Home | History | Annotate | Line # | Download | only in netinet
raw_ip.c revision 1.94.4.1
      1 /*	$NetBSD: raw_ip.c,v 1.94.4.1 2007/02/27 16:54:56 yamt Exp $	*/
      2 
      3 /*
      4  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      5  * All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  * 3. Neither the name of the project nor the names of its contributors
     16  *    may be used to endorse or promote products derived from this software
     17  *    without specific prior written permission.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29  * SUCH DAMAGE.
     30  */
     31 
     32 /*
     33  * Copyright (c) 1982, 1986, 1988, 1993
     34  *	The Regents of the University of California.  All rights reserved.
     35  *
     36  * Redistribution and use in source and binary forms, with or without
     37  * modification, are permitted provided that the following conditions
     38  * are met:
     39  * 1. Redistributions of source code must retain the above copyright
     40  *    notice, this list of conditions and the following disclaimer.
     41  * 2. Redistributions in binary form must reproduce the above copyright
     42  *    notice, this list of conditions and the following disclaimer in the
     43  *    documentation and/or other materials provided with the distribution.
     44  * 3. Neither the name of the University nor the names of its contributors
     45  *    may be used to endorse or promote products derived from this software
     46  *    without specific prior written permission.
     47  *
     48  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     49  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     50  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     51  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     52  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     53  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     54  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     55  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     56  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     57  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     58  * SUCH DAMAGE.
     59  *
     60  *	@(#)raw_ip.c	8.7 (Berkeley) 5/15/95
     61  */
     62 
     63 #include <sys/cdefs.h>
     64 __KERNEL_RCSID(0, "$NetBSD: raw_ip.c,v 1.94.4.1 2007/02/27 16:54:56 yamt Exp $");
     65 
     66 #include "opt_inet.h"
     67 #include "opt_ipsec.h"
     68 #include "opt_mrouting.h"
     69 
     70 #include <sys/param.h>
     71 #include <sys/sysctl.h>
     72 #include <sys/malloc.h>
     73 #include <sys/mbuf.h>
     74 #include <sys/socket.h>
     75 #include <sys/protosw.h>
     76 #include <sys/socketvar.h>
     77 #include <sys/errno.h>
     78 #include <sys/systm.h>
     79 #include <sys/proc.h>
     80 #include <sys/kauth.h>
     81 
     82 #include <net/if.h>
     83 #include <net/route.h>
     84 
     85 #include <netinet/in.h>
     86 #include <netinet/in_systm.h>
     87 #include <netinet/ip.h>
     88 #include <netinet/ip_var.h>
     89 #include <netinet/ip_mroute.h>
     90 #include <netinet/ip_icmp.h>
     91 #include <netinet/in_pcb.h>
     92 #include <netinet/in_proto.h>
     93 #include <netinet/in_var.h>
     94 
     95 #include <machine/stdarg.h>
     96 
     97 #ifdef IPSEC
     98 #include <netinet6/ipsec.h>
     99 #endif /*IPSEC*/
    100 
    101 #ifdef FAST_IPSEC
    102 #include <netipsec/ipsec.h>
    103 #include <netipsec/ipsec_var.h>			/* XXX ipsecstat namespace */
    104 #endif	/* FAST_IPSEC*/
    105 
    106 struct inpcbtable rawcbtable;
    107 
    108 int	 rip_pcbnotify(struct inpcbtable *, struct in_addr,
    109     struct in_addr, int, int, void (*)(struct inpcb *, int));
    110 int	 rip_bind(struct inpcb *, struct mbuf *);
    111 int	 rip_connect(struct inpcb *, struct mbuf *);
    112 void	 rip_disconnect(struct inpcb *);
    113 
    114 /*
    115  * Nominal space allocated to a raw ip socket.
    116  */
    117 #define	RIPSNDQ		8192
    118 #define	RIPRCVQ		8192
    119 
    120 /*
    121  * Raw interface to IP protocol.
    122  */
    123 
    124 /*
    125  * Initialize raw connection block q.
    126  */
    127 void
    128 rip_init(void)
    129 {
    130 
    131 	in_pcbinit(&rawcbtable, 1, 1);
    132 }
    133 
    134 /*
    135  * Setup generic address and protocol structures
    136  * for raw_input routine, then pass them along with
    137  * mbuf chain.
    138  */
    139 void
    140 rip_input(struct mbuf *m, ...)
    141 {
    142 	int proto;
    143 	struct ip *ip = mtod(m, struct ip *);
    144 	struct inpcb_hdr *inph;
    145 	struct inpcb *inp;
    146 	struct inpcb *last = 0;
    147 	struct mbuf *opts = 0;
    148 	struct sockaddr_in ripsrc;
    149 	va_list ap;
    150 
    151 	va_start(ap, m);
    152 	(void)va_arg(ap, int);		/* ignore value, advance ap */
    153 	proto = va_arg(ap, int);
    154 	va_end(ap);
    155 
    156 	ripsrc.sin_family = AF_INET;
    157 	ripsrc.sin_len = sizeof(struct sockaddr_in);
    158 	ripsrc.sin_addr = ip->ip_src;
    159 	ripsrc.sin_port = 0;
    160 	bzero((caddr_t)ripsrc.sin_zero, sizeof(ripsrc.sin_zero));
    161 
    162 	/*
    163 	 * XXX Compatibility: programs using raw IP expect ip_len
    164 	 * XXX to have the header length subtracted, and in host order.
    165 	 * XXX ip_off is also expected to be host order.
    166 	 */
    167 	ip->ip_len = ntohs(ip->ip_len) - (ip->ip_hl << 2);
    168 	NTOHS(ip->ip_off);
    169 
    170 	CIRCLEQ_FOREACH(inph, &rawcbtable.inpt_queue, inph_queue) {
    171 		inp = (struct inpcb *)inph;
    172 		if (inp->inp_af != AF_INET)
    173 			continue;
    174 		if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto)
    175 			continue;
    176 		if (!in_nullhost(inp->inp_laddr) &&
    177 		    !in_hosteq(inp->inp_laddr, ip->ip_dst))
    178 			continue;
    179 		if (!in_nullhost(inp->inp_faddr) &&
    180 		    !in_hosteq(inp->inp_faddr, ip->ip_src))
    181 			continue;
    182 		if (last) {
    183 			struct mbuf *n;
    184 
    185 #if defined(IPSEC) || defined(FAST_IPSEC)
    186 			/* check AH/ESP integrity. */
    187 			if (ipsec4_in_reject_so(m, last->inp_socket)) {
    188 				ipsecstat.in_polvio++;
    189 				/* do not inject data to pcb */
    190 			} else
    191 #endif /*IPSEC*/
    192 			if ((n = m_copy(m, 0, (int)M_COPYALL)) != NULL) {
    193 				if (last->inp_flags & INP_CONTROLOPTS ||
    194 				    last->inp_socket->so_options & SO_TIMESTAMP)
    195 					ip_savecontrol(last, &opts, ip, n);
    196 				if (sbappendaddr(&last->inp_socket->so_rcv,
    197 				    sintosa(&ripsrc), n, opts) == 0) {
    198 					/* should notify about lost packet */
    199 					m_freem(n);
    200 					if (opts)
    201 						m_freem(opts);
    202 				} else
    203 					sorwakeup(last->inp_socket);
    204 				opts = NULL;
    205 			}
    206 		}
    207 		last = inp;
    208 	}
    209 #if defined(IPSEC) || defined(FAST_IPSEC)
    210 	/* check AH/ESP integrity. */
    211 	if (last && ipsec4_in_reject_so(m, last->inp_socket)) {
    212 		m_freem(m);
    213 		ipsecstat.in_polvio++;
    214 		ipstat.ips_delivered--;
    215 		/* do not inject data to pcb */
    216 	} else
    217 #endif /*IPSEC*/
    218 	if (last) {
    219 		if (last->inp_flags & INP_CONTROLOPTS ||
    220 		    last->inp_socket->so_options & SO_TIMESTAMP)
    221 			ip_savecontrol(last, &opts, ip, m);
    222 		if (sbappendaddr(&last->inp_socket->so_rcv,
    223 		    sintosa(&ripsrc), m, opts) == 0) {
    224 			m_freem(m);
    225 			if (opts)
    226 				m_freem(opts);
    227 		} else
    228 			sorwakeup(last->inp_socket);
    229 	} else {
    230 		if (inetsw[ip_protox[ip->ip_p]].pr_input == rip_input) {
    231 			icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_PROTOCOL,
    232 			    0, 0);
    233 			ipstat.ips_noproto++;
    234 			ipstat.ips_delivered--;
    235 		} else
    236 			m_freem(m);
    237 	}
    238 	return;
    239 }
    240 
    241 int
    242 rip_pcbnotify(struct inpcbtable *table,
    243     struct in_addr faddr, struct in_addr laddr, int proto, int errno,
    244     void (*notify)(struct inpcb *, int))
    245 {
    246 	struct inpcb *inp, *ninp;
    247 	int nmatch;
    248 
    249 	nmatch = 0;
    250 	for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue);
    251 	    inp != (struct inpcb *)&table->inpt_queue;
    252 	    inp = ninp) {
    253 		ninp = (struct inpcb *)inp->inp_queue.cqe_next;
    254 		if (inp->inp_af != AF_INET)
    255 			continue;
    256 		if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto)
    257 			continue;
    258 		if (in_hosteq(inp->inp_faddr, faddr) &&
    259 		    in_hosteq(inp->inp_laddr, laddr)) {
    260 			(*notify)(inp, errno);
    261 			nmatch++;
    262 		}
    263 	}
    264 
    265 	return nmatch;
    266 }
    267 
    268 void *
    269 rip_ctlinput(int cmd, const struct sockaddr *sa, void *v)
    270 {
    271 	struct ip *ip = v;
    272 	void (*notify)(struct inpcb *, int) = in_rtchange;
    273 	int errno;
    274 
    275 	if (sa->sa_family != AF_INET ||
    276 	    sa->sa_len != sizeof(struct sockaddr_in))
    277 		return NULL;
    278 	if ((unsigned)cmd >= PRC_NCMDS)
    279 		return NULL;
    280 	errno = inetctlerrmap[cmd];
    281 	if (PRC_IS_REDIRECT(cmd))
    282 		notify = in_rtchange, ip = 0;
    283 	else if (cmd == PRC_HOSTDEAD)
    284 		ip = 0;
    285 	else if (errno == 0)
    286 		return NULL;
    287 	if (ip) {
    288 		rip_pcbnotify(&rawcbtable, satocsin(sa)->sin_addr,
    289 		    ip->ip_src, ip->ip_p, errno, notify);
    290 
    291 		/* XXX mapped address case */
    292 	} else
    293 		in_pcbnotifyall(&rawcbtable, satocsin(sa)->sin_addr, errno,
    294 		    notify);
    295 	return NULL;
    296 }
    297 
    298 /*
    299  * Generate IP header and pass packet to ip_output.
    300  * Tack on options user may have setup with control call.
    301  */
    302 int
    303 rip_output(struct mbuf *m, ...)
    304 {
    305 	struct inpcb *inp;
    306 	struct ip *ip;
    307 	struct mbuf *opts;
    308 	int flags;
    309 	va_list ap;
    310 
    311 	va_start(ap, m);
    312 	inp = va_arg(ap, struct inpcb *);
    313 	va_end(ap);
    314 
    315 	flags =
    316 	    (inp->inp_socket->so_options & SO_DONTROUTE) | IP_ALLOWBROADCAST
    317 	    | IP_RETURNMTU;
    318 
    319 	/*
    320 	 * If the user handed us a complete IP packet, use it.
    321 	 * Otherwise, allocate an mbuf for a header and fill it in.
    322 	 */
    323 	if ((inp->inp_flags & INP_HDRINCL) == 0) {
    324 		if ((m->m_pkthdr.len + sizeof(struct ip)) > IP_MAXPACKET) {
    325 			m_freem(m);
    326 			return (EMSGSIZE);
    327 		}
    328 		M_PREPEND(m, sizeof(struct ip), M_DONTWAIT);
    329 		if (!m)
    330 			return (ENOBUFS);
    331 		ip = mtod(m, struct ip *);
    332 		ip->ip_tos = 0;
    333 		ip->ip_off = htons(0);
    334 		ip->ip_p = inp->inp_ip.ip_p;
    335 		ip->ip_len = htons(m->m_pkthdr.len);
    336 		ip->ip_src = inp->inp_laddr;
    337 		ip->ip_dst = inp->inp_faddr;
    338 		ip->ip_ttl = MAXTTL;
    339 		opts = inp->inp_options;
    340 	} else {
    341 		if (m->m_pkthdr.len > IP_MAXPACKET) {
    342 			m_freem(m);
    343 			return (EMSGSIZE);
    344 		}
    345 		ip = mtod(m, struct ip *);
    346 
    347 		/*
    348 		 * If the mbuf is read-only, we need to allocate
    349 		 * a new mbuf for the header, since we need to
    350 		 * modify the header.
    351 		 */
    352 		if (M_READONLY(m)) {
    353 			int hlen = ip->ip_hl << 2;
    354 
    355 			m = m_copyup(m, hlen, (max_linkhdr + 3) & ~3);
    356 			if (m == NULL)
    357 				return (ENOMEM);	/* XXX */
    358 			ip = mtod(m, struct ip *);
    359 		}
    360 
    361 		/* XXX userland passes ip_len and ip_off in host order */
    362 		if (m->m_pkthdr.len != ip->ip_len) {
    363 			m_freem(m);
    364 			return (EINVAL);
    365 		}
    366 		HTONS(ip->ip_len);
    367 		HTONS(ip->ip_off);
    368 		if (ip->ip_id == 0)
    369 			ip->ip_id = ip_newid();
    370 		opts = NULL;
    371 		/* XXX prevent ip_output from overwriting header fields */
    372 		flags |= IP_RAWOUTPUT;
    373 		ipstat.ips_rawout++;
    374 	}
    375 	return (ip_output(m, opts, &inp->inp_route, flags, inp->inp_moptions,
    376 	     inp->inp_socket, &inp->inp_errormtu));
    377 }
    378 
    379 /*
    380  * Raw IP socket option processing.
    381  */
    382 int
    383 rip_ctloutput(int op, struct socket *so, int level, int optname,
    384     struct mbuf **m)
    385 {
    386 	struct inpcb *inp = sotoinpcb(so);
    387 	int error = 0;
    388 
    389 	if (level != IPPROTO_IP) {
    390 		error = ENOPROTOOPT;
    391 		if (op == PRCO_SETOPT && *m != 0)
    392 			(void) m_free(*m);
    393 	} else switch (op) {
    394 
    395 	case PRCO_SETOPT:
    396 		switch (optname) {
    397 		case IP_HDRINCL:
    398 			if (*m == 0 || (*m)->m_len < sizeof (int))
    399 				error = EINVAL;
    400 			else {
    401 				if (*mtod(*m, int *))
    402 					inp->inp_flags |= INP_HDRINCL;
    403 				else
    404 					inp->inp_flags &= ~INP_HDRINCL;
    405 			}
    406 			if (*m != 0)
    407 				(void) m_free(*m);
    408 			break;
    409 
    410 #ifdef MROUTING
    411 		case MRT_INIT:
    412 		case MRT_DONE:
    413 		case MRT_ADD_VIF:
    414 		case MRT_DEL_VIF:
    415 		case MRT_ADD_MFC:
    416 		case MRT_DEL_MFC:
    417 		case MRT_ASSERT:
    418 		case MRT_API_CONFIG:
    419 		case MRT_ADD_BW_UPCALL:
    420 		case MRT_DEL_BW_UPCALL:
    421 			error = ip_mrouter_set(so, optname, m);
    422 			break;
    423 #endif
    424 
    425 		default:
    426 			error = ip_ctloutput(op, so, level, optname, m);
    427 			break;
    428 		}
    429 		break;
    430 
    431 	case PRCO_GETOPT:
    432 		switch (optname) {
    433 		case IP_HDRINCL:
    434 			*m = m_get(M_WAIT, MT_SOOPTS);
    435 			MCLAIM((*m), so->so_mowner);
    436 			(*m)->m_len = sizeof (int);
    437 			*mtod(*m, int *) = inp->inp_flags & INP_HDRINCL ? 1 : 0;
    438 			break;
    439 
    440 #ifdef MROUTING
    441 		case MRT_VERSION:
    442 		case MRT_ASSERT:
    443 		case MRT_API_SUPPORT:
    444 		case MRT_API_CONFIG:
    445 			error = ip_mrouter_get(so, optname, m);
    446 			break;
    447 #endif
    448 
    449 		default:
    450 			error = ip_ctloutput(op, so, level, optname, m);
    451 			break;
    452 		}
    453 		break;
    454 	}
    455 	return (error);
    456 }
    457 
    458 int
    459 rip_bind(struct inpcb *inp, struct mbuf *nam)
    460 {
    461 	struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *);
    462 
    463 	if (nam->m_len != sizeof(*addr))
    464 		return (EINVAL);
    465 	if (TAILQ_FIRST(&ifnet) == 0)
    466 		return (EADDRNOTAVAIL);
    467 	if (addr->sin_family != AF_INET &&
    468 	    addr->sin_family != AF_IMPLINK)
    469 		return (EAFNOSUPPORT);
    470 	if (!in_nullhost(addr->sin_addr) &&
    471 	    ifa_ifwithaddr(sintosa(addr)) == 0)
    472 		return (EADDRNOTAVAIL);
    473 	inp->inp_laddr = addr->sin_addr;
    474 	return (0);
    475 }
    476 
    477 int
    478 rip_connect(struct inpcb *inp, struct mbuf *nam)
    479 {
    480 	struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *);
    481 
    482 	if (nam->m_len != sizeof(*addr))
    483 		return (EINVAL);
    484 	if (TAILQ_FIRST(&ifnet) == 0)
    485 		return (EADDRNOTAVAIL);
    486 	if (addr->sin_family != AF_INET &&
    487 	    addr->sin_family != AF_IMPLINK)
    488 		return (EAFNOSUPPORT);
    489 	inp->inp_faddr = addr->sin_addr;
    490 	return (0);
    491 }
    492 
    493 void
    494 rip_disconnect(struct inpcb *inp)
    495 {
    496 
    497 	inp->inp_faddr = zeroin_addr;
    498 }
    499 
    500 u_long	rip_sendspace = RIPSNDQ;
    501 u_long	rip_recvspace = RIPRCVQ;
    502 
    503 /*ARGSUSED*/
    504 int
    505 rip_usrreq(struct socket *so, int req,
    506     struct mbuf *m, struct mbuf *nam, struct mbuf *control, struct lwp *l)
    507 {
    508 	struct inpcb *inp;
    509 	int s;
    510 	int error = 0;
    511 #ifdef MROUTING
    512 	extern struct socket *ip_mrouter;
    513 #endif
    514 
    515 	if (req == PRU_CONTROL)
    516 		return (in_control(so, (long)m, (caddr_t)nam,
    517 		    (struct ifnet *)control, l));
    518 
    519 	s = splsoftnet();
    520 
    521 	if (req == PRU_PURGEIF) {
    522 		in_pcbpurgeif0(&rawcbtable, (struct ifnet *)control);
    523 		in_purgeif((struct ifnet *)control);
    524 		in_pcbpurgeif(&rawcbtable, (struct ifnet *)control);
    525 		splx(s);
    526 		return (0);
    527 	}
    528 
    529 	inp = sotoinpcb(so);
    530 #ifdef DIAGNOSTIC
    531 	if (req != PRU_SEND && req != PRU_SENDOOB && control)
    532 		panic("rip_usrreq: unexpected control mbuf");
    533 #endif
    534 	if (inp == 0 && req != PRU_ATTACH) {
    535 		error = EINVAL;
    536 		goto release;
    537 	}
    538 
    539 	switch (req) {
    540 
    541 	case PRU_ATTACH:
    542 		if (inp != 0) {
    543 			error = EISCONN;
    544 			break;
    545 		}
    546 
    547 		if (l == NULL) {
    548 			error = EACCES;
    549 			break;
    550 		}
    551 
    552 		/* XXX: raw socket permissions are checked in socreate() */
    553 
    554 		if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) {
    555 			error = soreserve(so, rip_sendspace, rip_recvspace);
    556 			if (error)
    557 				break;
    558 		}
    559 		error = in_pcballoc(so, &rawcbtable);
    560 		if (error)
    561 			break;
    562 		inp = sotoinpcb(so);
    563 		inp->inp_ip.ip_p = (long)nam;
    564 		break;
    565 
    566 	case PRU_DETACH:
    567 #ifdef MROUTING
    568 		if (so == ip_mrouter)
    569 			ip_mrouter_done();
    570 #endif
    571 		in_pcbdetach(inp);
    572 		break;
    573 
    574 	case PRU_BIND:
    575 		error = rip_bind(inp, nam);
    576 		break;
    577 
    578 	case PRU_LISTEN:
    579 		error = EOPNOTSUPP;
    580 		break;
    581 
    582 	case PRU_CONNECT:
    583 		error = rip_connect(inp, nam);
    584 		if (error)
    585 			break;
    586 		soisconnected(so);
    587 		break;
    588 
    589 	case PRU_CONNECT2:
    590 		error = EOPNOTSUPP;
    591 		break;
    592 
    593 	case PRU_DISCONNECT:
    594 		soisdisconnected(so);
    595 		rip_disconnect(inp);
    596 		break;
    597 
    598 	/*
    599 	 * Mark the connection as being incapable of further input.
    600 	 */
    601 	case PRU_SHUTDOWN:
    602 		socantsendmore(so);
    603 		break;
    604 
    605 	case PRU_RCVD:
    606 		error = EOPNOTSUPP;
    607 		break;
    608 
    609 	/*
    610 	 * Ship a packet out.  The appropriate raw output
    611 	 * routine handles any massaging necessary.
    612 	 */
    613 	case PRU_SEND:
    614 		if (control && control->m_len) {
    615 			m_freem(control);
    616 			m_freem(m);
    617 			error = EINVAL;
    618 			break;
    619 		}
    620 	{
    621 		if (nam) {
    622 			if ((so->so_state & SS_ISCONNECTED) != 0) {
    623 				error = EISCONN;
    624 				goto die;
    625 			}
    626 			error = rip_connect(inp, nam);
    627 			if (error) {
    628 			die:
    629 				m_freem(m);
    630 				break;
    631 			}
    632 		} else {
    633 			if ((so->so_state & SS_ISCONNECTED) == 0) {
    634 				error = ENOTCONN;
    635 				goto die;
    636 			}
    637 		}
    638 		error = rip_output(m, inp);
    639 		if (nam)
    640 			rip_disconnect(inp);
    641 	}
    642 		break;
    643 
    644 	case PRU_SENSE:
    645 		/*
    646 		 * stat: don't bother with a blocksize.
    647 		 */
    648 		splx(s);
    649 		return (0);
    650 
    651 	case PRU_RCVOOB:
    652 		error = EOPNOTSUPP;
    653 		break;
    654 
    655 	case PRU_SENDOOB:
    656 		m_freem(control);
    657 		m_freem(m);
    658 		error = EOPNOTSUPP;
    659 		break;
    660 
    661 	case PRU_SOCKADDR:
    662 		in_setsockaddr(inp, nam);
    663 		break;
    664 
    665 	case PRU_PEERADDR:
    666 		in_setpeeraddr(inp, nam);
    667 		break;
    668 
    669 	default:
    670 		panic("rip_usrreq");
    671 	}
    672 
    673 release:
    674 	splx(s);
    675 	return (error);
    676 }
    677 
    678 SYSCTL_SETUP(sysctl_net_inet_raw_setup, "sysctl net.inet.raw subtree setup")
    679 {
    680 
    681 	sysctl_createv(clog, 0, NULL, NULL,
    682 		       CTLFLAG_PERMANENT,
    683 		       CTLTYPE_NODE, "net", NULL,
    684 		       NULL, 0, NULL, 0,
    685 		       CTL_NET, CTL_EOL);
    686 	sysctl_createv(clog, 0, NULL, NULL,
    687 		       CTLFLAG_PERMANENT,
    688 		       CTLTYPE_NODE, "inet", NULL,
    689 		       NULL, 0, NULL, 0,
    690 		       CTL_NET, PF_INET, CTL_EOL);
    691 	sysctl_createv(clog, 0, NULL, NULL,
    692 		       CTLFLAG_PERMANENT,
    693 		       CTLTYPE_NODE, "raw",
    694 		       SYSCTL_DESCR("Raw IPv4 settings"),
    695 		       NULL, 0, NULL, 0,
    696 		       CTL_NET, PF_INET, IPPROTO_RAW, CTL_EOL);
    697 
    698 	sysctl_createv(clog, 0, NULL, NULL,
    699 		       CTLFLAG_PERMANENT,
    700 		       CTLTYPE_STRUCT, "pcblist",
    701 		       SYSCTL_DESCR("Raw IPv4 control block list"),
    702 		       sysctl_inpcblist, 0, &rawcbtable, 0,
    703 		       CTL_NET, PF_INET, IPPROTO_RAW,
    704 		       CTL_CREATE, CTL_EOL);
    705 }
    706