNAMSIZ
2431 #define	IFNAMSIZ		16
2432 #endif
2433 
2434 #ifndef	LOG_FTP
2435 # define	LOG_FTP		(11<<3)
2436 #endif
2437 #ifndef	LOG_AUTHPRIV
2438 # define	LOG_AUTHPRIV	(10<<3)
2439 #endif
2440 #ifndef	LOG_AUDIT
2441 # define	LOG_AUDIT	(13<<3)
2442 #endif
2443 #ifndef	LOG_NTP
2444 # define	LOG_NTP		(12<<3)
2445 #endif
2446 #ifndef	LOG_SECURITY
2447 # define	LOG_SECURITY	(13<<3)
2448 #endif
2449 #ifndef	LOG_LFMT
2450 # define	LOG_LFMT	(14<<3)
2451 #endif
2452 #ifndef	LOG_CONSOLE
2453 # define	LOG_CONSOLE	(14<<3)
2454 #endif
2455 
2456 /*
2457  * ICMP error replies have an IP header (20 bytes), 8 bytes of ICMP data,
2458  * another IP header and then 64 bits of data, totalling 56.  Of course,
2459  * the last 64 bits is dependent on that being available.
2460  */
2461 #define	ICMPERR_ICMPHLEN	8
2462 #define	ICMPERR_IPICMPHLEN	(20 + 8)
2463 #define	ICMPERR_MINPKTLEN	(20 + 8 + 20)
2464 #define	ICMPERR_MAXPKTLEN	(20 + 8 + 20 + 8)
2465 #define ICMP6ERR_MINPKTLEN	(40 + 8)
2466 #define ICMP6ERR_IPICMPHLEN	(40 + 8 + 40)
2467 
2468 #ifndef MIN
2469 # define	MIN(a,b)	(((a)<(b))?(a):(b))
2470 #endif
2471 
2472 #ifdef IPF_DEBUG
2473 # define	DPRINT(x)	printf x
2474 #else
2475 # define	DPRINT(x)
2476 #endif
2477 
2478 #ifdef RESCUE
2479 # undef IPFILTER_BPF
2480 #endif
2481 
2482 #ifndef DTRACE_PROBE
2483 # define DTRACE_PROBE(_x_)
2484 # define DTRACE_PROBE1(_x_, _t1_, _a1_)
2485 # define DTRACE_PROBE2(_x_, _t1_, _a1_, _t2_, _a2_)
2486 # define DTRACE_PROBE3(_x_, _t1_, _a1_, _t2_, _a2_, _t3_, _a3_)
2487 # define DTRACE_PROBE4(_x_, _t1_, _a1_, _t2_, _a2_, _t3_, _a3_, _t4_, _a4_)
2488 #endif
2489 
2490 #ifndef IPF_IS_LOOPBACK
2491 # define IPF_IS_LOOPBACK(x)	0
2492 #endif
2493 
2494 #endif	/* __IP_COMPAT_H__ */
2495