From owner-svn-src-head@FreeBSD.ORG  Fri Jan  9 20:43:06 2009
Return-Path: <owner-svn-src-head@FreeBSD.ORG>
Delivered-To: svn-src-head@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CECBF10657B7;
	Fri,  9 Jan 2009 20:43:06 +0000 (UTC)
	(envelope-from prvs=julian=25380973a@elischer.org)
Received: from smtp-outbound.ironport.com (smtp-outbound.ironport.com
	[63.251.108.112])
	by mx1.freebsd.org (Postfix) with ESMTP id AFAB98FC26;
	Fri,  9 Jan 2009 20:43:06 +0000 (UTC)
	(envelope-from prvs=julian=25380973a@elischer.org)
Received: from unknown (HELO julian-mac.elischer.org) ([10.251.60.87])
	by smtp-outbound.ironport.com with ESMTP; 09 Jan 2009 12:43:06 -0800
Message-ID: <4967B6D9.90001@elischer.org>
Date: Fri, 09 Jan 2009 12:43:05 -0800
From: Julian Elischer <julian@elischer.org>
User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209)
MIME-Version: 1.0
To: Attila Nagy <bra@fsn.hu>
References: <200901091602.n09G2Jj1061164@svn.freebsd.org>
	<4967A500.30205@fsn.hu>
In-Reply-To: <4967A500.30205@fsn.hu>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Cc: svn-src-head@freebsd.org, Adrian Chadd <adrian@FreeBSD.org>,
	src-committers@freebsd.org, svn-src-all@freebsd.org
Subject: Re: svn commit: r186955 - in head/sys: conf netinet
X-BeenThere: svn-src-head@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: SVN commit messages for the src tree for head/-current
	<svn-src-head.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-head>,
	<mailto:svn-src-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-head>
List-Post: <mailto:svn-src-head@freebsd.org>
List-Help: <mailto:svn-src-head-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-head>,
	<mailto:svn-src-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Jan 2009 20:43:09 -0000

Attila Nagy wrote:
> Hello,
> 
> Adrian Chadd wrote:
>> Author: adrian
>> Date: Fri Jan  9 16:02:19 2009
>> New Revision: 186955
>> URL: http://svn.freebsd.org/changeset/base/186955
>>
>> Log:
>>   Implement a new IP option (not compiled/enabled by default) to allow
>>   applications to specify a non-local IP address when bind()'ing a socket
>>   to a local endpoint.
>>     This allows applications to spoof the client IP address of 
>> connections
>>   if (obviously!) they somehow are able to receive the traffic normally
>>   destined to said clients.
>>     This patch doesn't include any changes to ipfw or the bridging 
>> code to
>>   redirect the client traffic through the PCB checks so TCP gets a shot
>>   at it. The normal behaviour is that packets with a non-local 
>> destination
>>   IP address are not handled locally. This can be dealth with some 
>> IPFW hackery;
>>   modifications to IPFW to make this less hacky will occur in subsequent
>>   commmits.
>>     Thanks to Julian Elischer and others at Ironport. This work was 
>> approved
>>   and donated before Cisco acquired them.
>>     Obtained from:    Julian Elischer and others
>>   MFC after:    2 weeks
>>   
> Wouldn't it be better to implement existing interfaces for that?
> OpenBSD has a SO_BINDANY socket option and it seems it's also in BSD/OS:
> http://marc.info/?l=openbsd-cvs&w=2&r=1&s=bindany&q=b

good point