From owner-cvs-src-old@FreeBSD.ORG Sat Feb 7 10:17:34 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8DF071065676 for ; Sat, 7 Feb 2009 10:17:34 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 7B5618FC0C for ; Sat, 7 Feb 2009 10:17:34 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n17AHY9g030622 for ; Sat, 7 Feb 2009 10:17:34 GMT (envelope-from bz@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n17AHYFJ030621 for cvs-src-old@freebsd.org; Sat, 7 Feb 2009 10:17:34 GMT (envelope-from bz@repoman.freebsd.org) Message-Id: <200902071017.n17AHYFJ030621@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to bz@repoman.freebsd.org using -f From: "Bjoern A. Zeeb" Date: Sat, 7 Feb 2009 10:17:29 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_7 Subject: cvs commit: src/sys/netinet in_pcb.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Feb 2009 10:17:34 -0000 bz 2009-02-07 10:17:29 UTC FreeBSD src repository Modified files: (Branch: RELENG_7) sys/netinet in_pcb.c Log: SVN rev 188275 on 2009-02-07 10:17:29Z by bz MFC: r183571: Implement IPv4 source address selection for unbound sockets. This also changes the semantics of selecting the IP for processes within a jail as it now uses the same logic as outside the jail (with additional checks) but no longer is on a mutually exclusive code path. r186086: With the special check for FreeBSD before 8 a destination route via a loopback interface is treated as a valid and reachable thing for IPv4 source address selection, even though nothing of that network is ever directly reachable, but it is more like a blackhole route. With this the source address will be selected and IPsec can grab the packets before we would discard them at a later point, encapsulate them and send them out from a different tunnel endpoint IP. This is needed to not change the expected behaviour on a stable branch. Revision Changes Path 1.196.2.16 +208 -42 src/sys/netinet/in_pcb.c