Home | History | Annotate | Download | only in netinet
      1 /*
      2  * Copyright (c) 1982, 1986, 1990, 1993
      3  *	The Regents of the University of California.  All rights reserved.
      4  *
      5  * Redistribution and use in source and binary forms, with or without
      6  * modification, are permitted provided that the following conditions
      7  * are met:
      8  * 1. Redistributions of source code must retain the above copyright
      9  *    notice, this list of conditions and the following disclaimer.
     10  * 2. Redistributions in binary form must reproduce the above copyright
     11  *    notice, this list of conditions and the following disclaimer in the
     12  *    documentation and/or other materials provided with the distribution.
     13  * 4. Neither the name of the University nor the names of its contributors
     14  *    may be used to endorse or promote products derived from this software
     15  *    without specific prior written permission.
     16  *
     17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     27  * SUCH DAMAGE.
     28  *
     29  *	@(#)in.h	8.3 (Berkeley) 1/3/94
     30  * $FreeBSD: src/sys/netinet/in.h,v 1.68 2002/04/24 01:26:11 mike Exp $
     31  */
     32 
     33 #ifndef _NETINET_IN_H_
     34 #define _NETINET_IN_H_
     35 
     36 #include <sys/cdefs.h>
     37 #include <sys/config.h>
     38 #include <sys/_types.h>
     39 #include <machine/endian.h>
     40 
     41 /* Protocols common to RFC 1700, POSIX, and X/Open. */
     42 #define	IPPROTO_IP		0		/* dummy for IP */
     43 #define	IPPROTO_ICMP		1		/* control message protocol */
     44 #define	IPPROTO_TCP		6		/* tcp */
     45 #define	IPPROTO_UDP		17		/* user datagram protocol */
     46 
     47 #define	INADDR_ANY		(uint32_t)0x00000000
     48 #define	INADDR_BROADCAST	(uint32_t)0xffffffff	/* must be masked */
     49 
     50 #ifndef _UINT8_T_DECLARED
     51 typedef	__uint8_t		uint8_t;
     52 #define	_UINT8_T_DECLARED
     53 #endif
     54 
     55 #ifndef _UINT16_T_DECLARED
     56 typedef	__uint16_t		uint16_t;
     57 #define	_UINT16_T_DECLARED
     58 #endif
     59 
     60 #ifndef _UINT32_T_DECLARED
     61 typedef	__uint32_t		uint32_t;
     62 #define	_UINT32_T_DECLARED
     63 #endif
     64 
     65 #ifndef _IN_ADDR_T_DECLARED
     66 typedef	uint32_t		in_addr_t;
     67 #define	_IN_ADDR_T_DECLARED
     68 #endif
     69 
     70 #ifndef _IN_PORT_T_DECLARED
     71 typedef	uint16_t		in_port_t;
     72 #define	_IN_PORT_T_DECLARED
     73 #endif
     74 
     75 typedef unsigned short sa_family_t;
     76 
     77 #ifdef _BSD_SA_FAMILY_T_
     78 typedef	_BSD_SA_FAMILY_T_	sa_family_t;
     79 #undef _BSD_SA_FAMILY_T_
     80 #endif
     81 
     82 /* Internet address (a structure for historical reasons). */
     83 #ifndef	_STRUCT_IN_ADDR_DECLARED
     84 struct in_addr {
     85 	in_addr_t s_addr;
     86 };
     87 #define	_STRUCT_IN_ADDR_DECLARED
     88 #endif
     89 
     90 /* Socket address, internet style. */
     91 struct sockaddr_in {
     92 	sa_family_t	sin_family;
     93 	in_port_t	sin_port;
     94 	struct	in_addr sin_addr;
     95 	char	sin_zero[8];
     96 };
     97 
     98 #if __POSIX_VISIBLE >= 200112
     99 #define	IPPROTO_RAW		255		/* raw IP packet */
    100 #define	INET_ADDRSTRLEN		16
    101 #endif
    102 
    103 #define __BSD_VISIBLE 1
    104 #if __BSD_VISIBLE
    105 /*
    106  * Constants and structures defined by the internet system,
    107  * Per RFC 790, September 1981, and numerous additions.
    108  */
    109 
    110 /*
    111  * Protocols (RFC 1700)
    112  */
    113 #define	IPPROTO_HOPOPTS		0		/* IP6 hop-by-hop options */
    114 #define	IPPROTO_IGMP		2		/* group mgmt protocol */
    115 #define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
    116 #define IPPROTO_IPV4		4 		/* IPv4 encapsulation */
    117 #define IPPROTO_IPIP		IPPROTO_IPV4	/* for compatibility */
    118 #define	IPPROTO_ST		7		/* Stream protocol II */
    119 #define	IPPROTO_EGP		8		/* exterior gateway protocol */
    120 #define	IPPROTO_PIGP		9		/* private interior gateway */
    121 #define	IPPROTO_RCCMON		10		/* BBN RCC Monitoring */
    122 #define	IPPROTO_NVPII		11		/* network voice protocol*/
    123 #define	IPPROTO_PUP		12		/* pup */
    124 #define	IPPROTO_ARGUS		13		/* Argus */
    125 #define	IPPROTO_EMCON		14		/* EMCON */
    126 #define	IPPROTO_XNET		15		/* Cross Net Debugger */
    127 #define	IPPROTO_CHAOS		16		/* Chaos*/
    128 #define	IPPROTO_MUX		18		/* Multiplexing */
    129 #define	IPPROTO_MEAS		19		/* DCN Measurement Subsystems */
    130 #define	IPPROTO_HMP		20		/* Host Monitoring */
    131 #define	IPPROTO_PRM		21		/* Packet Radio Measurement */
    132 #define	IPPROTO_IDP		22		/* xns idp */
    133 #define	IPPROTO_TRUNK1		23		/* Trunk-1 */
    134 #define	IPPROTO_TRUNK2		24		/* Trunk-2 */
    135 #define	IPPROTO_LEAF1		25		/* Leaf-1 */
    136 #define	IPPROTO_LEAF2		26		/* Leaf-2 */
    137 #define	IPPROTO_RDP		27		/* Reliable Data */
    138 #define	IPPROTO_IRTP		28		/* Reliable Transaction */
    139 #define	IPPROTO_TP		29 		/* tp-4 w/ class negotiation */
    140 #define	IPPROTO_BLT		30		/* Bulk Data Transfer */
    141 #define	IPPROTO_NSP		31		/* Network Services */
    142 #define	IPPROTO_INP		32		/* Merit Internodal */
    143 #define	IPPROTO_SEP		33		/* Sequential Exchange */
    144 #define	IPPROTO_3PC		34		/* Third Party Connect */
    145 #define	IPPROTO_IDPR		35		/* InterDomain Policy Routing */
    146 #define	IPPROTO_XTP		36		/* XTP */
    147 #define	IPPROTO_DDP		37		/* Datagram Delivery */
    148 #define	IPPROTO_CMTP		38		/* Control Message Transport */
    149 #define	IPPROTO_TPXX		39		/* TP++ Transport */
    150 #define	IPPROTO_IL		40		/* IL transport protocol */
    151 #define	IPPROTO_IPV6		41		/* IP6 header */
    152 #define	IPPROTO_SDRP		42		/* Source Demand Routing */
    153 #define	IPPROTO_ROUTING		43		/* IP6 routing header */
    154 #define	IPPROTO_FRAGMENT	44		/* IP6 fragmentation header */
    155 #define	IPPROTO_IDRP		45		/* InterDomain Routing*/
    156 #define	IPPROTO_RSVP		46 		/* resource reservation */
    157 #define	IPPROTO_GRE		47		/* General Routing Encap. */
    158 #define	IPPROTO_MHRP		48		/* Mobile Host Routing */
    159 #define	IPPROTO_BHA		49		/* BHA */
    160 #define	IPPROTO_ESP		50		/* IP6 Encap Sec. Payload */
    161 #define	IPPROTO_AH		51		/* IP6 Auth Header */
    162 #define	IPPROTO_INLSP		52		/* Integ. Net Layer Security */
    163 #define	IPPROTO_SWIPE		53		/* IP with encryption */
    164 #define	IPPROTO_NHRP		54		/* Next Hop Resolution */
    165 #define IPPROTO_MOBILE		55		/* IP Mobility */
    166 #define IPPROTO_TLSP		56		/* Transport Layer Security */
    167 #define IPPROTO_SKIP		57		/* SKIP */
    168 #define	IPPROTO_ICMPV6		58		/* ICMP6 */
    169 #define	IPPROTO_NONE		59		/* IP6 no next header */
    170 #define	IPPROTO_DSTOPTS		60		/* IP6 destination option */
    171 #define	IPPROTO_AHIP		61		/* any host internal protocol */
    172 #define	IPPROTO_CFTP		62		/* CFTP */
    173 #define	IPPROTO_HELLO		63		/* "hello" routing protocol */
    174 #define	IPPROTO_SATEXPAK	64		/* SATNET/Backroom EXPAK */
    175 #define	IPPROTO_KRYPTOLAN	65		/* Kryptolan */
    176 #define	IPPROTO_RVD		66		/* Remote Virtual Disk */
    177 #define	IPPROTO_IPPC		67		/* Pluribus Packet Core */
    178 #define	IPPROTO_ADFS		68		/* Any distributed FS */
    179 #define	IPPROTO_SATMON		69		/* Satnet Monitoring */
    180 #define	IPPROTO_VISA		70		/* VISA Protocol */
    181 #define	IPPROTO_IPCV		71		/* Packet Core Utility */
    182 #define	IPPROTO_CPNX		72		/* Comp. Prot. Net. Executive */
    183 #define	IPPROTO_CPHB		73		/* Comp. Prot. HeartBeat */
    184 #define	IPPROTO_WSN		74		/* Wang Span Network */
    185 #define	IPPROTO_PVP		75		/* Packet Video Protocol */
    186 #define	IPPROTO_BRSATMON	76		/* BackRoom SATNET Monitoring */
    187 #define	IPPROTO_ND		77		/* Sun net disk proto (temp.) */
    188 #define	IPPROTO_WBMON		78		/* WIDEBAND Monitoring */
    189 #define	IPPROTO_WBEXPAK		79		/* WIDEBAND EXPAK */
    190 #define	IPPROTO_EON		80		/* ISO cnlp */
    191 #define	IPPROTO_VMTP		81		/* VMTP */
    192 #define	IPPROTO_SVMTP		82		/* Secure VMTP */
    193 #define	IPPROTO_VINES		83		/* Banyon VINES */
    194 #define	IPPROTO_TTP		84		/* TTP */
    195 #define	IPPROTO_IGP		85		/* NSFNET-IGP */
    196 #define	IPPROTO_DGP		86		/* dissimilar gateway prot. */
    197 #define	IPPROTO_TCF		87		/* TCF */
    198 #define	IPPROTO_IGRP		88		/* Cisco/GXS IGRP */
    199 #define	IPPROTO_OSPFIGP		89		/* OSPFIGP */
    200 #define	IPPROTO_SRPC		90		/* Strite RPC protocol */
    201 #define	IPPROTO_LARP		91		/* Locus Address Resoloution */
    202 #define	IPPROTO_MTP		92		/* Multicast Transport */
    203 #define	IPPROTO_AX25		93		/* AX.25 Frames */
    204 #define	IPPROTO_IPEIP		94		/* IP encapsulated in IP */
    205 #define	IPPROTO_MICP		95		/* Mobile Int.ing control */
    206 #define	IPPROTO_SCCSP		96		/* Semaphore Comm. security */
    207 #define	IPPROTO_ETHERIP		97		/* Ethernet IP encapsulation */
    208 #define	IPPROTO_ENCAP		98		/* encapsulation header */
    209 #define	IPPROTO_APES		99		/* any private encr. scheme */
    210 #define	IPPROTO_GMTP		100		/* GMTP*/
    211 #define	IPPROTO_IPCOMP		108		/* payload compression (IPComp) */
    212 /* 101-254: Partly Unassigned */
    213 #define	IPPROTO_PIM		103		/* Protocol Independent Mcast */
    214 #define	IPPROTO_PGM		113		/* PGM */
    215 /* 255: Reserved */
    216 /* BSD Private, local use, namespace incursion */
    217 #define	IPPROTO_DIVERT		254		/* divert pseudo-protocol */
    218 #define	IPPROTO_MAX		256
    219 
    220 /* last return value of *_input(), meaning "all job for this pkt is done".  */
    221 #define	IPPROTO_DONE		257
    222 
    223 /*
    224  * Local port number conventions:
    225  *
    226  * When a user does a bind(2) or connect(2) with a port number of zero,
    227  * a non-conflicting local port address is chosen.
    228  * The default range is IPPORT_HIFIRSTAUTO through
    229  * IPPORT_HILASTAUTO, although that is settable by sysctl.
    230  *
    231  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
    232  * default assignment range.
    233  *
    234  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
    235  *
    236  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
    237  * into the "high" range.  These are reserved for client outbound connections
    238  * which do not want to be filtered by any firewalls.  Note that by default
    239  * this is the same as IP_PORTRANGE_DEFAULT.
    240  *
    241  * The value IP_PORTRANGE_LOW changes the range to the "low" are
    242  * that is (by convention) restricted to privileged processes.  This
    243  * convention is based on "vouchsafe" principles only.  It is only secure
    244  * if you trust the remote host to restrict these ports.
    245  *
    246  * The default range of ports and the high range can be changed by
    247  * sysctl(3).  (net.inet.ip.port{hi,low}{first,last}_auto)
    248  *
    249  * Changing those values has bad security implications if you are
    250  * using a a stateless firewall that is allowing packets outside of that
    251  * range in order to allow transparent outgoing connections.
    252  *
    253  * Such a firewall configuration will generally depend on the use of these
    254  * default values.  If you change them, you may find your Security
    255  * Administrator looking for you with a heavy object.
    256  *
    257  * For a slightly more orthodox text view on this:
    258  *
    259  *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
    260  *
    261  *    port numbers are divided into three ranges:
    262  *
    263  *                0 -  1023 Well Known Ports
    264  *             1024 - 49151 Registered Ports
    265  *            49152 - 65535 Dynamic and/or Private Ports
    266  *
    267  */
    268 
    269 /*
    270  * Ports < IPPORT_RESERVED are reserved for
    271  * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
    272  */
    273 #define	IPPORT_RESERVED		1024
    274 
    275 /*
    276  * Default local port range, used by both IP_PORTRANGE_DEFAULT
    277  * and IP_PORTRANGE_HIGH.
    278  */
    279 #define	IPPORT_HIFIRSTAUTO	49152
    280 #define	IPPORT_HILASTAUTO	65535
    281 
    282 /*
    283  * Scanning for a free reserved port return a value below IPPORT_RESERVED,
    284  * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
    285  * 512, but that conflicts with some well-known-services that firewalls may
    286  * have a fit if we use.
    287  */
    288 #define IPPORT_RESERVEDSTART	600
    289 
    290 #define	IPPORT_MAX		65535
    291 
    292 #ifndef _UINT8_T_DECLARED
    293 typedef	__uint8_t		uint8_t;
    294 #define	_UINT8_T_DECLARED
    295 #endif
    296 
    297 #ifndef _UINT16_T_DECLARED
    298 typedef	__uint16_t		uint16_t;
    299 #define	_UINT16_T_DECLARED
    300 #endif
    301 
    302 #ifndef _UINT32_T_DECLARED
    303 typedef	__uint32_t		uint32_t;
    304 #define	_UINT32_T_DECLARED
    305 #endif
    306 
    307 #ifndef _IN_ADDR_T_DECLARED
    308 typedef	uint32_t		in_addr_t;
    309 #define	_IN_ADDR_T_DECLARED
    310 #endif
    311 
    312 #ifndef _IN_PORT_T_DECLARED
    313 typedef	uint16_t		in_port_t;
    314 #define	_IN_PORT_T_DECLARED
    315 #endif
    316 
    317 #ifdef _BSD_SA_FAMILY_T_
    318 typedef	_BSD_SA_FAMILY_T_	sa_family_t;
    319 #undef _BSD_SA_FAMILY_T_
    320 #endif
    321 
    322 /*
    323  * Internet address (a structure for historical reasons)
    324  */
    325 #ifndef	_STRUCT_IN_ADDR_DECLARED
    326 struct in_addr {
    327 	in_addr_t s_addr;
    328 };
    329 #define	_STRUCT_IN_ADDR_DECLARED
    330 #endif
    331 
    332 /*
    333  * Definitions of bits in internet address integers.
    334  * On subnets, the decomposition of addresses to host and net parts
    335  * is done according to subnet mask, not the masks here.
    336  */
    337 #define	IN_CLASSA(i)		(((uint32_t)(i) & 0x80000000) == 0)
    338 #define	IN_CLASSA_NET		0xff000000
    339 #define	IN_CLASSA_NSHIFT	24
    340 #define	IN_CLASSA_HOST		0x00ffffff
    341 #define	IN_CLASSA_MAX		128
    342 
    343 #define	IN_CLASSB(i)		(((uint32_t)(i) & 0xc0000000) == 0x80000000)
    344 #define	IN_CLASSB_NET		0xffff0000
    345 #define	IN_CLASSB_NSHIFT	16
    346 #define	IN_CLASSB_HOST		0x0000ffff
    347 #define	IN_CLASSB_MAX		65536
    348 
    349 #define	IN_CLASSC(i)		(((uint32_t)(i) & 0xe0000000) == 0xc0000000)
    350 #define	IN_CLASSC_NET		0xffffff00
    351 #define	IN_CLASSC_NSHIFT	8
    352 #define	IN_CLASSC_HOST		0x000000ff
    353 
    354 #define	IN_CLASSD(i)		(((uint32_t)(i) & 0xf0000000) == 0xe0000000)
    355 #define	IN_CLASSD_NET		0xf0000000	/* These ones aren't really */
    356 #define	IN_CLASSD_NSHIFT	28		/* net and host fields, but */
    357 #define	IN_CLASSD_HOST		0x0fffffff	/* routing needn't know.    */
    358 #define	IN_MULTICAST(i)		IN_CLASSD(i)
    359 
    360 #define	IN_EXPERIMENTAL(i)	(((uint32_t)(i) & 0xf0000000) == 0xf0000000)
    361 #define	IN_BADCLASS(i)		(((uint32_t)(i) & 0xf0000000) == 0xf0000000)
    362 
    363 #define	INADDR_LOOPBACK		(uint32_t)0x7f000001
    364 #ifndef _KERNEL
    365 #define	INADDR_NONE		0xffffffff		/* -1 return */
    366 #endif
    367 
    368 #define	INADDR_UNSPEC_GROUP	(uint32_t)0xe0000000	/* 224.0.0.0 */
    369 #define	INADDR_ALLHOSTS_GROUP	(uint32_t)0xe0000001	/* 224.0.0.1 */
    370 #define	INADDR_ALLRTRS_GROUP	(uint32_t)0xe0000002	/* 224.0.0.2 */
    371 #define	INADDR_MAX_LOCAL_GROUP	(uint32_t)0xe00000ff	/* 224.0.0.255 */
    372 
    373 #define	IN_LOOPBACKNET		127			/* official! */
    374 
    375 /*
    376  * Options for use with [gs]etsockopt at the IP level.
    377  * First word of comment is data type; bool is stored in int.
    378  */
    379 #define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
    380 #define	IP_HDRINCL		2    /* int; header is included with data */
    381 #define	IP_TOS			3    /* int; IP type of service and preced. */
    382 #define	IP_TTL			4    /* int; IP time to live */
    383 #define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
    384 #define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
    385 #define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
    386 #define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
    387 #define	IP_MULTICAST_IF		9    /* u_char; set/get IP multicast i/f  */
    388 #define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
    389 #define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
    390 #define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
    391 #define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
    392 #define IP_MULTICAST_VIF	14   /* set/get IP mcast virt. iface */
    393 #define IP_RSVP_ON		15   /* enable RSVP in kernel */
    394 #define IP_RSVP_OFF		16   /* disable RSVP in kernel */
    395 #define IP_RSVP_VIF_ON		17   /* set RSVP per-vif socket */
    396 #define IP_RSVP_VIF_OFF		18   /* unset RSVP per-vif socket */
    397 #define IP_PORTRANGE		19   /* int; range to choose for unspec port */
    398 #define	IP_RECVIF		20   /* bool; receive reception if w/dgram */
    399 /* for IPSEC */
    400 #define	IP_IPSEC_POLICY		21   /* int; set/get security policy */
    401 #define	IP_FAITH		22   /* bool; accept FAITH'ed connections */
    402 
    403 #define	IP_FW_ADD     		50   /* add a firewall rule to chain */
    404 #define	IP_FW_DEL    		51   /* delete a firewall rule from chain */
    405 #define	IP_FW_FLUSH   		52   /* flush firewall rule chain */
    406 #define	IP_FW_ZERO    		53   /* clear single/all firewall counter(s) */
    407 #define	IP_FW_GET     		54   /* get entire firewall rule chain */
    408 #define	IP_FW_RESETLOG		55   /* reset logging counters */
    409 
    410 #define	IP_DUMMYNET_CONFIGURE	60   /* add/configure a dummynet pipe */
    411 #define	IP_DUMMYNET_DEL		61   /* delete a dummynet pipe from chain */
    412 #define	IP_DUMMYNET_FLUSH	62   /* flush dummynet */
    413 #define	IP_DUMMYNET_GET		64   /* get entire dummynet pipes */
    414 
    415 /*
    416  * Defaults and limits for options
    417  */
    418 #define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
    419 #define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
    420 #define	IP_MAX_MEMBERSHIPS	20	/* per socket */
    421 
    422 /*
    423  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
    424  */
    425 struct ip_mreq {
    426 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
    427 	struct	in_addr imr_interface;	/* local IP address of interface */
    428 };
    429 
    430 /*
    431  * Argument for IP_PORTRANGE:
    432  * - which range to search when port is unspecified at bind() or connect()
    433  */
    434 #define	IP_PORTRANGE_DEFAULT	0	/* default range */
    435 #define	IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
    436 #define	IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
    437 
    438 /*
    439  * Definitions for inet sysctl operations.
    440  *
    441  * Third level is protocol number.
    442  * Fourth level is desired variable within that protocol.
    443  */
    444 #define	IPPROTO_MAXID	(IPPROTO_AH + 1)	/* don't list to IPPROTO_MAX */
    445 
    446 #define	CTL_IPPROTO_NAMES { \
    447 	{ "ip", CTLTYPE_NODE }, \
    448 	{ "icmp", CTLTYPE_NODE }, \
    449 	{ "igmp", CTLTYPE_NODE }, \
    450 	{ "ggp", CTLTYPE_NODE }, \
    451 	{ 0, 0 }, \
    452 	{ 0, 0 }, \
    453 	{ "tcp", CTLTYPE_NODE }, \
    454 	{ 0, 0 }, \
    455 	{ "egp", CTLTYPE_NODE }, \
    456 	{ 0, 0 }, \
    457 	{ 0, 0 }, \
    458 	{ 0, 0 }, \
    459 	{ "pup", CTLTYPE_NODE }, \
    460 	{ 0, 0 }, \
    461 	{ 0, 0 }, \
    462 	{ 0, 0 }, \
    463 	{ 0, 0 }, \
    464 	{ "udp", CTLTYPE_NODE }, \
    465 	{ 0, 0 }, \
    466 	{ 0, 0 }, \
    467 	{ 0, 0 }, \
    468 	{ 0, 0 }, \
    469 	{ "idp", CTLTYPE_NODE }, \
    470 	{ 0, 0 }, \
    471 	{ 0, 0 }, \
    472 	{ 0, 0 }, \
    473 	{ 0, 0 }, \
    474 	{ 0, 0 }, \
    475 	{ 0, 0 }, \
    476 	{ 0, 0 }, \
    477 	{ 0, 0 }, \
    478 	{ 0, 0 }, \
    479 	{ 0, 0 }, \
    480 	{ 0, 0 }, \
    481 	{ 0, 0 }, \
    482 	{ 0, 0 }, \
    483 	{ 0, 0 }, \
    484 	{ 0, 0 }, \
    485 	{ 0, 0 }, \
    486 	{ 0, 0 }, \
    487 	{ 0, 0 }, \
    488 	{ 0, 0 }, \
    489 	{ 0, 0 }, \
    490 	{ 0, 0 }, \
    491 	{ 0, 0 }, \
    492 	{ 0, 0 }, \
    493 	{ 0, 0 }, \
    494 	{ 0, 0 }, \
    495 	{ 0, 0 }, \
    496 	{ 0, 0 }, \
    497 	{ 0, 0 }, \
    498 	{ "ipsec", CTLTYPE_NODE }, \
    499 }
    500 
    501 /*
    502  * Names for IP sysctl objects
    503  */
    504 #define	IPCTL_FORWARDING	1	/* act as router */
    505 #define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
    506 #define	IPCTL_DEFTTL		3	/* default TTL */
    507 #ifdef notyet
    508 #define	IPCTL_DEFMTU		4	/* default MTU */
    509 #endif
    510 #define IPCTL_RTEXPIRE		5	/* cloned route expiration time */
    511 #define IPCTL_RTMINEXPIRE	6	/* min value for expiration time */
    512 #define IPCTL_RTMAXCACHE	7	/* trigger level for dynamic expire */
    513 #define	IPCTL_SOURCEROUTE	8	/* may perform source routes */
    514 #define	IPCTL_DIRECTEDBROADCAST	9	/* may re-broadcast received packets */
    515 #define IPCTL_INTRQMAXLEN	10	/* max length of netisr queue */
    516 #define	IPCTL_INTRQDROPS	11	/* number of netisr q drops */
    517 #define	IPCTL_STATS		12	/* ipstat structure */
    518 #define	IPCTL_ACCEPTSOURCEROUTE	13	/* may accept source routed packets */
    519 #define	IPCTL_FASTFORWARDING	14	/* use fast IP forwarding code */
    520 #define	IPCTL_KEEPFAITH		15	/* FAITH IPv4->IPv6 translater ctl */
    521 #define	IPCTL_GIF_TTL		16	/* default TTL for gif encap packet */
    522 #define	IPCTL_MAXID		17
    523 
    524 #define	IPCTL_NAMES { \
    525 	{ 0, 0 }, \
    526 	{ "forwarding", CTLTYPE_INT }, \
    527 	{ "redirect", CTLTYPE_INT }, \
    528 	{ "ttl", CTLTYPE_INT }, \
    529 	{ "mtu", CTLTYPE_INT }, \
    530 	{ "rtexpire", CTLTYPE_INT }, \
    531 	{ "rtminexpire", CTLTYPE_INT }, \
    532 	{ "rtmaxcache", CTLTYPE_INT }, \
    533 	{ "sourceroute", CTLTYPE_INT }, \
    534  	{ "directed-broadcast", CTLTYPE_INT }, \
    535 	{ "intr-queue-maxlen", CTLTYPE_INT }, \
    536 	{ "intr-queue-drops", CTLTYPE_INT }, \
    537 	{ "stats", CTLTYPE_STRUCT }, \
    538 	{ "accept_sourceroute", CTLTYPE_INT }, \
    539 	{ "fastforwarding", CTLTYPE_INT }, \
    540 }
    541 
    542 #endif /* __BSD_VISIBLE */
    543 
    544 #ifdef _KERNEL
    545 
    546 struct ifnet; struct mbuf;	/* forward declarations for Standard C */
    547 
    548 int	 in_broadcast(struct in_addr, struct ifnet *);
    549 int	 in_canforward(struct in_addr);
    550 int	 in_localaddr(struct in_addr);
    551 char 	*inet_ntoa(struct in_addr); /* in libkern */
    552 char	*inet_ntoa_r(struct in_addr ina, char *buf); /* in libkern */
    553 
    554 #define satosin(sa)	((struct sockaddr_in *)(sa))
    555 #define sintosa(sin)	((struct sockaddr *)(sin))
    556 #define ifatoia(ifa)	((struct in_ifaddr *)(ifa))
    557 
    558 #endif /* _KERNEL */
    559 
    560 /* INET6 stuff */
    561 #define	__KAME_NETINET_IN_H_INCLUDED_
    562 #include <netinet6/in6.h>
    563 #undef __KAME_NETINET_IN_H_INCLUDED_
    564 
    565 __BEGIN_DECLS
    566 uint32_t         htonl(uint32_t hostlong);
    567 uint16_t         htons(uint16_t hostshort);
    568 uint32_t         ntohl(uint32_t networklong);
    569 uint16_t         ntohs(uint16_t networkshort);
    570 __END_DECLS
    571 
    572 #endif /* !_NETINET_IN_H_*/
    573