bsd/netinet/in.h

   1 /*
   2  * Copyright (c) 2000 Apple Computer, Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28 /*
  29  * Copyright (c) 1982, 1986, 1990, 1993
  30  *      The Regents of the University of California.  All rights reserved.
  31  *
  32  * Redistribution and use in source and binary forms, with or without
  33  * modification, are permitted provided that the following conditions
  34  * are met:
  35  * 1. Redistributions of source code must retain the above copyright
  36  *    notice, this list of conditions and the following disclaimer.
  37  * 2. Redistributions in binary form must reproduce the above copyright
  38  *    notice, this list of conditions and the following disclaimer in the
  39  *    documentation and/or other materials provided with the distribution.
  40  * 3. All advertising materials mentioning features or use of this software
  41  *    must display the following acknowledgement:
  42  *      This product includes software developed by the University of
  43  *      California, Berkeley and its contributors.
  44  * 4. Neither the name of the University nor the names of its contributors
  45  *    may be used to endorse or promote products derived from this software
  46  *    without specific prior written permission.
  47  *
  48  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  49  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  50  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  51  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  52  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  53  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  54  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  55  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  56  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  57  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  58  * SUCH DAMAGE.
  59  *
  60  *      @(#)in.h        8.3 (Berkeley) 1/3/94
  61  * $FreeBSD: src/sys/netinet/in.h,v 1.48.2.2 2001/04/21 14:53:06 ume Exp $
  62  */
  63
  64 #ifndef _NETINET_IN_H_
  65 #define _NETINET_IN_H_
  66 #include <sys/appleapiopts.h>
  67 #include <sys/_types.h>
  68
  69 #ifndef _IN_ADDR_T
  70 #define _IN_ADDR_T
  71 typedef __uint32_t      in_addr_t;      /* base type for internet address */
  72 #endif
  73
  74 #ifndef _IN_PORT_T
  75 #define _IN_PORT_T
  76 typedef __uint16_t      in_port_t;
  77 #endif
  78
  79 /*
  80  * POSIX 1003.1-2003
  81  * "Inclusion of the <netinet/in.h> header may also make visible all
  82  *  symbols from <inttypes.h> and <sys/socket.h>".
  83  */
  84 #include <sys/socket.h>
  85
  86 /*
  87  * The following two #includes insure htonl and family are defined
  88  */
  89 #include <machine/endian.h>
  90 #include <sys/_endian.h>
  91
  92 /*
  93  * Constants and structures defined by the internet system,
  94  * Per RFC 790, September 1981, and numerous additions.
  95  */
  96
  97 /*
  98  * Protocols (RFC 1700)
  99  */
 100 #define IPPROTO_IP              0               /* dummy for IP */
 101 #ifndef _POSIX_C_SOURCE
 102 #define IPPROTO_HOPOPTS 0               /* IP6 hop-by-hop options */
 103 #endif  /* !_POSIX_C_SOURCE */
 104 #define IPPROTO_ICMP            1               /* control message protocol */
 105 #ifndef _POSIX_C_SOURCE
 106 #define IPPROTO_IGMP            2               /* group mgmt protocol */
 107 #define IPPROTO_GGP             3               /* gateway^2 (deprecated) */
 108 #define IPPROTO_IPV4            4               /* IPv4 encapsulation */
 109 #define IPPROTO_IPIP            IPPROTO_IPV4    /* for compatibility */
 110 #endif  /* !_POSIX_C_SOURCE */
 111 #define IPPROTO_TCP             6               /* tcp */
 112 #ifndef _POSIX_C_SOURCE
 113 #define IPPROTO_ST              7               /* Stream protocol II */
 114 #define IPPROTO_EGP             8               /* exterior gateway protocol */
 115 #define IPPROTO_PIGP            9               /* private interior gateway */
 116 #define IPPROTO_RCCMON          10              /* BBN RCC Monitoring */
 117 #define IPPROTO_NVPII           11              /* network voice protocol*/
 118 #define IPPROTO_PUP             12              /* pup */
 119 #define IPPROTO_ARGUS           13              /* Argus */
 120 #define IPPROTO_EMCON           14              /* EMCON */
 121 #define IPPROTO_XNET            15              /* Cross Net Debugger */
 122 #define IPPROTO_CHAOS           16              /* Chaos*/
 123 #endif  /* !_POSIX_C_SOURCE */
 124 #define IPPROTO_UDP             17              /* user datagram protocol */
 125 #ifndef _POSIX_C_SOURCE
 126 #define IPPROTO_MUX             18              /* Multiplexing */
 127 #define IPPROTO_MEAS            19              /* DCN Measurement Subsystems */
 128 #define IPPROTO_HMP             20              /* Host Monitoring */
 129 #define IPPROTO_PRM             21              /* Packet Radio Measurement */
 130 #define IPPROTO_IDP             22              /* xns idp */
 131 #define IPPROTO_TRUNK1          23              /* Trunk-1 */
 132 #define IPPROTO_TRUNK2          24              /* Trunk-2 */
 133 #define IPPROTO_LEAF1           25              /* Leaf-1 */
 134 #define IPPROTO_LEAF2           26              /* Leaf-2 */
 135 #define IPPROTO_RDP             27              /* Reliable Data */
 136 #define IPPROTO_IRTP            28              /* Reliable Transaction */
 137 #define IPPROTO_TP              29              /* tp-4 w/ class negotiation */
 138 #define IPPROTO_BLT             30              /* Bulk Data Transfer */
 139 #define IPPROTO_NSP             31              /* Network Services */
 140 #define IPPROTO_INP             32              /* Merit Internodal */
 141 #define IPPROTO_SEP             33              /* Sequential Exchange */
 142 #define IPPROTO_3PC             34              /* Third Party Connect */
 143 #define IPPROTO_IDPR            35              /* InterDomain Policy Routing */
 144 #define IPPROTO_XTP             36              /* XTP */
 145 #define IPPROTO_DDP             37              /* Datagram Delivery */
 146 #define IPPROTO_CMTP            38              /* Control Message Transport */
 147 #define IPPROTO_TPXX            39              /* TP++ Transport */
 148 #define IPPROTO_IL              40              /* IL transport protocol */
 149 #endif  /* !_POSIX_C_SOURCE */
 150 #define         IPPROTO_IPV6            41              /* IP6 header */
 151 #ifndef _POSIX_C_SOURCE
 152 #define IPPROTO_SDRP            42              /* Source Demand Routing */
 153 #define         IPPROTO_ROUTING 43              /* IP6 routing header */
 154 #define         IPPROTO_FRAGMENT        44              /* IP6 fragmentation header */
 155 #define IPPROTO_IDRP            45              /* InterDomain Routing*/
 156 #define         IPPROTO_RSVP            46              /* resource reservation */
 157 #define IPPROTO_GRE             47              /* General Routing Encap. */
 158 #define IPPROTO_MHRP            48              /* Mobile Host Routing */
 159 #define IPPROTO_BHA             49              /* BHA */
 160 #define IPPROTO_ESP             50              /* IP6 Encap Sec. Payload */
 161 #define IPPROTO_AH              51              /* IP6 Auth Header */
 162 #define IPPROTO_INLSP           52              /* Integ. Net Layer Security */
 163 #define IPPROTO_SWIPE           53              /* IP with encryption */
 164 #define IPPROTO_NHRP            54              /* Next Hop Resolution */
 165 /* 55-57: Unassigned */
 166 #define         IPPROTO_ICMPV6  58              /* ICMP6 */
 167 #define         IPPROTO_NONE            59              /* IP6 no next header */
 168 #define         IPPROTO_DSTOPTS 60              /* IP6 destination option */
 169 #define IPPROTO_AHIP            61              /* any host internal protocol */
 170 #define IPPROTO_CFTP            62              /* CFTP */
 171 #define IPPROTO_HELLO           63              /* "hello" routing protocol */
 172 #define IPPROTO_SATEXPAK        64              /* SATNET/Backroom EXPAK */
 173 #define IPPROTO_KRYPTOLAN       65              /* Kryptolan */
 174 #define IPPROTO_RVD             66              /* Remote Virtual Disk */
 175 #define IPPROTO_IPPC            67              /* Pluribus Packet Core */
 176 #define IPPROTO_ADFS            68              /* Any distributed FS */
 177 #define IPPROTO_SATMON          69              /* Satnet Monitoring */
 178 #define IPPROTO_VISA            70              /* VISA Protocol */
 179 #define IPPROTO_IPCV            71              /* Packet Core Utility */
 180 #define IPPROTO_CPNX            72              /* Comp. Prot. Net. Executive */
 181 #define IPPROTO_CPHB            73              /* Comp. Prot. HeartBeat */
 182 #define IPPROTO_WSN             74              /* Wang Span Network */
 183 #define IPPROTO_PVP             75              /* Packet Video Protocol */
 184 #define IPPROTO_BRSATMON        76              /* BackRoom SATNET Monitoring */
 185 #define IPPROTO_ND              77              /* Sun net disk proto (temp.) */
 186 #define IPPROTO_WBMON           78              /* WIDEBAND Monitoring */
 187 #define IPPROTO_WBEXPAK         79              /* WIDEBAND EXPAK */
 188 #define IPPROTO_EON             80              /* ISO cnlp */
 189 #define IPPROTO_VMTP            81              /* VMTP */
 190 #define IPPROTO_SVMTP           82              /* Secure VMTP */
 191 #define IPPROTO_VINES           83              /* Banyon VINES */
 192 #define IPPROTO_TTP             84              /* TTP */
 193 #define IPPROTO_IGP             85              /* NSFNET-IGP */
 194 #define IPPROTO_DGP             86              /* dissimilar gateway prot. */
 195 #define IPPROTO_TCF             87              /* TCF */
 196 #define IPPROTO_IGRP            88              /* Cisco/GXS IGRP */
 197 #define IPPROTO_OSPFIGP         89              /* OSPFIGP */
 198 #define IPPROTO_SRPC            90              /* Strite RPC protocol */
 199 #define IPPROTO_LARP            91              /* Locus Address Resoloution */
 200 #define IPPROTO_MTP             92              /* Multicast Transport */
 201 #define IPPROTO_AX25            93              /* AX.25 Frames */
 202 #define IPPROTO_IPEIP           94              /* IP encapsulated in IP */
 203 #define IPPROTO_MICP            95              /* Mobile Int.ing control */
 204 #define IPPROTO_SCCSP           96              /* Semaphore Comm. security */
 205 #define IPPROTO_ETHERIP         97              /* Ethernet IP encapsulation */
 206 #define IPPROTO_ENCAP           98              /* encapsulation header */
 207 #define IPPROTO_APES            99              /* any private encr. scheme */
 208 #define IPPROTO_GMTP            100             /* GMTP*/
 209 #define IPPROTO_IPCOMP  108             /* payload compression (IPComp) */
 210 /* 101-254: Partly Unassigned */
 211 #define IPPROTO_PIM             103             /* Protocol Independent Mcast */
 212 #define IPPROTO_PGM             113             /* PGM */
 213 /* 255: Reserved */
 214 /* BSD Private, local use, namespace incursion */
 215 #define IPPROTO_DIVERT          254             /* divert pseudo-protocol */
 216 #endif  /* !_POSIX_C_SOURCE */
 217 #define IPPROTO_RAW             255             /* raw IP packet */
 218
 219 #ifndef _POSIX_C_SOURCE
 220 #define IPPROTO_MAX             256
 221
 222 /* last return value of *_input(), meaning "all job for this pkt is done".  */
 223 #define IPPROTO_DONE            257
 224 #endif /* _POSIX_C_SOURCE */
 225
 226 /*
 227  * Local port number conventions:
 228  *
 229  * When a user does a bind(2) or connect(2) with a port number of zero,
 230  * a non-conflicting local port address is chosen.
 231  * The default range is IPPORT_RESERVED through
 232  * IPPORT_USERRESERVED, although that is settable by sysctl.
 233  *
 234  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
 235  * default assignment range.
 236  *
 237  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
 238  *
 239  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
 240  * into the "high" range.  These are reserved for client outbound connections
 241  * which do not want to be filtered by any firewalls.
 242  *
 243  * The value IP_PORTRANGE_LOW changes the range to the "low" are
 244  * that is (by convention) restricted to privileged processes.  This
 245  * convention is based on "vouchsafe" principles only.  It is only secure
 246  * if you trust the remote host to restrict these ports.
 247  *
 248  * The default range of ports and the high range can be changed by
 249  * sysctl(3).  (net.inet.ip.port{hi,low}{first,last}_auto)
 250  *
 251  * Changing those values has bad security implications if you are
 252  * using a a stateless firewall that is allowing packets outside of that
 253  * range in order to allow transparent outgoing connections.
 254  *
 255  * Such a firewall configuration will generally depend on the use of these
 256  * default values.  If you change them, you may find your Security
 257  * Administrator looking for you with a heavy object.
 258  *
 259  * For a slightly more orthodox text view on this:
 260  *
 261  *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
 262  *
 263  *    port numbers are divided into three ranges:
 264  *
 265  *                0 -  1023 Well Known Ports
 266  *             1024 - 49151 Registered Ports
 267  *            49152 - 65535 Dynamic and/or Private Ports
 268  *
 269  */
 270
 271 #define __DARWIN_IPPORT_RESERVED        1024
 272
 273 #ifndef _POSIX_C_SOURCE
 274 /*
 275  * Ports < IPPORT_RESERVED are reserved for
 276  * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
 277  * Ports > IPPORT_USERRESERVED are reserved
 278  * for servers, not necessarily privileged.  (IP_PORTRANGE_DEFAULT)
 279  */
 280 #ifndef IPPORT_RESERVED
 281 #define IPPORT_RESERVED         __DARWIN_IPPORT_RESERVED
 282 #endif
 283 #define IPPORT_USERRESERVED     5000
 284
 285 /*
 286  * Default local port range to use by setting IP_PORTRANGE_HIGH
 287  */
 288 #define IPPORT_HIFIRSTAUTO      49152
 289 #define IPPORT_HILASTAUTO       65535
 290
 291 /*
 292  * Scanning for a free reserved port return a value below IPPORT_RESERVED,
 293  * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
 294  * 512, but that conflicts with some well-known-services that firewalls may
 295  * have a fit if we use.
 296  */
 297 #define IPPORT_RESERVEDSTART    600
 298 #endif  /* !_POSIX_C_SOURCE */
 299
 300 /*
 301  * Internet address (a structure for historical reasons)
 302  */
 303 struct in_addr {
 304         in_addr_t s_addr;
 305 };
 306
 307 /*
 308  * Definitions of bits in internet address integers.
 309  * On subnets, the decomposition of addresses to host and net parts
 310  * is done according to subnet mask, not the masks here.
 311  */
 312 #define INADDR_ANY              (u_int32_t)0x00000000
 313 #define INADDR_BROADCAST        (u_int32_t)0xffffffff   /* must be masked */
 314
 315 #ifndef _POSIX_C_SOURCE
 316 #define IN_CLASSA(i)            (((u_int32_t)(i) & 0x80000000) == 0)
 317 #define IN_CLASSA_NET           0xff000000
 318 #define IN_CLASSA_NSHIFT        24
 319 #define IN_CLASSA_HOST          0x00ffffff
 320 #define IN_CLASSA_MAX           128
 321
 322 #define IN_CLASSB(i)            (((u_int32_t)(i) & 0xc0000000) == 0x80000000)
 323 #define IN_CLASSB_NET           0xffff0000
 324 #define IN_CLASSB_NSHIFT        16
 325 #define IN_CLASSB_HOST          0x0000ffff
 326 #define IN_CLASSB_MAX           65536
 327
 328 #define IN_CLASSC(i)            (((u_int32_t)(i) & 0xe0000000) == 0xc0000000)
 329 #define IN_CLASSC_NET           0xffffff00
 330 #define IN_CLASSC_NSHIFT        8
 331 #define IN_CLASSC_HOST          0x000000ff
 332
 333 #define IN_CLASSD(i)            (((u_int32_t)(i) & 0xf0000000) == 0xe0000000)
 334 #define IN_CLASSD_NET           0xf0000000      /* These ones aren't really */
 335 #define IN_CLASSD_NSHIFT        28              /* net and host fields, but */
 336 #define IN_CLASSD_HOST          0x0fffffff      /* routing needn't know.    */
 337 #define IN_MULTICAST(i)         IN_CLASSD(i)
 338
 339 #define IN_EXPERIMENTAL(i)      (((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
 340 #define IN_BADCLASS(i)          (((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
 341
 342 #define INADDR_LOOPBACK         (u_int32_t)0x7f000001
 343 #ifndef KERNEL
 344 #define INADDR_NONE             0xffffffff              /* -1 return */
 345 #endif
 346
 347 #define INADDR_UNSPEC_GROUP     (u_int32_t)0xe0000000   /* 224.0.0.0 */
 348 #define INADDR_ALLHOSTS_GROUP   (u_int32_t)0xe0000001   /* 224.0.0.1 */
 349 #define INADDR_ALLRTRS_GROUP    (u_int32_t)0xe0000002   /* 224.0.0.2 */
 350 #define INADDR_MAX_LOCAL_GROUP  (u_int32_t)0xe00000ff   /* 224.0.0.255 */
 351
 352 #ifdef __APPLE__
 353 #define IN_LINKLOCALNETNUM      (u_int32_t)0xA9FE0000 /* 169.254.0.0 */
 354 #define IN_LINKLOCAL(i)         (((u_int32_t)(i) & IN_CLASSB_NET) == IN_LINKLOCALNETNUM)
 355 #endif
 356
 357 #define IN_LOOPBACKNET          127                     /* official! */
 358 #endif  /* !_POSIX_C_SOURCE */
 359
 360 /*
 361  * Socket address, internet style.
 362  */
 363 struct sockaddr_in {
 364         __uint8_t       sin_len;
 365         sa_family_t     sin_family;
 366         in_port_t       sin_port;
 367         struct  in_addr sin_addr;
 368         char            sin_zero[8];            /* XXX bwg2001-004 */
 369 };
 370
 371 #define INET_ADDRSTRLEN                 16
 372
 373 #ifndef _POSIX_C_SOURCE
 374 /*
 375  * Structure used to describe IP options.
 376  * Used to store options internally, to pass them to a process,
 377  * or to restore options retrieved earlier.
 378  * The ip_dst is used for the first-hop gateway when using a source route
 379  * (this gets put into the header proper).
 380  */
 381 struct ip_opts {
 382         struct  in_addr ip_dst;         /* first hop, 0 w/o src rt */
 383         char    ip_opts[40];            /* actually variable in size */
 384 };
 385
 386 /*
 387  * Options for use with [gs]etsockopt at the IP level.
 388  * First word of comment is data type; bool is stored in int.
 389  */
 390 #define IP_OPTIONS              1    /* buf/ip_opts; set/get IP options */
 391 #define IP_HDRINCL              2    /* int; header is included with data */
 392 #define IP_TOS                  3    /* int; IP type of service and preced. */
 393 #define IP_TTL                  4    /* int; IP time to live */
 394 #define IP_RECVOPTS             5    /* bool; receive all IP opts w/dgram */
 395 #define IP_RECVRETOPTS          6    /* bool; receive IP opts for response */
 396 #define IP_RECVDSTADDR          7    /* bool; receive IP dst addr w/dgram */
 397 #define IP_RETOPTS              8    /* ip_opts; set/get IP options */
 398 #define IP_MULTICAST_IF         9    /* u_char; set/get IP multicast i/f  */
 399 #define IP_MULTICAST_TTL        10   /* u_char; set/get IP multicast ttl */
 400 #define IP_MULTICAST_LOOP       11   /* u_char; set/get IP multicast loopback */
 401 #define IP_ADD_MEMBERSHIP       12   /* ip_mreq; add an IP group membership */
 402 #define IP_DROP_MEMBERSHIP      13   /* ip_mreq; drop an IP group membership */
 403 #define IP_MULTICAST_VIF        14   /* set/get IP mcast virt. iface */
 404 #define IP_RSVP_ON              15   /* enable RSVP in kernel */
 405 #define IP_RSVP_OFF             16   /* disable RSVP in kernel */
 406 #define IP_RSVP_VIF_ON          17   /* set RSVP per-vif socket */
 407 #define IP_RSVP_VIF_OFF         18   /* unset RSVP per-vif socket */
 408 #define IP_PORTRANGE            19   /* int; range to choose for unspec port */
 409 #define IP_RECVIF               20   /* bool; receive reception if w/dgram */
 410 /* for IPSEC */
 411 #define IP_IPSEC_POLICY         21   /* int; set/get security policy */
 412 #define IP_FAITH                22   /* bool; accept FAITH'ed connections */
 413 #ifdef __APPLE__
 414 #define IP_STRIPHDR             23   /* bool: drop receive of raw IP header */
 415 #endif
 416 #define IP_RECVTTL                      24      /* bool; receive reception TTL w/dgram */
 417
 418
 419 #define IP_FW_ADD               40   /* add a firewall rule to chain */
 420 #define IP_FW_DEL               41   /* delete a firewall rule from chain */
 421 #define IP_FW_FLUSH             42   /* flush firewall rule chain */
 422 #define IP_FW_ZERO              43   /* clear single/all firewall counter(s) */
 423 #define IP_FW_GET               44   /* get entire firewall rule chain */
 424 #define IP_FW_RESETLOG          45   /* reset logging counters */
 425
 426 /* These older firewall socket option codes are maintained for backward compatibility. */
 427 #define IP_OLD_FW_ADD           50   /* add a firewall rule to chain */
 428 #define IP_OLD_FW_DEL           51   /* delete a firewall rule from chain */
 429 #define IP_OLD_FW_FLUSH         52   /* flush firewall rule chain */
 430 #define IP_OLD_FW_ZERO          53   /* clear single/all firewall counter(s) */
 431 #define IP_OLD_FW_GET           54   /* get entire firewall rule chain */
 432 #define IP_NAT__XXX                     55   /* set/get NAT opts XXX Deprecated, do not use */
 433 #define IP_OLD_FW_RESETLOG      56   /* reset logging counters */
 434
 435 #define IP_DUMMYNET_CONFIGURE   60   /* add/configure a dummynet pipe */
 436 #define IP_DUMMYNET_DEL         61   /* delete a dummynet pipe from chain */
 437 #define IP_DUMMYNET_FLUSH       62   /* flush dummynet */
 438 #define IP_DUMMYNET_GET         64   /* get entire dummynet pipes */
 439
 440 /*
 441  * Defaults and limits for options
 442  */
 443 #define IP_DEFAULT_MULTICAST_TTL  1     /* normally limit m'casts to 1 hop  */
 444 #define IP_DEFAULT_MULTICAST_LOOP 1     /* normally hear sends if a member  */
 445 #define IP_MAX_MEMBERSHIPS      20      /* per socket */
 446
 447 /*
 448  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
 449  */
 450 struct ip_mreq {
 451         struct  in_addr imr_multiaddr;  /* IP multicast address of group */
 452         struct  in_addr imr_interface;  /* local IP address of interface */
 453 };
 454
 455 /*
 456  * Argument for IP_PORTRANGE:
 457  * - which range to search when port is unspecified at bind() or connect()
 458  */
 459 #define IP_PORTRANGE_DEFAULT    0       /* default range */
 460 #define IP_PORTRANGE_HIGH       1       /* "high" - request firewall bypass */
 461 #define IP_PORTRANGE_LOW        2       /* "low" - vouchsafe security */
 462
 463
 464 /*
 465  * Definitions for inet sysctl operations.
 466  *
 467  * Third level is protocol number.
 468  * Fourth level is desired variable within that protocol.
 469  */
 470 #define IPPROTO_MAXID   (IPPROTO_AH + 1)        /* don't list to IPPROTO_MAX */
 471
 472 #ifdef KERNEL_PRIVATE
 473
 474 #define CTL_IPPROTO_NAMES { \
 475         { "ip", CTLTYPE_NODE }, \
 476         { "icmp", CTLTYPE_NODE }, \
 477         { "igmp", CTLTYPE_NODE }, \
 478         { "ggp", CTLTYPE_NODE }, \
 479         { 0, 0 }, \
 480         { 0, 0 }, \
 481         { "tcp", CTLTYPE_NODE }, \
 482         { 0, 0 }, \
 483         { "egp", CTLTYPE_NODE }, \
 484         { 0, 0 }, \
 485         { 0, 0 }, \
 486         { 0, 0 }, \
 487         { "pup", CTLTYPE_NODE }, \
 488         { 0, 0 }, \
 489         { 0, 0 }, \
 490         { 0, 0 }, \
 491         { 0, 0 }, \
 492         { "udp", CTLTYPE_NODE }, \
 493         { 0, 0 }, \
 494         { 0, 0 }, \
 495         { 0, 0 }, \
 496         { 0, 0 }, \
 497         { "idp", CTLTYPE_NODE }, \
 498         { 0, 0 }, \
 499         { 0, 0 }, \
 500         { 0, 0 }, \
 501         { 0, 0 }, \
 502         { 0, 0 }, \
 503         { 0, 0 }, \
 504         { 0, 0 }, \
 505         { 0, 0 }, \
 506         { 0, 0 }, \
 507         { 0, 0 }, \
 508         { 0, 0 }, \
 509         { 0, 0 }, \
 510         { 0, 0 }, \
 511         { 0, 0 }, \
 512         { 0, 0 }, \
 513         { 0, 0 }, \
 514         { 0, 0 }, \
 515         { 0, 0 }, \
 516         { 0, 0 }, \
 517         { 0, 0 }, \
 518         { 0, 0 }, \
 519         { 0, 0 }, \
 520         { 0, 0 }, \
 521         { 0, 0 }, \
 522         { 0, 0 }, \
 523         { 0, 0 }, \
 524         { 0, 0 }, \
 525         { 0, 0 }, \
 526         { "ipsec", CTLTYPE_NODE }, \
 527 }
 528
 529 #endif /* KERNEL_PRIVATE */
 530
 531 /*
 532  * Names for IP sysctl objects
 533  */
 534 #define IPCTL_FORWARDING        1       /* act as router */
 535 #define IPCTL_SENDREDIRECTS     2       /* may send redirects when forwarding */
 536 #define IPCTL_DEFTTL            3       /* default TTL */
 537 #ifdef notyet
 538 #define IPCTL_DEFMTU            4       /* default MTU */
 539 #endif
 540 #define IPCTL_RTEXPIRE          5       /* cloned route expiration time */
 541 #define IPCTL_RTMINEXPIRE       6       /* min value for expiration time */
 542 #define IPCTL_RTMAXCACHE        7       /* trigger level for dynamic expire */
 543 #define IPCTL_SOURCEROUTE       8       /* may perform source routes */
 544 #define IPCTL_DIRECTEDBROADCAST 9       /* may re-broadcast received packets */
 545 #define IPCTL_INTRQMAXLEN       10      /* max length of netisr queue */
 546 #define IPCTL_INTRQDROPS        11      /* number of netisr q drops */
 547 #define IPCTL_STATS             12      /* ipstat structure */
 548 #define IPCTL_ACCEPTSOURCEROUTE 13      /* may accept source routed packets */
 549 #define IPCTL_FASTFORWARDING    14      /* use fast IP forwarding code */
 550 #define IPCTL_KEEPFAITH         15      /* FAITH IPv4->IPv6 translater ctl */
 551 #define IPCTL_GIF_TTL           16      /* default TTL for gif encap packet */
 552 #define IPCTL_MAXID             17
 553
 554 #ifdef KERNEL_PRIVATE
 555
 556 #define IPCTL_NAMES { \
 557         { 0, 0 }, \
 558         { "forwarding", CTLTYPE_INT }, \
 559         { "redirect", CTLTYPE_INT }, \
 560         { "ttl", CTLTYPE_INT }, \
 561         { "mtu", CTLTYPE_INT }, \
 562         { "rtexpire", CTLTYPE_INT }, \
 563         { "rtminexpire", CTLTYPE_INT }, \
 564         { "rtmaxcache", CTLTYPE_INT }, \
 565         { "sourceroute", CTLTYPE_INT }, \
 566         { "directed-broadcast", CTLTYPE_INT }, \
 567         { "intr-queue-maxlen", CTLTYPE_INT }, \
 568         { "intr-queue-drops", CTLTYPE_INT }, \
 569         { "stats", CTLTYPE_STRUCT }, \
 570         { "accept_sourceroute", CTLTYPE_INT }, \
 571         { "fastforwarding", CTLTYPE_INT }, \
 572         { "keepfaith", CTLTYPE_INT }, \
 573         { "gifttl", CTLTYPE_INT }, \
 574 }
 575 #endif /* KERNEL_PRIVATE */
 576
 577 #endif  /* !_POSIX_C_SOURCE */
 578
 579
 580 /* INET6 stuff */
 581 #define __KAME_NETINET_IN_H_INCLUDED_
 582 #include <netinet6/in6.h>
 583 #undef __KAME_NETINET_IN_H_INCLUDED_
 584
 585 #ifdef KERNEL
 586 #ifdef KERNEL_PRIVATE
 587 struct ifnet; struct mbuf;      /* forward declarations for Standard C */
 588
 589 int      in_broadcast(struct in_addr, struct ifnet *);
 590 int      in_canforward(struct in_addr);
 591 int      in_cksum(struct mbuf *, int);
 592 int      in_cksum_skip(struct mbuf *, u_short, u_short);
 593 u_short  in_addword(u_short, u_short);
 594 u_short  in_pseudo(u_int, u_int, u_int);
 595 int      in_localaddr(struct in_addr);
 596 u_long  in_netof(struct in_addr);
 597 #endif /* KERNEL_PRIVATE */
 598 #define MAX_IPv4_STR_LEN        16
 599 #define MAX_IPv6_STR_LEN        64
 600
 601 const char      *inet_ntop(int, const void *, char *, size_t); /* in libkern */
 602 #endif /* KERNEL */
 603
 604 #endif _NETINET_IN_H_