Attachment #196187 for bug #221137

Lines 557-562 Link Here

(-)netinet/ip_input.c (-1 / +3 lines)
557		557
558	/*	558	/*
559	* Try to forward the packet, but if we fail continue.	559	* Try to forward the packet, but if we fail continue.
		560	* ip_tryforward() does not generate redirects, so fall
		561	* through to normal processing if redirects are required.
560	* ip_tryforward() does inbound and outbound packet firewall	562	* ip_tryforward() does inbound and outbound packet firewall
561	* processing. If firewall has decided that destination becomes	563	* processing. If firewall has decided that destination becomes
562	* our local address, it sets M_FASTFWD_OURS flag. In this	564	* our local address, it sets M_FASTFWD_OURS flag. In this
Lines 563-569 Link Here
563	* case skip another inbound firewall processing and update	565	* case skip another inbound firewall processing and update
564	* ip pointer.	566	* ip pointer.
565	*/	567	*/
566	if (V_ipforwarding != 0	568	if (V_ipforwarding && !V_ipsendredirects
567	#if defined(IPSEC) \|\| defined(IPSEC_SUPPORT)	569	#if defined(IPSEC) \|\| defined(IPSEC_SUPPORT)
568	&& (!IPSEC_ENABLED(ipv4) \|\|	570	&& (!IPSEC_ENABLED(ipv4) \|\|
569	IPSEC_CAPS(ipv4, m, IPSEC_CAP_OPERABLE) == 0)	571	IPSEC_CAPS(ipv4, m, IPSEC_CAP_OPERABLE) == 0)

Lines 720-725 Link Here

(-)netinet6/ip6_input.c (-1 / +3 lines)
720	#endif	720	#endif
721	/*	721	/*
722	* Try to forward the packet, but if we fail continue.	722	* Try to forward the packet, but if we fail continue.
		723	* ip6_tryforward() does not generate redirects, so fall
		724	* through to normal processing if redirects are required.
723	* ip6_tryforward() does inbound and outbound packet firewall	725	* ip6_tryforward() does inbound and outbound packet firewall
724	* processing. If firewall has decided that destination becomes	726	* processing. If firewall has decided that destination becomes
725	* our local address, it sets M_FASTFWD_OURS flag. In this	727	* our local address, it sets M_FASTFWD_OURS flag. In this
Lines 726-732 Link Here
726	* case skip another inbound firewall processing and update	728	* case skip another inbound firewall processing and update
727	* ip6 pointer.	729	* ip6 pointer.
728	*/	730	*/
729	if (V_ip6_forwarding != 0	731	if (V_ip6_forwarding && !V_ip6_sendredirects
730	#if defined(IPSEC) \|\| defined(IPSEC_SUPPORT)	732	#if defined(IPSEC) \|\| defined(IPSEC_SUPPORT)
731	&& (!IPSEC_ENABLED(ipv6) \|\|	733	&& (!IPSEC_ENABLED(ipv6) \|\|
732	IPSEC_CAPS(ipv6, m, IPSEC_CAP_OPERABLE) == 0)	734	IPSEC_CAPS(ipv6, m, IPSEC_CAP_OPERABLE) == 0)

Return to bug 221137