Function ng_ipfw_rcvdata

freebsd/netgraph/ng_ipfw.c:228–283

}

static int
ng_ipfw_rcvdata(hook_p hook, item_p item)
{
	struct m_tag *tag;
	struct ipfw_rule_ref *r;
	struct mbuf *m;
	struct ip *ip;

	NGI_GET_M(item, m);
	NG_FREE_ITEM(item);

	tag = m_tag_locate(m, MTAG_IPFW_RULE, 0, NULL);
	if (tag == NULL) {
		NG_FREE_M(m);
		return (EINVAL);	/* XXX: find smth better */
	}

	if (m->m_len < sizeof(struct ip) &&
	    (m = m_pullup(m, sizeof(struct ip))) == NULL)
		return (ENOBUFS);

	ip = mtod(m, struct ip *);

	r = (struct ipfw_rule_ref *)(tag + 1);
	if (r->info & IPFW_INFO_IN) {
		switch (ip->ip_v) {
#ifdef INET
		case IPVERSION:
			ip_input(m);
			return (0);
#endif
#ifdef INET6
		case IPV6_VERSION >> 4:
			ip6_input(m);
			return (0);
#endif
		}
	} else {
		switch (ip->ip_v) {
#ifdef INET
		case IPVERSION:
			return (ip_output(m, NULL, NULL, IP_FORWARDING,
			    NULL, NULL));
#endif
#ifdef INET6
		case IPV6_VERSION >> 4:
			return (ip6_output(m, NULL, NULL, 0, NULL,
			    NULL, NULL));
#endif
		}
	}

	/* unknown IP protocol version */
	NG_FREE_M(m);
	return (EPROTONOSUPPORT);
}

static int