ip_irc_pxy.c revision 1.2.4.2
1 1.2.4.2 yamt /* $NetBSD: ip_irc_pxy.c,v 1.2.4.2 2012/04/17 00:08:16 yamt Exp $ */ 2 1.2.4.2 yamt 3 1.2.4.2 yamt /* 4 1.2.4.2 yamt * Copyright (C) 2008 by Darren Reed. 5 1.2.4.2 yamt * 6 1.2.4.2 yamt * See the IPFILTER.LICENCE file for details on licencing. 7 1.2.4.2 yamt * 8 1.2.4.2 yamt * Id: ip_irc_pxy.c,v 2.56.2.1 2012/01/26 05:29:11 darrenr Exp 9 1.2.4.2 yamt */ 10 1.2.4.2 yamt 11 1.2.4.2 yamt #include <sys/cdefs.h> 12 1.2.4.2 yamt __KERNEL_RCSID(1, "$NetBSD: ip_irc_pxy.c,v 1.2.4.2 2012/04/17 00:08:16 yamt Exp $"); 13 1.2.4.2 yamt 14 1.2.4.2 yamt #define IPF_IRC_PROXY 15 1.2.4.2 yamt 16 1.2.4.2 yamt #define IPF_IRCBUFSZ 96 /* This *MUST* be >= 64! */ 17 1.2.4.2 yamt 18 1.2.4.2 yamt 19 1.2.4.2 yamt void ipf_p_irc_main_load(void); 20 1.2.4.2 yamt void ipf_p_irc_main_unload(void); 21 1.2.4.2 yamt int ipf_p_irc_new(void *, fr_info_t *, ap_session_t *, nat_t *); 22 1.2.4.2 yamt int ipf_p_irc_out(void *, fr_info_t *, ap_session_t *, nat_t *); 23 1.2.4.2 yamt int ipf_p_irc_send(fr_info_t *, nat_t *); 24 1.2.4.2 yamt int ipf_p_irc_complete(ircinfo_t *, char *, size_t); 25 1.2.4.2 yamt u_short ipf_irc_atoi(char **); 26 1.2.4.2 yamt 27 1.2.4.2 yamt static frentry_t ircnatfr; 28 1.2.4.2 yamt 29 1.2.4.2 yamt int irc_proxy_init = 0; 30 1.2.4.2 yamt 31 1.2.4.2 yamt 32 1.2.4.2 yamt /* 33 1.2.4.2 yamt * Initialize local structures. 34 1.2.4.2 yamt */ 35 1.2.4.2 yamt void 36 1.2.4.2 yamt ipf_p_irc_main_load(void) 37 1.2.4.2 yamt { 38 1.2.4.2 yamt bzero((char *)&ircnatfr, sizeof(ircnatfr)); 39 1.2.4.2 yamt ircnatfr.fr_ref = 1; 40 1.2.4.2 yamt ircnatfr.fr_flags = FR_INQUE|FR_PASS|FR_QUICK|FR_KEEPSTATE; 41 1.2.4.2 yamt MUTEX_INIT(&ircnatfr.fr_lock, "IRC proxy rule lock"); 42 1.2.4.2 yamt irc_proxy_init = 1; 43 1.2.4.2 yamt } 44 1.2.4.2 yamt 45 1.2.4.2 yamt 46 1.2.4.2 yamt void 47 1.2.4.2 yamt ipf_p_irc_main_unload(void) 48 1.2.4.2 yamt { 49 1.2.4.2 yamt if (irc_proxy_init == 1) { 50 1.2.4.2 yamt MUTEX_DESTROY(&ircnatfr.fr_lock); 51 1.2.4.2 yamt irc_proxy_init = 0; 52 1.2.4.2 yamt } 53 1.2.4.2 yamt } 54 1.2.4.2 yamt 55 1.2.4.2 yamt 56 1.2.4.2 yamt const char *ipf_p_irc_dcctypes[] = { 57 1.2.4.2 yamt "CHAT ", /* CHAT chat ipnumber portnumber */ 58 1.2.4.2 yamt "SEND ", /* SEND filename ipnumber portnumber */ 59 1.2.4.2 yamt "MOVE ", 60 1.2.4.2 yamt "TSEND ", 61 1.2.4.2 yamt "SCHAT ", 62 1.2.4.2 yamt NULL, 63 1.2.4.2 yamt }; 64 1.2.4.2 yamt 65 1.2.4.2 yamt 66 1.2.4.2 yamt /* 67 1.2.4.2 yamt * :A PRIVMSG B :^ADCC CHAT chat 0 0^A\r\n 68 1.2.4.2 yamt * PRIVMSG B ^ADCC CHAT chat 0 0^A\r\n 69 1.2.4.2 yamt */ 70 1.2.4.2 yamt 71 1.2.4.2 yamt 72 1.2.4.2 yamt int 73 1.2.4.2 yamt ipf_p_irc_complete(ircinfo_t *ircp, char *buf, size_t len) 74 1.2.4.2 yamt { 75 1.2.4.2 yamt register char *s, c; 76 1.2.4.2 yamt register size_t i; 77 1.2.4.2 yamt u_32_t l; 78 1.2.4.2 yamt int j, k; 79 1.2.4.2 yamt 80 1.2.4.2 yamt ircp->irc_ipnum = 0; 81 1.2.4.2 yamt ircp->irc_port = 0; 82 1.2.4.2 yamt 83 1.2.4.2 yamt if (len < 31) 84 1.2.4.2 yamt return 0; 85 1.2.4.2 yamt s = buf; 86 1.2.4.2 yamt c = *s++; 87 1.2.4.2 yamt i = len - 1; 88 1.2.4.2 yamt 89 1.2.4.2 yamt if ((c != ':') && (c != 'P')) 90 1.2.4.2 yamt return 0; 91 1.2.4.2 yamt 92 1.2.4.2 yamt if (c == ':') { 93 1.2.4.2 yamt /* 94 1.2.4.2 yamt * Loosely check that the source is a nickname of some sort 95 1.2.4.2 yamt */ 96 1.2.4.2 yamt s++; 97 1.2.4.2 yamt c = *s; 98 1.2.4.2 yamt ircp->irc_snick = s; 99 1.2.4.2 yamt if (!ISALPHA(c)) 100 1.2.4.2 yamt return 0; 101 1.2.4.2 yamt i--; 102 1.2.4.2 yamt for (c = *s; !ISSPACE(c) && (i > 0); i--) 103 1.2.4.2 yamt c = *s++; 104 1.2.4.2 yamt if (i < 31) 105 1.2.4.2 yamt return 0; 106 1.2.4.2 yamt if (c != 'P') 107 1.2.4.2 yamt return 0; 108 1.2.4.2 yamt } else 109 1.2.4.2 yamt ircp->irc_snick = NULL; 110 1.2.4.2 yamt 111 1.2.4.2 yamt /* 112 1.2.4.2 yamt * Check command string 113 1.2.4.2 yamt */ 114 1.2.4.2 yamt if (strncmp(s, "PRIVMSG ", 8)) 115 1.2.4.2 yamt return 0; 116 1.2.4.2 yamt i -= 8; 117 1.2.4.2 yamt s += 8; 118 1.2.4.2 yamt c = *s; 119 1.2.4.2 yamt ircp->irc_dnick = s; 120 1.2.4.2 yamt 121 1.2.4.2 yamt /* 122 1.2.4.2 yamt * Loosely check that the destination is a nickname of some sort 123 1.2.4.2 yamt */ 124 1.2.4.2 yamt if (!ISALPHA(c)) 125 1.2.4.2 yamt return 0; 126 1.2.4.2 yamt for (; !ISSPACE(c) && (i > 0); i--) 127 1.2.4.2 yamt c = *s++; 128 1.2.4.2 yamt if (i < 20) 129 1.2.4.2 yamt return 0; 130 1.2.4.2 yamt s++, 131 1.2.4.2 yamt i--; 132 1.2.4.2 yamt 133 1.2.4.2 yamt /* 134 1.2.4.2 yamt * Look for a ^A to start the DCC 135 1.2.4.2 yamt */ 136 1.2.4.2 yamt c = *s; 137 1.2.4.2 yamt if (c == ':') { 138 1.2.4.2 yamt s++; 139 1.2.4.2 yamt c = *s; 140 1.2.4.2 yamt } 141 1.2.4.2 yamt 142 1.2.4.2 yamt if (strncmp(s, "\001DCC ", 4)) 143 1.2.4.2 yamt return 0; 144 1.2.4.2 yamt 145 1.2.4.2 yamt i -= 4; 146 1.2.4.2 yamt s += 4; 147 1.2.4.2 yamt 148 1.2.4.2 yamt /* 149 1.2.4.2 yamt * Check for a recognised DCC command 150 1.2.4.2 yamt */ 151 1.2.4.2 yamt for (j = 0, k = 0; ipf_p_irc_dcctypes[j]; j++) { 152 1.2.4.2 yamt k = MIN(strlen(ipf_p_irc_dcctypes[j]), i); 153 1.2.4.2 yamt if (!strncmp(ipf_p_irc_dcctypes[j], s, k)) 154 1.2.4.2 yamt break; 155 1.2.4.2 yamt } 156 1.2.4.2 yamt if (!ipf_p_irc_dcctypes[j]) 157 1.2.4.2 yamt return 0; 158 1.2.4.2 yamt 159 1.2.4.2 yamt ircp->irc_type = s; 160 1.2.4.2 yamt i -= k; 161 1.2.4.2 yamt s += k; 162 1.2.4.2 yamt 163 1.2.4.2 yamt if (i < 11) 164 1.2.4.2 yamt return 0; 165 1.2.4.2 yamt 166 1.2.4.2 yamt /* 167 1.2.4.2 yamt * Check for the arg 168 1.2.4.2 yamt */ 169 1.2.4.2 yamt c = *s; 170 1.2.4.2 yamt if (ISSPACE(c)) 171 1.2.4.2 yamt return 0; 172 1.2.4.2 yamt ircp->irc_arg = s; 173 1.2.4.2 yamt for (; (c != ' ') && (c != '\001') && (i > 0); i--) 174 1.2.4.2 yamt c = *s++; 175 1.2.4.2 yamt 176 1.2.4.2 yamt if (c == '\001') /* In reality a ^A can quote another ^A...*/ 177 1.2.4.2 yamt return 0; 178 1.2.4.2 yamt 179 1.2.4.2 yamt if (i < 5) 180 1.2.4.2 yamt return 0; 181 1.2.4.2 yamt 182 1.2.4.2 yamt s++; 183 1.2.4.2 yamt i--; 184 1.2.4.2 yamt c = *s; 185 1.2.4.2 yamt if (!ISDIGIT(c)) 186 1.2.4.2 yamt return 0; 187 1.2.4.2 yamt ircp->irc_addr = s; 188 1.2.4.2 yamt /* 189 1.2.4.2 yamt * Get the IP# 190 1.2.4.2 yamt */ 191 1.2.4.2 yamt for (l = 0; ISDIGIT(c) && (i > 0); i--) { 192 1.2.4.2 yamt l *= 10; 193 1.2.4.2 yamt l += c - '0'; 194 1.2.4.2 yamt c = *s++; 195 1.2.4.2 yamt } 196 1.2.4.2 yamt 197 1.2.4.2 yamt if (i < 4) 198 1.2.4.2 yamt return 0; 199 1.2.4.2 yamt 200 1.2.4.2 yamt if (c != ' ') 201 1.2.4.2 yamt return 0; 202 1.2.4.2 yamt 203 1.2.4.2 yamt ircp->irc_ipnum = l; 204 1.2.4.2 yamt s++; 205 1.2.4.2 yamt i--; 206 1.2.4.2 yamt c = *s; 207 1.2.4.2 yamt if (!ISDIGIT(c)) 208 1.2.4.2 yamt return 0; 209 1.2.4.2 yamt /* 210 1.2.4.2 yamt * Get the port# 211 1.2.4.2 yamt */ 212 1.2.4.2 yamt for (l = 0; ISDIGIT(c) && (i > 0); i--) { 213 1.2.4.2 yamt l *= 10; 214 1.2.4.2 yamt l += c - '0'; 215 1.2.4.2 yamt c = *s++; 216 1.2.4.2 yamt } 217 1.2.4.2 yamt if (i < 3) 218 1.2.4.2 yamt return 0; 219 1.2.4.2 yamt if (strncmp(s, "\001\r\n", 3)) 220 1.2.4.2 yamt return 0; 221 1.2.4.2 yamt s += 3; 222 1.2.4.2 yamt ircp->irc_len = s - buf; 223 1.2.4.2 yamt ircp->irc_port = l; 224 1.2.4.2 yamt return 1; 225 1.2.4.2 yamt } 226 1.2.4.2 yamt 227 1.2.4.2 yamt 228 1.2.4.2 yamt int 229 1.2.4.2 yamt ipf_p_irc_new(void *arg, fr_info_t *fin, ap_session_t *aps, nat_t *nat) 230 1.2.4.2 yamt { 231 1.2.4.2 yamt ircinfo_t *irc; 232 1.2.4.2 yamt 233 1.2.4.2 yamt KMALLOC(irc, ircinfo_t *); 234 1.2.4.2 yamt if (irc == NULL) 235 1.2.4.2 yamt return -1; 236 1.2.4.2 yamt 237 1.2.4.2 yamt fin = fin; /* LINT */ 238 1.2.4.2 yamt nat = nat; /* LINT */ 239 1.2.4.2 yamt 240 1.2.4.2 yamt aps->aps_data = irc; 241 1.2.4.2 yamt aps->aps_psiz = sizeof(ircinfo_t); 242 1.2.4.2 yamt 243 1.2.4.2 yamt bzero((char *)irc, sizeof(*irc)); 244 1.2.4.2 yamt return 0; 245 1.2.4.2 yamt } 246 1.2.4.2 yamt 247 1.2.4.2 yamt 248 1.2.4.2 yamt int 249 1.2.4.2 yamt ipf_p_irc_send(fr_info_t *fin, nat_t *nat) 250 1.2.4.2 yamt { 251 1.2.4.2 yamt char ctcpbuf[IPF_IRCBUFSZ], newbuf[IPF_IRCBUFSZ]; 252 1.2.4.2 yamt tcphdr_t *tcp, tcph, *tcp2 = &tcph; 253 1.2.4.2 yamt int off, inc = 0, i, dlen; 254 1.2.4.2 yamt ipf_main_softc_t *softc; 255 1.2.4.2 yamt size_t nlen = 0, olen; 256 1.2.4.2 yamt struct in_addr swip; 257 1.2.4.2 yamt u_short a5, sp; 258 1.2.4.2 yamt ircinfo_t *irc; 259 1.2.4.2 yamt fr_info_t fi; 260 1.2.4.2 yamt nat_t *nat2; 261 1.2.4.2 yamt u_int a1; 262 1.2.4.2 yamt ip_t *ip; 263 1.2.4.2 yamt mb_t *m; 264 1.2.4.2 yamt #ifdef MENTAT 265 1.2.4.2 yamt mb_t *m1; 266 1.2.4.2 yamt #endif 267 1.2.4.2 yamt softc = fin->fin_main_soft; 268 1.2.4.2 yamt 269 1.2.4.2 yamt m = fin->fin_m; 270 1.2.4.2 yamt ip = fin->fin_ip; 271 1.2.4.2 yamt tcp = (tcphdr_t *)fin->fin_dp; 272 1.2.4.2 yamt bzero(ctcpbuf, sizeof(ctcpbuf)); 273 1.2.4.2 yamt off = (char *)tcp - (char *)ip + (TCP_OFF(tcp) << 2) + fin->fin_ipoff; 274 1.2.4.2 yamt 275 1.2.4.2 yamt #ifdef __sgi 276 1.2.4.2 yamt dlen = fin->fin_plen - off; 277 1.2.4.2 yamt #else 278 1.2.4.2 yamt dlen = MSGDSIZE(m) - off; 279 1.2.4.2 yamt #endif 280 1.2.4.2 yamt if (dlen <= 0) 281 1.2.4.2 yamt return 0; 282 1.2.4.2 yamt COPYDATA(m, off, MIN(sizeof(ctcpbuf), dlen), ctcpbuf); 283 1.2.4.2 yamt 284 1.2.4.2 yamt if (dlen <= 0) 285 1.2.4.2 yamt return 0; 286 1.2.4.2 yamt ctcpbuf[sizeof(ctcpbuf) - 1] = '\0'; 287 1.2.4.2 yamt *newbuf = '\0'; 288 1.2.4.2 yamt 289 1.2.4.2 yamt irc = nat->nat_aps->aps_data; 290 1.2.4.2 yamt if (ipf_p_irc_complete(irc, ctcpbuf, dlen) == 0) 291 1.2.4.2 yamt return 0; 292 1.2.4.2 yamt 293 1.2.4.2 yamt /* 294 1.2.4.2 yamt * check that IP address in the DCC reply is the same as the 295 1.2.4.2 yamt * sender of the command - prevents use for port scanning. 296 1.2.4.2 yamt */ 297 1.2.4.2 yamt if (irc->irc_ipnum != ntohl(nat->nat_osrcaddr)) 298 1.2.4.2 yamt return 0; 299 1.2.4.2 yamt 300 1.2.4.2 yamt a5 = irc->irc_port; 301 1.2.4.2 yamt 302 1.2.4.2 yamt /* 303 1.2.4.2 yamt * Calculate new address parts for the DCC command 304 1.2.4.2 yamt */ 305 1.2.4.2 yamt a1 = ntohl(ip->ip_src.s_addr); 306 1.2.4.2 yamt olen = irc->irc_len; 307 1.2.4.2 yamt i = irc->irc_addr - ctcpbuf; 308 1.2.4.2 yamt i++; 309 1.2.4.2 yamt (void) strncpy(newbuf, ctcpbuf, i); 310 1.2.4.2 yamt /* DO NOT change these! */ 311 1.2.4.2 yamt #if defined(SNPRINTF) && defined(KERNEL) 312 1.2.4.2 yamt SNPRINTF(newbuf, sizeof(newbuf) - i, "%u %u\001\r\n", a1, a5); 313 1.2.4.2 yamt #else 314 1.2.4.2 yamt (void) sprintf(newbuf, "%u %u\001\r\n", a1, a5); 315 1.2.4.2 yamt #endif 316 1.2.4.2 yamt 317 1.2.4.2 yamt nlen = strlen(newbuf); 318 1.2.4.2 yamt inc = nlen - olen; 319 1.2.4.2 yamt 320 1.2.4.2 yamt if ((inc + fin->fin_plen) > 65535) 321 1.2.4.2 yamt return 0; 322 1.2.4.2 yamt 323 1.2.4.2 yamt #ifdef MENTAT 324 1.2.4.2 yamt for (m1 = m; m1->b_cont; m1 = m1->b_cont) 325 1.2.4.2 yamt ; 326 1.2.4.2 yamt if ((inc > 0) && (m1->b_datap->db_lim - m1->b_wptr < inc)) { 327 1.2.4.2 yamt mblk_t *nm; 328 1.2.4.2 yamt 329 1.2.4.2 yamt /* alloc enough to keep same trailer space for lower driver */ 330 1.2.4.2 yamt nm = allocb(nlen, BPRI_MED); 331 1.2.4.2 yamt PANIC((!nm),("ipf_p_irc_out: allocb failed")); 332 1.2.4.2 yamt 333 1.2.4.2 yamt nm->b_band = m1->b_band; 334 1.2.4.2 yamt nm->b_wptr += nlen; 335 1.2.4.2 yamt 336 1.2.4.2 yamt m1->b_wptr -= olen; 337 1.2.4.2 yamt PANIC((m1->b_wptr < m1->b_rptr), 338 1.2.4.2 yamt ("ipf_p_irc_out: cannot handle fragmented data block")); 339 1.2.4.2 yamt 340 1.2.4.2 yamt linkb(m1, nm); 341 1.2.4.2 yamt } else { 342 1.2.4.2 yamt # if SOLARIS && defined(ICK_VALID) 343 1.2.4.2 yamt if (m1->b_datap->db_struiolim == m1->b_wptr) 344 1.2.4.2 yamt m1->b_datap->db_struiolim += inc; 345 1.2.4.2 yamt m1->b_datap->db_struioflag &= ~STRUIO_IP; 346 1.2.4.2 yamt # endif 347 1.2.4.2 yamt m1->b_wptr += inc; 348 1.2.4.2 yamt } 349 1.2.4.2 yamt #else 350 1.2.4.2 yamt if (inc < 0) 351 1.2.4.2 yamt m_adj(m, inc); 352 1.2.4.2 yamt /* the mbuf chain will be extended if necessary by m_copyback() */ 353 1.2.4.2 yamt #endif 354 1.2.4.2 yamt COPYBACK(m, off, nlen, newbuf); 355 1.2.4.2 yamt 356 1.2.4.2 yamt if (inc != 0) { 357 1.2.4.2 yamt #if defined(MENTAT) || defined(__sgi) 358 1.2.4.2 yamt register u_32_t sum1, sum2; 359 1.2.4.2 yamt 360 1.2.4.2 yamt sum1 = fin->fin_plen; 361 1.2.4.2 yamt sum2 = fin->fin_plen + inc; 362 1.2.4.2 yamt 363 1.2.4.2 yamt /* Because ~1 == -2, We really need ~1 == -1 */ 364 1.2.4.2 yamt if (sum1 > sum2) 365 1.2.4.2 yamt sum2--; 366 1.2.4.2 yamt sum2 -= sum1; 367 1.2.4.2 yamt sum2 = (sum2 & 0xffff) + (sum2 >> 16); 368 1.2.4.2 yamt 369 1.2.4.2 yamt ipf_fix_outcksum(fin, &ip->ip_sum, sum2); 370 1.2.4.2 yamt #endif 371 1.2.4.2 yamt fin->fin_plen += inc; 372 1.2.4.2 yamt ip->ip_len = htons(fin->fin_plen); 373 1.2.4.2 yamt fin->fin_dlen += inc; 374 1.2.4.2 yamt } 375 1.2.4.2 yamt 376 1.2.4.2 yamt /* 377 1.2.4.2 yamt * Add skeleton NAT entry for connection which will come back the 378 1.2.4.2 yamt * other way. 379 1.2.4.2 yamt */ 380 1.2.4.2 yamt sp = htons(a5); 381 1.2.4.2 yamt /* 382 1.2.4.2 yamt * Don't allow the PORT command to specify a port < 1024 due to 383 1.2.4.2 yamt * security crap. 384 1.2.4.2 yamt */ 385 1.2.4.2 yamt if (ntohs(sp) < 1024) 386 1.2.4.2 yamt return 0; 387 1.2.4.2 yamt 388 1.2.4.2 yamt /* 389 1.2.4.2 yamt * The server may not make the connection back from port 20, but 390 1.2.4.2 yamt * it is the most likely so use it here to check for a conflicting 391 1.2.4.2 yamt * mapping. 392 1.2.4.2 yamt */ 393 1.2.4.2 yamt bcopy((void *)fin, (void *)&fi, sizeof(fi)); 394 1.2.4.2 yamt fi.fin_data[0] = sp; 395 1.2.4.2 yamt fi.fin_data[1] = fin->fin_data[1]; 396 1.2.4.2 yamt nat2 = ipf_nat_outlookup(fin, IPN_TCP, nat->nat_pr[1], nat->nat_nsrcip, 397 1.2.4.2 yamt ip->ip_dst); 398 1.2.4.2 yamt if (nat2 == NULL) { 399 1.2.4.2 yamt #ifdef USE_MUTEXES 400 1.2.4.2 yamt ipf_nat_softc_t *softn = softc->ipf_nat_soft; 401 1.2.4.2 yamt #endif 402 1.2.4.2 yamt 403 1.2.4.2 yamt bcopy((void *)fin, (void *)&fi, sizeof(fi)); 404 1.2.4.2 yamt bzero((char *)tcp2, sizeof(*tcp2)); 405 1.2.4.2 yamt tcp2->th_win = htons(8192); 406 1.2.4.2 yamt tcp2->th_sport = sp; 407 1.2.4.2 yamt tcp2->th_dport = 0; /* XXX - don't specify remote port */ 408 1.2.4.2 yamt fi.fin_data[0] = ntohs(sp); 409 1.2.4.2 yamt fi.fin_data[1] = 0; 410 1.2.4.2 yamt fi.fin_dp = (char *)tcp2; 411 1.2.4.2 yamt fi.fin_fr = &ircnatfr; 412 1.2.4.2 yamt fi.fin_dlen = sizeof(*tcp2); 413 1.2.4.2 yamt fi.fin_plen = fi.fin_hlen + sizeof(*tcp2); 414 1.2.4.2 yamt swip = ip->ip_src; 415 1.2.4.2 yamt ip->ip_src = nat->nat_nsrcip; 416 1.2.4.2 yamt MUTEX_ENTER(&softn->ipf_nat_new); 417 1.2.4.2 yamt nat2 = ipf_nat_add(&fi, nat->nat_ptr, NULL, 418 1.2.4.2 yamt NAT_SLAVE|IPN_TCP|SI_W_DPORT, NAT_OUTBOUND); 419 1.2.4.2 yamt MUTEX_EXIT(&softn->ipf_nat_new); 420 1.2.4.2 yamt if (nat2 != NULL) { 421 1.2.4.2 yamt (void) ipf_nat_proto(&fi, nat2, 0); 422 1.2.4.2 yamt MUTEX_ENTER(&nat2->nat_lock); 423 1.2.4.2 yamt ipf_nat_update(&fi, nat2); 424 1.2.4.2 yamt MUTEX_EXIT(&nat2->nat_lock); 425 1.2.4.2 yamt 426 1.2.4.2 yamt (void) ipf_state_add(softc, &fi, NULL, SI_W_DPORT); 427 1.2.4.2 yamt } 428 1.2.4.2 yamt ip->ip_src = swip; 429 1.2.4.2 yamt } 430 1.2.4.2 yamt return inc; 431 1.2.4.2 yamt } 432 1.2.4.2 yamt 433 1.2.4.2 yamt 434 1.2.4.2 yamt int 435 1.2.4.2 yamt ipf_p_irc_out(void *arg, fr_info_t *fin, ap_session_t *aps, nat_t *nat) 436 1.2.4.2 yamt { 437 1.2.4.2 yamt aps = aps; /* LINT */ 438 1.2.4.2 yamt return ipf_p_irc_send(fin, nat); 439 1.2.4.2 yamt } 440
Indexes created Wed Oct 22 13:09:56 GMT 2025