in.h revision 166368
1139823Simp/*-
21541Srgrimes * Copyright (c) 1982, 1986, 1990, 1993
31541Srgrimes *	The Regents of the University of California.  All rights reserved.
41541Srgrimes *
51541Srgrimes * Redistribution and use in source and binary forms, with or without
61541Srgrimes * modification, are permitted provided that the following conditions
71541Srgrimes * are met:
81541Srgrimes * 1. Redistributions of source code must retain the above copyright
91541Srgrimes *    notice, this list of conditions and the following disclaimer.
101541Srgrimes * 2. Redistributions in binary form must reproduce the above copyright
111541Srgrimes *    notice, this list of conditions and the following disclaimer in the
121541Srgrimes *    documentation and/or other materials provided with the distribution.
131541Srgrimes * 4. Neither the name of the University nor the names of its contributors
141541Srgrimes *    may be used to endorse or promote products derived from this software
151541Srgrimes *    without specific prior written permission.
161541Srgrimes *
171541Srgrimes * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
181541Srgrimes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
191541Srgrimes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
201541Srgrimes * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
211541Srgrimes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
221541Srgrimes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
231541Srgrimes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
241541Srgrimes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
251541Srgrimes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
261541Srgrimes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
271541Srgrimes * SUCH DAMAGE.
281541Srgrimes *
291541Srgrimes *	@(#)in.h	8.3 (Berkeley) 1/3/94
3050477Speter * $FreeBSD: head/sys/netinet/in.h 166368 2007-01-31 14:34:47Z bms $
311541Srgrimes */
321541Srgrimes
332169Spaul#ifndef _NETINET_IN_H_
34121498Sume#define	_NETINET_IN_H_
352169Spaul
3695336Smike#include <sys/cdefs.h>
3793514Smike#include <sys/_types.h>
3895336Smike#include <machine/endian.h>
3993514Smike
4095336Smike/* Protocols common to RFC 1700, POSIX, and X/Open. */
4195336Smike#define	IPPROTO_IP		0		/* dummy for IP */
4295336Smike#define	IPPROTO_ICMP		1		/* control message protocol */
4395336Smike#define	IPPROTO_TCP		6		/* tcp */
4495336Smike#define	IPPROTO_UDP		17		/* user datagram protocol */
4595336Smike
4695336Smike#define	INADDR_ANY		(u_int32_t)0x00000000
4795336Smike#define	INADDR_BROADCAST	(u_int32_t)0xffffffff	/* must be masked */
4895336Smike
4995336Smike#ifndef _UINT8_T_DECLARED
5095336Smiketypedef	__uint8_t		uint8_t;
5195336Smike#define	_UINT8_T_DECLARED
5295336Smike#endif
5395336Smike
5495336Smike#ifndef _UINT16_T_DECLARED
5595336Smiketypedef	__uint16_t		uint16_t;
5695336Smike#define	_UINT16_T_DECLARED
5795336Smike#endif
5895336Smike
5995336Smike#ifndef _UINT32_T_DECLARED
6095336Smiketypedef	__uint32_t		uint32_t;
6195336Smike#define	_UINT32_T_DECLARED
6295336Smike#endif
6395336Smike
6495336Smike#ifndef _IN_ADDR_T_DECLARED
6595336Smiketypedef	uint32_t		in_addr_t;
6695336Smike#define	_IN_ADDR_T_DECLARED
6795336Smike#endif
6895336Smike
6995336Smike#ifndef _IN_PORT_T_DECLARED
7095336Smiketypedef	uint16_t		in_port_t;
7195336Smike#define	_IN_PORT_T_DECLARED
7295336Smike#endif
7395336Smike
74102227Smike#ifndef _SA_FAMILY_T_DECLARED
75102227Smiketypedef	__sa_family_t		sa_family_t;
76102227Smike#define	_SA_FAMILY_T_DECLARED
7795336Smike#endif
7895336Smike
7995336Smike/* Internet address (a structure for historical reasons). */
8095336Smike#ifndef	_STRUCT_IN_ADDR_DECLARED
8195336Smikestruct in_addr {
8295336Smike	in_addr_t s_addr;
8395336Smike};
8495336Smike#define	_STRUCT_IN_ADDR_DECLARED
8595336Smike#endif
8695336Smike
8795336Smike/* Socket address, internet style. */
8895336Smikestruct sockaddr_in {
8995336Smike	uint8_t	sin_len;
9095336Smike	sa_family_t	sin_family;
9195336Smike	in_port_t	sin_port;
9295336Smike	struct	in_addr sin_addr;
9395336Smike	char	sin_zero[8];
9495336Smike};
9595336Smike
9695336Smike#ifndef _KERNEL
9795336Smike
9895336Smike#ifndef _BYTEORDER_PROTOTYPED
9995336Smike#define	_BYTEORDER_PROTOTYPED
10095336Smike__BEGIN_DECLS
10195336Smikeuint32_t	htonl(uint32_t);
10295336Smikeuint16_t	htons(uint16_t);
10395336Smikeuint32_t	ntohl(uint32_t);
10495336Smikeuint16_t	ntohs(uint16_t);
10595336Smike__END_DECLS
10695336Smike#endif
10795336Smike
10895336Smike#ifndef _BYTEORDER_FUNC_DEFINED
10995336Smike#define	_BYTEORDER_FUNC_DEFINED
11095336Smike#define	htonl(x)	__htonl(x)
11195336Smike#define	htons(x)	__htons(x)
11295336Smike#define	ntohl(x)	__ntohl(x)
11395336Smike#define	ntohs(x)	__ntohs(x)
11495336Smike#endif
11595336Smike
11695336Smike#endif /* !_KERNEL */
11795336Smike
11895336Smike#if __POSIX_VISIBLE >= 200112
11995336Smike#define	IPPROTO_RAW		255		/* raw IP packet */
12095336Smike#define	INET_ADDRSTRLEN		16
12195336Smike#endif
12295336Smike
12395336Smike#if __BSD_VISIBLE
1241541Srgrimes/*
1251541Srgrimes * Constants and structures defined by the internet system,
1261541Srgrimes * Per RFC 790, September 1981, and numerous additions.
1271541Srgrimes */
1281541Srgrimes
1291541Srgrimes/*
13033804Sjulian * Protocols (RFC 1700)
1311541Srgrimes */
13252904Sshin#define	IPPROTO_HOPOPTS		0		/* IP6 hop-by-hop options */
1331541Srgrimes#define	IPPROTO_IGMP		2		/* group mgmt protocol */
1341541Srgrimes#define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
135133874Srwatson#define	IPPROTO_IPV4		4		/* IPv4 encapsulation */
136133874Srwatson#define	IPPROTO_IPIP		IPPROTO_IPV4	/* for compatibility */
13733804Sjulian#define	IPPROTO_ST		7		/* Stream protocol II */
1381541Srgrimes#define	IPPROTO_EGP		8		/* exterior gateway protocol */
13933804Sjulian#define	IPPROTO_PIGP		9		/* private interior gateway */
14033804Sjulian#define	IPPROTO_RCCMON		10		/* BBN RCC Monitoring */
14133804Sjulian#define	IPPROTO_NVPII		11		/* network voice protocol*/
1421541Srgrimes#define	IPPROTO_PUP		12		/* pup */
14333804Sjulian#define	IPPROTO_ARGUS		13		/* Argus */
14433804Sjulian#define	IPPROTO_EMCON		14		/* EMCON */
14533804Sjulian#define	IPPROTO_XNET		15		/* Cross Net Debugger */
14633804Sjulian#define	IPPROTO_CHAOS		16		/* Chaos*/
14733804Sjulian#define	IPPROTO_MUX		18		/* Multiplexing */
14833804Sjulian#define	IPPROTO_MEAS		19		/* DCN Measurement Subsystems */
14933804Sjulian#define	IPPROTO_HMP		20		/* Host Monitoring */
15033804Sjulian#define	IPPROTO_PRM		21		/* Packet Radio Measurement */
1511541Srgrimes#define	IPPROTO_IDP		22		/* xns idp */
15233804Sjulian#define	IPPROTO_TRUNK1		23		/* Trunk-1 */
15333804Sjulian#define	IPPROTO_TRUNK2		24		/* Trunk-2 */
15433804Sjulian#define	IPPROTO_LEAF1		25		/* Leaf-1 */
15533804Sjulian#define	IPPROTO_LEAF2		26		/* Leaf-2 */
15633804Sjulian#define	IPPROTO_RDP		27		/* Reliable Data */
15733804Sjulian#define	IPPROTO_IRTP		28		/* Reliable Transaction */
158133874Srwatson#define	IPPROTO_TP		29		/* tp-4 w/ class negotiation */
15933804Sjulian#define	IPPROTO_BLT		30		/* Bulk Data Transfer */
16033804Sjulian#define	IPPROTO_NSP		31		/* Network Services */
16133804Sjulian#define	IPPROTO_INP		32		/* Merit Internodal */
16233804Sjulian#define	IPPROTO_SEP		33		/* Sequential Exchange */
16333804Sjulian#define	IPPROTO_3PC		34		/* Third Party Connect */
16433804Sjulian#define	IPPROTO_IDPR		35		/* InterDomain Policy Routing */
16533804Sjulian#define	IPPROTO_XTP		36		/* XTP */
16633804Sjulian#define	IPPROTO_DDP		37		/* Datagram Delivery */
16733804Sjulian#define	IPPROTO_CMTP		38		/* Control Message Transport */
16833804Sjulian#define	IPPROTO_TPXX		39		/* TP++ Transport */
16933804Sjulian#define	IPPROTO_IL		40		/* IL transport protocol */
17052904Sshin#define	IPPROTO_IPV6		41		/* IP6 header */
17133804Sjulian#define	IPPROTO_SDRP		42		/* Source Demand Routing */
17252904Sshin#define	IPPROTO_ROUTING		43		/* IP6 routing header */
17352904Sshin#define	IPPROTO_FRAGMENT	44		/* IP6 fragmentation header */
17433804Sjulian#define	IPPROTO_IDRP		45		/* InterDomain Routing*/
175133874Srwatson#define	IPPROTO_RSVP		46		/* resource reservation */
17633804Sjulian#define	IPPROTO_GRE		47		/* General Routing Encap. */
17733804Sjulian#define	IPPROTO_MHRP		48		/* Mobile Host Routing */
17833804Sjulian#define	IPPROTO_BHA		49		/* BHA */
17952904Sshin#define	IPPROTO_ESP		50		/* IP6 Encap Sec. Payload */
18052904Sshin#define	IPPROTO_AH		51		/* IP6 Auth Header */
18133804Sjulian#define	IPPROTO_INLSP		52		/* Integ. Net Layer Security */
18233804Sjulian#define	IPPROTO_SWIPE		53		/* IP with encryption */
18333804Sjulian#define	IPPROTO_NHRP		54		/* Next Hop Resolution */
184133874Srwatson#define	IPPROTO_MOBILE		55		/* IP Mobility */
185133874Srwatson#define	IPPROTO_TLSP		56		/* Transport Layer Security */
186133874Srwatson#define	IPPROTO_SKIP		57		/* SKIP */
18752904Sshin#define	IPPROTO_ICMPV6		58		/* ICMP6 */
18852904Sshin#define	IPPROTO_NONE		59		/* IP6 no next header */
18952904Sshin#define	IPPROTO_DSTOPTS		60		/* IP6 destination option */
19033804Sjulian#define	IPPROTO_AHIP		61		/* any host internal protocol */
19133804Sjulian#define	IPPROTO_CFTP		62		/* CFTP */
19233804Sjulian#define	IPPROTO_HELLO		63		/* "hello" routing protocol */
19333804Sjulian#define	IPPROTO_SATEXPAK	64		/* SATNET/Backroom EXPAK */
19433804Sjulian#define	IPPROTO_KRYPTOLAN	65		/* Kryptolan */
19533804Sjulian#define	IPPROTO_RVD		66		/* Remote Virtual Disk */
19633804Sjulian#define	IPPROTO_IPPC		67		/* Pluribus Packet Core */
19733804Sjulian#define	IPPROTO_ADFS		68		/* Any distributed FS */
19833804Sjulian#define	IPPROTO_SATMON		69		/* Satnet Monitoring */
19933804Sjulian#define	IPPROTO_VISA		70		/* VISA Protocol */
20033804Sjulian#define	IPPROTO_IPCV		71		/* Packet Core Utility */
20133804Sjulian#define	IPPROTO_CPNX		72		/* Comp. Prot. Net. Executive */
20233804Sjulian#define	IPPROTO_CPHB		73		/* Comp. Prot. HeartBeat */
20333804Sjulian#define	IPPROTO_WSN		74		/* Wang Span Network */
20433804Sjulian#define	IPPROTO_PVP		75		/* Packet Video Protocol */
20533804Sjulian#define	IPPROTO_BRSATMON	76		/* BackRoom SATNET Monitoring */
20633804Sjulian#define	IPPROTO_ND		77		/* Sun net disk proto (temp.) */
20733804Sjulian#define	IPPROTO_WBMON		78		/* WIDEBAND Monitoring */
20833804Sjulian#define	IPPROTO_WBEXPAK		79		/* WIDEBAND EXPAK */
2091541Srgrimes#define	IPPROTO_EON		80		/* ISO cnlp */
21033804Sjulian#define	IPPROTO_VMTP		81		/* VMTP */
21133804Sjulian#define	IPPROTO_SVMTP		82		/* Secure VMTP */
21233804Sjulian#define	IPPROTO_VINES		83		/* Banyon VINES */
21333804Sjulian#define	IPPROTO_TTP		84		/* TTP */
21433804Sjulian#define	IPPROTO_IGP		85		/* NSFNET-IGP */
21533804Sjulian#define	IPPROTO_DGP		86		/* dissimilar gateway prot. */
21633814Sjulian#define	IPPROTO_TCF		87		/* TCF */
21733804Sjulian#define	IPPROTO_IGRP		88		/* Cisco/GXS IGRP */
21833804Sjulian#define	IPPROTO_OSPFIGP		89		/* OSPFIGP */
21933804Sjulian#define	IPPROTO_SRPC		90		/* Strite RPC protocol */
22033804Sjulian#define	IPPROTO_LARP		91		/* Locus Address Resoloution */
22133804Sjulian#define	IPPROTO_MTP		92		/* Multicast Transport */
22233804Sjulian#define	IPPROTO_AX25		93		/* AX.25 Frames */
22333804Sjulian#define	IPPROTO_IPEIP		94		/* IP encapsulated in IP */
22433804Sjulian#define	IPPROTO_MICP		95		/* Mobile Int.ing control */
22533804Sjulian#define	IPPROTO_SCCSP		96		/* Semaphore Comm. security */
22633804Sjulian#define	IPPROTO_ETHERIP		97		/* Ethernet IP encapsulation */
2271541Srgrimes#define	IPPROTO_ENCAP		98		/* encapsulation header */
22833804Sjulian#define	IPPROTO_APES		99		/* any private encr. scheme */
22933804Sjulian#define	IPPROTO_GMTP		100		/* GMTP*/
23052904Sshin#define	IPPROTO_IPCOMP		108		/* payload compression (IPComp) */
231153553Sdelphij#define	IPPROTO_SCTP		132		/* SCTP */
23246420Sluigi/* 101-254: Partly Unassigned */
23352904Sshin#define	IPPROTO_PIM		103		/* Protocol Independent Mcast */
234142215Sglebius#define	IPPROTO_CARP		112		/* CARP */
23546420Sluigi#define	IPPROTO_PGM		113		/* PGM */
236130609Smlaier#define	IPPROTO_PFSYNC		240		/* PFSYNC */
23733804Sjulian/* 255: Reserved */
238106152Sfenner/* BSD Private, local use, namespace incursion, no longer used */
239106152Sfenner#define	IPPROTO_OLD_DIVERT	254		/* OLD divert pseudo-proto */
2401541Srgrimes#define	IPPROTO_MAX		256
2411541Srgrimes
24252904Sshin/* last return value of *_input(), meaning "all job for this pkt is done".  */
24352904Sshin#define	IPPROTO_DONE		257
2441541Srgrimes
245106152Sfenner/* Only used internally, so can be outside the range of valid IP protocols. */
246106152Sfenner#define	IPPROTO_DIVERT		258		/* divert pseudo-protocol */
247106152Sfenner
2481541Srgrimes/*
249136712Sandre * Defined to avoid confusion.  The master value is defined by
250136712Sandre * PROTO_SPACER in sys/protosw.h.
251136712Sandre */
252136712Sandre#define	IPPROTO_SPACER		32767		/* spacer for loadable protos */
253136712Sandre
254136712Sandre/*
2551541Srgrimes * Local port number conventions:
25614195Speter *
25714195Speter * When a user does a bind(2) or connect(2) with a port number of zero,
25814195Speter * a non-conflicting local port address is chosen.
25994291Ssilby * The default range is IPPORT_HIFIRSTAUTO through
26094291Ssilby * IPPORT_HILASTAUTO, although that is settable by sysctl.
26114195Speter *
26214195Speter * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
26314195Speter * default assignment range.
26414195Speter *
26514195Speter * The value IP_PORTRANGE_DEFAULT causes the default behavior.
26614195Speter *
26714195Speter * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
26814195Speter * into the "high" range.  These are reserved for client outbound connections
26994291Ssilby * which do not want to be filtered by any firewalls.  Note that by default
27094291Ssilby * this is the same as IP_PORTRANGE_DEFAULT.
27114195Speter *
27214195Speter * The value IP_PORTRANGE_LOW changes the range to the "low" are
27314195Speter * that is (by convention) restricted to privileged processes.  This
27414195Speter * convention is based on "vouchsafe" principles only.  It is only secure
27514195Speter * if you trust the remote host to restrict these ports.
27614195Speter *
27714195Speter * The default range of ports and the high range can be changed by
27817541Speter * sysctl(3).  (net.inet.ip.port{hi,low}{first,last}_auto)
27914195Speter *
28014195Speter * Changing those values has bad security implications if you are
281108533Sschweikh * using a stateless firewall that is allowing packets outside of that
28214195Speter * range in order to allow transparent outgoing connections.
28314195Speter *
28414195Speter * Such a firewall configuration will generally depend on the use of these
28514195Speter * default values.  If you change them, you may find your Security
28614195Speter * Administrator looking for you with a heavy object.
28735304Sphk *
28835304Sphk * For a slightly more orthodox text view on this:
28935304Sphk *
29035304Sphk *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
29135304Sphk *
29235304Sphk *    port numbers are divided into three ranges:
29335304Sphk *
29435304Sphk *                0 -  1023 Well Known Ports
29535304Sphk *             1024 - 49151 Registered Ports
29635304Sphk *            49152 - 65535 Dynamic and/or Private Ports
29735304Sphk *
29814195Speter */
29914195Speter
30014195Speter/*
3011541Srgrimes * Ports < IPPORT_RESERVED are reserved for
30214195Speter * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
3031541Srgrimes */
3041541Srgrimes#define	IPPORT_RESERVED		1024
3051541Srgrimes
3061541Srgrimes/*
30794379Ssilby * Default local port range, used by both IP_PORTRANGE_DEFAULT
30894379Ssilby * and IP_PORTRANGE_HIGH.
30913491Speter */
31035304Sphk#define	IPPORT_HIFIRSTAUTO	49152
31135304Sphk#define	IPPORT_HILASTAUTO	65535
31213491Speter
31313491Speter/*
31417541Speter * Scanning for a free reserved port return a value below IPPORT_RESERVED,
31517541Speter * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
31617541Speter * 512, but that conflicts with some well-known-services that firewalls may
31717541Speter * have a fit if we use.
31817541Speter */
319133874Srwatson#define	IPPORT_RESERVEDSTART	600
32017541Speter
32187158Smike#define	IPPORT_MAX		65535
32287158Smike
32317541Speter/*
3241541Srgrimes * Definitions of bits in internet address integers.
3251541Srgrimes * On subnets, the decomposition of addresses to host and net parts
3261541Srgrimes * is done according to subnet mask, not the masks here.
3271541Srgrimes */
32835919Sjb#define	IN_CLASSA(i)		(((u_int32_t)(i) & 0x80000000) == 0)
3291541Srgrimes#define	IN_CLASSA_NET		0xff000000
3301541Srgrimes#define	IN_CLASSA_NSHIFT	24
3311541Srgrimes#define	IN_CLASSA_HOST		0x00ffffff
3321541Srgrimes#define	IN_CLASSA_MAX		128
3331541Srgrimes
33435919Sjb#define	IN_CLASSB(i)		(((u_int32_t)(i) & 0xc0000000) == 0x80000000)
3351541Srgrimes#define	IN_CLASSB_NET		0xffff0000
3361541Srgrimes#define	IN_CLASSB_NSHIFT	16
3371541Srgrimes#define	IN_CLASSB_HOST		0x0000ffff
3381541Srgrimes#define	IN_CLASSB_MAX		65536
3391541Srgrimes
34035919Sjb#define	IN_CLASSC(i)		(((u_int32_t)(i) & 0xe0000000) == 0xc0000000)
3411541Srgrimes#define	IN_CLASSC_NET		0xffffff00
3421541Srgrimes#define	IN_CLASSC_NSHIFT	8
3431541Srgrimes#define	IN_CLASSC_HOST		0x000000ff
3441541Srgrimes
34535919Sjb#define	IN_CLASSD(i)		(((u_int32_t)(i) & 0xf0000000) == 0xe0000000)
3461541Srgrimes#define	IN_CLASSD_NET		0xf0000000	/* These ones aren't really */
3471541Srgrimes#define	IN_CLASSD_NSHIFT	28		/* net and host fields, but */
3481541Srgrimes#define	IN_CLASSD_HOST		0x0fffffff	/* routing needn't know.    */
3491541Srgrimes#define	IN_MULTICAST(i)		IN_CLASSD(i)
3501541Srgrimes
35135919Sjb#define	IN_EXPERIMENTAL(i)	(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
35235919Sjb#define	IN_BADCLASS(i)		(((u_int32_t)(i) & 0xf0000000) == 0xf0000000)
3531541Srgrimes
354166368Sbms#define IN_LINKLOCAL(i)		(((u_int32_t)(i) & 0xffff0000) == 0xa9fe0000)
355166368Sbms
356166368Sbms#define	IN_PRIVATE(i)	((((u_int32_t)(i) & 0xff000000) == 0x0a000000) || \
357166368Sbms			 (((u_int32_t)(i) & 0xfff00000) == 0xac100000) || \
358166368Sbms			 (((u_int32_t)(i) & 0xffff0000) == 0xc0a80000))
359166368Sbms
360166368Sbms#define	IN_LOCAL_GROUP(i)	(((u_int32_t)(i) & 0xffffff00) == 0xe0000000)
361166368Sbms
362166368Sbms#define	IN_ANY_LOCAL(i)		(IN_LINKLOCAL(i) || IN_LOCAL_GROUP(i))
363166368Sbms
36435919Sjb#define	INADDR_LOOPBACK		(u_int32_t)0x7f000001
36555205Speter#ifndef _KERNEL
3661541Srgrimes#define	INADDR_NONE		0xffffffff		/* -1 return */
3671541Srgrimes#endif
3681541Srgrimes
36935919Sjb#define	INADDR_UNSPEC_GROUP	(u_int32_t)0xe0000000	/* 224.0.0.0 */
37035919Sjb#define	INADDR_ALLHOSTS_GROUP	(u_int32_t)0xe0000001	/* 224.0.0.1 */
37135919Sjb#define	INADDR_ALLRTRS_GROUP	(u_int32_t)0xe0000002	/* 224.0.0.2 */
372142215Sglebius#define	INADDR_CARP_GROUP	(u_int32_t)0xe0000012	/* 224.0.0.18 */
373130609Smlaier#define	INADDR_PFSYNC_GROUP	(u_int32_t)0xe00000f0	/* 224.0.0.240 */
374114259Smdodd#define	INADDR_ALLMDNS_GROUP	(u_int32_t)0xe00000fb	/* 224.0.0.251 */
37535919Sjb#define	INADDR_MAX_LOCAL_GROUP	(u_int32_t)0xe00000ff	/* 224.0.0.255 */
3761541Srgrimes
3771541Srgrimes#define	IN_LOOPBACKNET		127			/* official! */
3781541Srgrimes
3791541Srgrimes/*
3801541Srgrimes * Options for use with [gs]etsockopt at the IP level.
3811541Srgrimes * First word of comment is data type; bool is stored in int.
3821541Srgrimes */
3831541Srgrimes#define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
3841541Srgrimes#define	IP_HDRINCL		2    /* int; header is included with data */
3851541Srgrimes#define	IP_TOS			3    /* int; IP type of service and preced. */
3861541Srgrimes#define	IP_TTL			4    /* int; IP time to live */
3871541Srgrimes#define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
3881541Srgrimes#define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
3891541Srgrimes#define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
390105651Siedowse#define	IP_SENDSRCADDR		IP_RECVDSTADDR /* cmsg_type to set src addr */
3911541Srgrimes#define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
3921541Srgrimes#define	IP_MULTICAST_IF		9    /* u_char; set/get IP multicast i/f  */
3931541Srgrimes#define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
3941541Srgrimes#define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
3951541Srgrimes#define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
3961541Srgrimes#define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
397133874Srwatson#define	IP_MULTICAST_VIF	14   /* set/get IP mcast virt. iface */
398133874Srwatson#define	IP_RSVP_ON		15   /* enable RSVP in kernel */
399133874Srwatson#define	IP_RSVP_OFF		16   /* disable RSVP in kernel */
400133874Srwatson#define	IP_RSVP_VIF_ON		17   /* set RSVP per-vif socket */
401133874Srwatson#define	IP_RSVP_VIF_OFF		18   /* unset RSVP per-vif socket */
402133874Srwatson#define	IP_PORTRANGE		19   /* int; range to choose for unspec port */
40319622Sfenner#define	IP_RECVIF		20   /* bool; receive reception if w/dgram */
40452904Sshin/* for IPSEC */
40552904Sshin#define	IP_IPSEC_POLICY		21   /* int; set/get security policy */
40652904Sshin#define	IP_FAITH		22   /* bool; accept FAITH'ed connections */
4071541Srgrimes
408119178Sbms#define	IP_ONESBCAST		23   /* bool: send all-ones broadcast */
409119178Sbms
410130281Sru#define	IP_FW_TABLE_ADD		40   /* add entry */
411130281Sru#define	IP_FW_TABLE_DEL		41   /* delete entry */
412130281Sru#define	IP_FW_TABLE_FLUSH	42   /* flush table */
413130281Sru#define	IP_FW_TABLE_GETSIZE	43   /* get table size */
414130281Sru#define	IP_FW_TABLE_LIST	44   /* list table contents */
415130281Sru
416133874Srwatson#define	IP_FW_ADD		50   /* add a firewall rule to chain */
417133874Srwatson#define	IP_FW_DEL		51   /* delete a firewall rule from chain */
418133874Srwatson#define	IP_FW_FLUSH		52   /* flush firewall rule chain */
419133874Srwatson#define	IP_FW_ZERO		53   /* clear single/all firewall counter(s) */
420133874Srwatson#define	IP_FW_GET		54   /* get entire firewall rule chain */
42152904Sshin#define	IP_FW_RESETLOG		55   /* reset logging counters */
42217758Ssos
423165648Spiso#define IP_FW_NAT_CFG           56   /* add/config a nat rule */
424165648Spiso#define IP_FW_NAT_DEL           57   /* delete a nat rule */
425165648Spiso#define IP_FW_NAT_GET_CONFIG    58   /* get configuration of a nat rule */
426165648Spiso#define IP_FW_NAT_GET_LOG       59   /* get log of a nat rule */
427165648Spiso
42841793Sluigi#define	IP_DUMMYNET_CONFIGURE	60   /* add/configure a dummynet pipe */
42941793Sluigi#define	IP_DUMMYNET_DEL		61   /* delete a dummynet pipe from chain */
43041793Sluigi#define	IP_DUMMYNET_FLUSH	62   /* flush dummynet */
43141793Sluigi#define	IP_DUMMYNET_GET		64   /* get entire dummynet pipes */
43241793Sluigi
433114258Smdodd#define	IP_RECVTTL		65   /* bool; receive IP TTL w/dgram */
434149371Sandre#define	IP_MINTTL		66   /* minimum TTL for packet or drop */
435150594Sandre#define	IP_DONTFRAG		67   /* don't fragment packet */
436114258Smdodd
4371541Srgrimes/*
4381541Srgrimes * Defaults and limits for options
4391541Srgrimes */
4401541Srgrimes#define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
4411541Srgrimes#define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
4421541Srgrimes
4431541Srgrimes/*
444158563Sbms * The imo_membership vector for each socket is now dynamically allocated at
445158563Sbms * run-time, bounded by USHRT_MAX, and is reallocated when needed, sized
446158563Sbms * according to a power-of-two increment.
447158563Sbms */
448158563Sbms#define	IP_MIN_MEMBERSHIPS	31
449158563Sbms#define	IP_MAX_MEMBERSHIPS	4095
450158563Sbms
451158563Sbms/*
4521541Srgrimes * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
4531541Srgrimes */
4541541Srgrimesstruct ip_mreq {
4551541Srgrimes	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
4561541Srgrimes	struct	in_addr imr_interface;	/* local IP address of interface */
4571541Srgrimes};
4581541Srgrimes
4591541Srgrimes/*
46014195Speter * Argument for IP_PORTRANGE:
46114195Speter * - which range to search when port is unspecified at bind() or connect()
46214195Speter */
46314195Speter#define	IP_PORTRANGE_DEFAULT	0	/* default range */
46414195Speter#define	IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
46514195Speter#define	IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
46614195Speter
46714195Speter/*
4681541Srgrimes * Definitions for inet sysctl operations.
4691541Srgrimes *
4701541Srgrimes * Third level is protocol number.
4711541Srgrimes * Fourth level is desired variable within that protocol.
4721541Srgrimes */
47362587Sitojun#define	IPPROTO_MAXID	(IPPROTO_AH + 1)	/* don't list to IPPROTO_MAX */
4741541Srgrimes
4751541Srgrimes#define	CTL_IPPROTO_NAMES { \
4761541Srgrimes	{ "ip", CTLTYPE_NODE }, \
4771541Srgrimes	{ "icmp", CTLTYPE_NODE }, \
4781541Srgrimes	{ "igmp", CTLTYPE_NODE }, \
4791541Srgrimes	{ "ggp", CTLTYPE_NODE }, \
4801541Srgrimes	{ 0, 0 }, \
4811541Srgrimes	{ 0, 0 }, \
4821541Srgrimes	{ "tcp", CTLTYPE_NODE }, \
4831541Srgrimes	{ 0, 0 }, \
4841541Srgrimes	{ "egp", CTLTYPE_NODE }, \
4851541Srgrimes	{ 0, 0 }, \
4861541Srgrimes	{ 0, 0 }, \
4871541Srgrimes	{ 0, 0 }, \
4881541Srgrimes	{ "pup", CTLTYPE_NODE }, \
4891541Srgrimes	{ 0, 0 }, \
4901541Srgrimes	{ 0, 0 }, \
4911541Srgrimes	{ 0, 0 }, \
4921541Srgrimes	{ 0, 0 }, \
4931541Srgrimes	{ "udp", CTLTYPE_NODE }, \
4941541Srgrimes	{ 0, 0 }, \
4951541Srgrimes	{ 0, 0 }, \
4961541Srgrimes	{ 0, 0 }, \
4971541Srgrimes	{ 0, 0 }, \
4981541Srgrimes	{ "idp", CTLTYPE_NODE }, \
49962587Sitojun	{ 0, 0 }, \
50062587Sitojun	{ 0, 0 }, \
50162587Sitojun	{ 0, 0 }, \
50262587Sitojun	{ 0, 0 }, \
50362587Sitojun	{ 0, 0 }, \
50462587Sitojun	{ 0, 0 }, \
50562587Sitojun	{ 0, 0 }, \
50662587Sitojun	{ 0, 0 }, \
50762587Sitojun	{ 0, 0 }, \
50862587Sitojun	{ 0, 0 }, \
50962587Sitojun	{ 0, 0 }, \
51062587Sitojun	{ 0, 0 }, \
51162587Sitojun	{ 0, 0 }, \
51262587Sitojun	{ 0, 0 }, \
51362587Sitojun	{ 0, 0 }, \
51462587Sitojun	{ 0, 0 }, \
51562587Sitojun	{ 0, 0 }, \
51662587Sitojun	{ 0, 0 }, \
51762587Sitojun	{ 0, 0 }, \
51862587Sitojun	{ 0, 0 }, \
51962587Sitojun	{ 0, 0 }, \
52062587Sitojun	{ 0, 0 }, \
52162587Sitojun	{ 0, 0 }, \
52262587Sitojun	{ 0, 0 }, \
52362587Sitojun	{ 0, 0 }, \
52462587Sitojun	{ 0, 0 }, \
52562587Sitojun	{ 0, 0 }, \
52662587Sitojun	{ 0, 0 }, \
52762587Sitojun	{ "ipsec", CTLTYPE_NODE }, \
528118622Shsu	{ 0, 0 }, \
529118622Shsu	{ 0, 0 }, \
530118622Shsu	{ 0, 0 }, \
531118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
532118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
533118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
534118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
535118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
536118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
537118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
538118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
539118622Shsu	{ 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, { 0, 0 }, \
540118622Shsu	{ 0, 0 }, \
541118622Shsu	{ 0, 0 }, \
542118622Shsu	{ 0, 0 }, \
543118622Shsu	{ "pim", CTLTYPE_NODE }, \
5441541Srgrimes}
5451541Srgrimes
5461541Srgrimes/*
5471541Srgrimes * Names for IP sysctl objects
5481541Srgrimes */
5491541Srgrimes#define	IPCTL_FORWARDING	1	/* act as router */
5501541Srgrimes#define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
5511541Srgrimes#define	IPCTL_DEFTTL		3	/* default TTL */
5521541Srgrimes#ifdef notyet
5531541Srgrimes#define	IPCTL_DEFMTU		4	/* default MTU */
5541541Srgrimes#endif
555133874Srwatson#define	IPCTL_RTEXPIRE		5	/* cloned route expiration time */
556133874Srwatson#define	IPCTL_RTMINEXPIRE	6	/* min value for expiration time */
557133874Srwatson#define	IPCTL_RTMAXCACHE	7	/* trigger level for dynamic expire */
5587091Swollman#define	IPCTL_SOURCEROUTE	8	/* may perform source routes */
5599575Speter#define	IPCTL_DIRECTEDBROADCAST	9	/* may re-broadcast received packets */
560133874Srwatson#define	IPCTL_INTRQMAXLEN	10	/* max length of netisr queue */
56152904Sshin#define	IPCTL_INTRQDROPS	11	/* number of netisr q drops */
56229838Swollman#define	IPCTL_STATS		12	/* ipstat structure */
56333440Sguido#define	IPCTL_ACCEPTSOURCEROUTE	13	/* may accept source routed packets */
56452904Sshin#define	IPCTL_FASTFORWARDING	14	/* use fast IP forwarding code */
56555009Sshin#define	IPCTL_KEEPFAITH		15	/* FAITH IPv4->IPv6 translater ctl */
56652904Sshin#define	IPCTL_GIF_TTL		16	/* default TTL for gif encap packet */
56752904Sshin#define	IPCTL_MAXID		17
5681541Srgrimes
5691541Srgrimes#define	IPCTL_NAMES { \
5701541Srgrimes	{ 0, 0 }, \
5711541Srgrimes	{ "forwarding", CTLTYPE_INT }, \
5721541Srgrimes	{ "redirect", CTLTYPE_INT }, \
5731541Srgrimes	{ "ttl", CTLTYPE_INT }, \
5741541Srgrimes	{ "mtu", CTLTYPE_INT }, \
5755109Swollman	{ "rtexpire", CTLTYPE_INT }, \
5766399Swollman	{ "rtminexpire", CTLTYPE_INT }, \
5776399Swollman	{ "rtmaxcache", CTLTYPE_INT }, \
5787091Swollman	{ "sourceroute", CTLTYPE_INT }, \
579133874Srwatson	{ "directed-broadcast", CTLTYPE_INT }, \
58012003Swollman	{ "intr-queue-maxlen", CTLTYPE_INT }, \
58112003Swollman	{ "intr-queue-drops", CTLTYPE_INT }, \
58229838Swollman	{ "stats", CTLTYPE_STRUCT }, \
58333440Sguido	{ "accept_sourceroute", CTLTYPE_INT }, \
58436192Sdg	{ "fastforwarding", CTLTYPE_INT }, \
5851541Srgrimes}
5861541Srgrimes
58795336Smike#endif /* __BSD_VISIBLE */
58895336Smike
58978243Speter#ifdef _KERNEL
59095336Smike
59178243Speterstruct ifnet; struct mbuf;	/* forward declarations for Standard C */
59278243Speter
59392723Salfredint	 in_broadcast(struct in_addr, struct ifnet *);
59492723Salfredint	 in_canforward(struct in_addr);
59592723Salfredint	 in_localaddr(struct in_addr);
596133486Sandreint	 in_localip(struct in_addr);
597133874Srwatsonchar	*inet_ntoa(struct in_addr); /* in libkern */
59892723Salfredchar	*inet_ntoa_r(struct in_addr ina, char *buf); /* in libkern */
599150296Srwatsonvoid	 in_ifdetach(struct ifnet *);
6002169Spaul
601133874Srwatson#define	in_hosteq(s, t)	((s).s_addr == (t).s_addr)
602133874Srwatson#define	in_nullhost(x)	((x).s_addr == INADDR_ANY)
603102925Ssobomax
604133874Srwatson#define	satosin(sa)	((struct sockaddr_in *)(sa))
605133874Srwatson#define	sintosa(sin)	((struct sockaddr *)(sin))
606133874Srwatson#define	ifatoia(ifa)	((struct in_ifaddr *)(ifa))
60784101Sjlemon
60895336Smike#endif /* _KERNEL */
60990868Smike
61095336Smike/* INET6 stuff */
61195336Smike#if __POSIX_VISIBLE >= 200112
61295336Smike#define	__KAME_NETINET_IN_H_INCLUDED_
61395336Smike#include <netinet6/in6.h>
61495336Smike#undef __KAME_NETINET_IN_H_INCLUDED_
61591959Smike#endif
61691959Smike
61795336Smike#endif /* !_NETINET_IN_H_*/
618