From owner-cvs-src-old@FreeBSD.ORG Fri Jan 9 16:02:58 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 78EB810656BE for ; Fri, 9 Jan 2009 16:02:58 +0000 (UTC) (envelope-from adrian@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 65BA78FC19 for ; Fri, 9 Jan 2009 16:02:58 +0000 (UTC) (envelope-from adrian@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n09G2wZ3053993 for ; Fri, 9 Jan 2009 16:02:58 GMT (envelope-from adrian@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n09G2wP0053992 for cvs-src-old@freebsd.org; Fri, 9 Jan 2009 16:02:58 GMT (envelope-from adrian@repoman.freebsd.org) Message-Id: <200901091602.n09G2wP0053992@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to adrian@repoman.freebsd.org using -f From: Adrian Chadd Date: Fri, 9 Jan 2009 16:02:19 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/conf NOTES options src/sys/netinet in.h in_pcb.c in_pcb.h ip_output.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Jan 2009 16:02:59 -0000 adrian 2009-01-09 16:02:19 UTC FreeBSD src repository Modified files: sys/conf NOTES options sys/netinet in.h in_pcb.c in_pcb.h ip_output.c Log: SVN rev 186955 on 2009-01-09 16:02:19Z by adrian Implement a new IP option (not compiled/enabled by default) to allow applications to specify a non-local IP address when bind()'ing a socket to a local endpoint. This allows applications to spoof the client IP address of connections if (obviously!) they somehow are able to receive the traffic normally destined to said clients. This patch doesn't include any changes to ipfw or the bridging code to redirect the client traffic through the PCB checks so TCP gets a shot at it. The normal behaviour is that packets with a non-local destination IP address are not handled locally. This can be dealth with some IPFW hackery; modifications to IPFW to make this less hacky will occur in subsequent commmits. Thanks to Julian Elischer and others at Ironport. This work was approved and donated before Cisco acquired them. Obtained from: Julian Elischer and others MFC after: 2 weeks Revision Changes Path 1.1520 +8 -0 src/sys/conf/NOTES 1.655 +1 -0 src/sys/conf/options 1.105 +1 -0 src/sys/netinet/in.h 1.237 +6 -1 src/sys/netinet/in_pcb.c 1.125 +2 -0 src/sys/netinet/in_pcb.h 1.295 +19 -0 src/sys/netinet/ip_output.c