Remove a possible loophole - previously the code wouldn't pass packets destined

to the loopback address to the packet filter.

Reviewed by:	"Ugen J.S.Antsilevich" <ugen@netvision.net.il>
This commit is contained in:
Gary Palmer 1995-02-07 20:30:42 +00:00
parent 6c1bb9003f
commit 6db216a6d7
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=6237

View file

@ -31,7 +31,7 @@
* SUCH DAMAGE.
*
* @(#)ip_input.c 8.2 (Berkeley) 1/4/94
* $Id: ip_input.c,v 1.14 1994/12/14 19:06:37 wollman Exp $
* $Id: ip_input.c,v 1.15 1995/01/12 13:06:30 ugen Exp $
*/
#include <sys/param.h>
@ -243,10 +243,9 @@ ipintr()
*/
if (ip_fw_chk_ptr!=NULL)
if (((char *)&(ip->ip_dst.s_addr))[0] != 127
&& !(*ip_fw_chk_ptr)(ip,m->m_pkthdr.rcvif,ip_fw_chain) ) {
goto bad;
}
if (!(*ip_fw_chk_ptr)(ip,m->m_pkthdr.rcvif,ip_fw_chain) ) {
goto bad;
}
/*
* Process options and, if not destined for us,