xref: /f-stack/tools/compat/include/netinet/in.h (revision d4a07e70)
1df6ad731Slogwang /*-
2*d4a07e70Sfengbojiang  * SPDX-License-Identifier: BSD-3-Clause
3*d4a07e70Sfengbojiang  *
4df6ad731Slogwang  * Copyright (c) 1982, 1986, 1990, 1993
5df6ad731Slogwang  *	The Regents of the University of California.  All rights reserved.
6df6ad731Slogwang  *
7df6ad731Slogwang  * Redistribution and use in source and binary forms, with or without
8df6ad731Slogwang  * modification, are permitted provided that the following conditions
9df6ad731Slogwang  * are met:
10df6ad731Slogwang  * 1. Redistributions of source code must retain the above copyright
11df6ad731Slogwang  *    notice, this list of conditions and the following disclaimer.
12df6ad731Slogwang  * 2. Redistributions in binary form must reproduce the above copyright
13df6ad731Slogwang  *    notice, this list of conditions and the following disclaimer in the
14df6ad731Slogwang  *    documentation and/or other materials provided with the distribution.
15*d4a07e70Sfengbojiang  * 3. Neither the name of the University nor the names of its contributors
16df6ad731Slogwang  *    may be used to endorse or promote products derived from this software
17df6ad731Slogwang  *    without specific prior written permission.
18df6ad731Slogwang  *
19df6ad731Slogwang  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
20df6ad731Slogwang  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21df6ad731Slogwang  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22df6ad731Slogwang  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
23df6ad731Slogwang  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24df6ad731Slogwang  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25df6ad731Slogwang  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26df6ad731Slogwang  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27df6ad731Slogwang  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28df6ad731Slogwang  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29df6ad731Slogwang  * SUCH DAMAGE.
30df6ad731Slogwang  *
31df6ad731Slogwang  *	@(#)in.h	8.3 (Berkeley) 1/3/94
32df6ad731Slogwang  * $FreeBSD$
33df6ad731Slogwang  */
34df6ad731Slogwang 
35df6ad731Slogwang #ifndef _COMPAT_NETINET_IN_H_
36df6ad731Slogwang #define	_COMPAT_NETINET_IN_H_
37df6ad731Slogwang 
38df6ad731Slogwang #include <sys/cdefs.h>
39df6ad731Slogwang #include <sys/_types.h>
40df6ad731Slogwang 
41df6ad731Slogwang /* Protocols common to RFC 1700, POSIX, and X/Open. */
42df6ad731Slogwang #define	IPPROTO_IP		0		/* dummy for IP */
43df6ad731Slogwang #define	IPPROTO_ICMP		1		/* control message protocol */
44df6ad731Slogwang #define	IPPROTO_TCP		6		/* tcp */
45df6ad731Slogwang #define	IPPROTO_UDP		17		/* user datagram protocol */
46df6ad731Slogwang 
47df6ad731Slogwang #define	INADDR_ANY		((in_addr_t)0x00000000)
48df6ad731Slogwang #define	INADDR_BROADCAST	((in_addr_t)0xffffffff)	/* must be masked */
49df6ad731Slogwang 
50df6ad731Slogwang #ifndef _UINT8_T_DECLARED
51df6ad731Slogwang typedef	__uint8_t		uint8_t;
52df6ad731Slogwang #define	_UINT8_T_DECLARED
53df6ad731Slogwang #endif
54df6ad731Slogwang 
55df6ad731Slogwang #ifndef _UINT16_T_DECLARED
56df6ad731Slogwang typedef	__uint16_t		uint16_t;
57df6ad731Slogwang #define	_UINT16_T_DECLARED
58df6ad731Slogwang #endif
59df6ad731Slogwang 
60df6ad731Slogwang #ifndef _UINT32_T_DECLARED
61df6ad731Slogwang typedef	__uint32_t		uint32_t;
62df6ad731Slogwang #define	_UINT32_T_DECLARED
63df6ad731Slogwang #endif
64df6ad731Slogwang 
65df6ad731Slogwang #ifndef _IN_ADDR_T_DECLARED
66df6ad731Slogwang typedef	uint32_t		in_addr_t;
67df6ad731Slogwang #define	_IN_ADDR_T_DECLARED
68df6ad731Slogwang #endif
69df6ad731Slogwang 
70df6ad731Slogwang #ifndef _IN_PORT_T_DECLARED
71df6ad731Slogwang typedef	uint16_t		in_port_t;
72df6ad731Slogwang #define	_IN_PORT_T_DECLARED
73df6ad731Slogwang #endif
74df6ad731Slogwang 
75df6ad731Slogwang #ifndef _SA_FAMILY_T_DECLARED
76df6ad731Slogwang typedef	__sa_family_t		sa_family_t;
77df6ad731Slogwang #define	_SA_FAMILY_T_DECLARED
78df6ad731Slogwang #endif
79df6ad731Slogwang 
80df6ad731Slogwang /* Internet address (a structure for historical reasons). */
81df6ad731Slogwang #ifndef	_STRUCT_IN_ADDR_DECLARED
82df6ad731Slogwang struct in_addr {
83df6ad731Slogwang 	in_addr_t s_addr;
84df6ad731Slogwang };
85df6ad731Slogwang #define	_STRUCT_IN_ADDR_DECLARED
86df6ad731Slogwang #endif
87df6ad731Slogwang 
88df6ad731Slogwang #ifndef	_SOCKLEN_T_DECLARED
89df6ad731Slogwang typedef	__socklen_t	socklen_t;
90df6ad731Slogwang #define	_SOCKLEN_T_DECLARED
91df6ad731Slogwang #endif
92df6ad731Slogwang 
93df6ad731Slogwang #include <sys/_sockaddr_storage.h>
94df6ad731Slogwang 
95df6ad731Slogwang /* Socket address, internet style. */
96df6ad731Slogwang struct sockaddr_in {
97df6ad731Slogwang 	uint8_t	sin_len;
98df6ad731Slogwang 	sa_family_t	sin_family;
99df6ad731Slogwang 	in_port_t	sin_port;
100df6ad731Slogwang 	struct	in_addr sin_addr;
101df6ad731Slogwang 	char	sin_zero[8];
102df6ad731Slogwang };
103df6ad731Slogwang 
104df6ad731Slogwang #ifndef _BYTEORDER_PROTOTYPED
105df6ad731Slogwang #define	_BYTEORDER_PROTOTYPED
106df6ad731Slogwang extern uint32_t	htonl(uint32_t);
107df6ad731Slogwang extern uint16_t	htons(uint16_t);
108df6ad731Slogwang extern uint32_t	ntohl(uint32_t);
109df6ad731Slogwang extern uint16_t	ntohs(uint16_t);
110df6ad731Slogwang #endif
111df6ad731Slogwang 
112df6ad731Slogwang #define	IPPROTO_IPV6		41		/* IP6 header */
113df6ad731Slogwang #define	IPPROTO_RAW		255		/* raw IP packet */
114df6ad731Slogwang #define	INET_ADDRSTRLEN		16
115df6ad731Slogwang 
116df6ad731Slogwang #if __BSD_VISIBLE
117df6ad731Slogwang /*
118df6ad731Slogwang  * Constants and structures defined by the internet system,
119df6ad731Slogwang  * Per RFC 790, September 1981, and numerous additions.
120df6ad731Slogwang  */
121df6ad731Slogwang 
122df6ad731Slogwang /*
123df6ad731Slogwang  * Protocols (RFC 1700)
124df6ad731Slogwang  */
125df6ad731Slogwang #define	IPPROTO_HOPOPTS		0		/* IP6 hop-by-hop options */
126df6ad731Slogwang #define	IPPROTO_IGMP		2		/* group mgmt protocol */
127df6ad731Slogwang #define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
128df6ad731Slogwang #define	IPPROTO_IPV4		4		/* IPv4 encapsulation */
129df6ad731Slogwang #define	IPPROTO_IPIP		IPPROTO_IPV4	/* for compatibility */
130df6ad731Slogwang #define	IPPROTO_ST		7		/* Stream protocol II */
131df6ad731Slogwang #define	IPPROTO_EGP		8		/* exterior gateway protocol */
132df6ad731Slogwang #define	IPPROTO_PIGP		9		/* private interior gateway */
133df6ad731Slogwang #define	IPPROTO_RCCMON		10		/* BBN RCC Monitoring */
134df6ad731Slogwang #define	IPPROTO_NVPII		11		/* network voice protocol*/
135df6ad731Slogwang #define	IPPROTO_PUP		12		/* pup */
136df6ad731Slogwang #define	IPPROTO_ARGUS		13		/* Argus */
137df6ad731Slogwang #define	IPPROTO_EMCON		14		/* EMCON */
138df6ad731Slogwang #define	IPPROTO_XNET		15		/* Cross Net Debugger */
139df6ad731Slogwang #define	IPPROTO_CHAOS		16		/* Chaos*/
140df6ad731Slogwang #define	IPPROTO_MUX		18		/* Multiplexing */
141df6ad731Slogwang #define	IPPROTO_MEAS		19		/* DCN Measurement Subsystems */
142df6ad731Slogwang #define	IPPROTO_HMP		20		/* Host Monitoring */
143df6ad731Slogwang #define	IPPROTO_PRM		21		/* Packet Radio Measurement */
144df6ad731Slogwang #define	IPPROTO_IDP		22		/* xns idp */
145df6ad731Slogwang #define	IPPROTO_TRUNK1		23		/* Trunk-1 */
146df6ad731Slogwang #define	IPPROTO_TRUNK2		24		/* Trunk-2 */
147df6ad731Slogwang #define	IPPROTO_LEAF1		25		/* Leaf-1 */
148df6ad731Slogwang #define	IPPROTO_LEAF2		26		/* Leaf-2 */
149df6ad731Slogwang #define	IPPROTO_RDP		27		/* Reliable Data */
150df6ad731Slogwang #define	IPPROTO_IRTP		28		/* Reliable Transaction */
151df6ad731Slogwang #define	IPPROTO_TP		29		/* tp-4 w/ class negotiation */
152df6ad731Slogwang #define	IPPROTO_BLT		30		/* Bulk Data Transfer */
153df6ad731Slogwang #define	IPPROTO_NSP		31		/* Network Services */
154df6ad731Slogwang #define	IPPROTO_INP		32		/* Merit Internodal */
155*d4a07e70Sfengbojiang #define	IPPROTO_DCCP		33		/* Datagram Congestion Control Protocol */
156df6ad731Slogwang #define	IPPROTO_3PC		34		/* Third Party Connect */
157df6ad731Slogwang #define	IPPROTO_IDPR		35		/* InterDomain Policy Routing */
158df6ad731Slogwang #define	IPPROTO_XTP		36		/* XTP */
159df6ad731Slogwang #define	IPPROTO_DDP		37		/* Datagram Delivery */
160df6ad731Slogwang #define	IPPROTO_CMTP		38		/* Control Message Transport */
161df6ad731Slogwang #define	IPPROTO_TPXX		39		/* TP++ Transport */
162df6ad731Slogwang #define	IPPROTO_IL		40		/* IL transport protocol */
163df6ad731Slogwang #define	IPPROTO_SDRP		42		/* Source Demand Routing */
164df6ad731Slogwang #define	IPPROTO_ROUTING		43		/* IP6 routing header */
165df6ad731Slogwang #define	IPPROTO_FRAGMENT	44		/* IP6 fragmentation header */
166df6ad731Slogwang #define	IPPROTO_IDRP		45		/* InterDomain Routing*/
167df6ad731Slogwang #define	IPPROTO_RSVP		46		/* resource reservation */
168df6ad731Slogwang #define	IPPROTO_GRE		47		/* General Routing Encap. */
169df6ad731Slogwang #define	IPPROTO_MHRP		48		/* Mobile Host Routing */
170df6ad731Slogwang #define	IPPROTO_BHA		49		/* BHA */
171df6ad731Slogwang #define	IPPROTO_ESP		50		/* IP6 Encap Sec. Payload */
172df6ad731Slogwang #define	IPPROTO_AH		51		/* IP6 Auth Header */
173df6ad731Slogwang #define	IPPROTO_INLSP		52		/* Integ. Net Layer Security */
174df6ad731Slogwang #define	IPPROTO_SWIPE		53		/* IP with encryption */
175df6ad731Slogwang #define	IPPROTO_NHRP		54		/* Next Hop Resolution */
176df6ad731Slogwang #define	IPPROTO_MOBILE		55		/* IP Mobility */
177df6ad731Slogwang #define	IPPROTO_TLSP		56		/* Transport Layer Security */
178df6ad731Slogwang #define	IPPROTO_SKIP		57		/* SKIP */
179df6ad731Slogwang #define	IPPROTO_ICMPV6		58		/* ICMP6 */
180df6ad731Slogwang #define	IPPROTO_NONE		59		/* IP6 no next header */
181df6ad731Slogwang #define	IPPROTO_DSTOPTS		60		/* IP6 destination option */
182df6ad731Slogwang #define	IPPROTO_AHIP		61		/* any host internal protocol */
183df6ad731Slogwang #define	IPPROTO_CFTP		62		/* CFTP */
184df6ad731Slogwang #define	IPPROTO_HELLO		63		/* "hello" routing protocol */
185df6ad731Slogwang #define	IPPROTO_SATEXPAK	64		/* SATNET/Backroom EXPAK */
186df6ad731Slogwang #define	IPPROTO_KRYPTOLAN	65		/* Kryptolan */
187df6ad731Slogwang #define	IPPROTO_RVD		66		/* Remote Virtual Disk */
188df6ad731Slogwang #define	IPPROTO_IPPC		67		/* Pluribus Packet Core */
189df6ad731Slogwang #define	IPPROTO_ADFS		68		/* Any distributed FS */
190df6ad731Slogwang #define	IPPROTO_SATMON		69		/* Satnet Monitoring */
191df6ad731Slogwang #define	IPPROTO_VISA		70		/* VISA Protocol */
192df6ad731Slogwang #define	IPPROTO_IPCV		71		/* Packet Core Utility */
193df6ad731Slogwang #define	IPPROTO_CPNX		72		/* Comp. Prot. Net. Executive */
194df6ad731Slogwang #define	IPPROTO_CPHB		73		/* Comp. Prot. HeartBeat */
195df6ad731Slogwang #define	IPPROTO_WSN		74		/* Wang Span Network */
196df6ad731Slogwang #define	IPPROTO_PVP		75		/* Packet Video Protocol */
197df6ad731Slogwang #define	IPPROTO_BRSATMON	76		/* BackRoom SATNET Monitoring */
198df6ad731Slogwang #define	IPPROTO_ND		77		/* Sun net disk proto (temp.) */
199df6ad731Slogwang #define	IPPROTO_WBMON		78		/* WIDEBAND Monitoring */
200df6ad731Slogwang #define	IPPROTO_WBEXPAK		79		/* WIDEBAND EXPAK */
201df6ad731Slogwang #define	IPPROTO_EON		80		/* ISO cnlp */
202df6ad731Slogwang #define	IPPROTO_VMTP		81		/* VMTP */
203df6ad731Slogwang #define	IPPROTO_SVMTP		82		/* Secure VMTP */
204df6ad731Slogwang #define	IPPROTO_VINES		83		/* Banyon VINES */
205df6ad731Slogwang #define	IPPROTO_TTP		84		/* TTP */
206df6ad731Slogwang #define	IPPROTO_IGP		85		/* NSFNET-IGP */
207df6ad731Slogwang #define	IPPROTO_DGP		86		/* dissimilar gateway prot. */
208df6ad731Slogwang #define	IPPROTO_TCF		87		/* TCF */
209df6ad731Slogwang #define	IPPROTO_IGRP		88		/* Cisco/GXS IGRP */
210df6ad731Slogwang #define	IPPROTO_OSPFIGP		89		/* OSPFIGP */
211df6ad731Slogwang #define	IPPROTO_SRPC		90		/* Strite RPC protocol */
212df6ad731Slogwang #define	IPPROTO_LARP		91		/* Locus Address Resoloution */
213df6ad731Slogwang #define	IPPROTO_MTP		92		/* Multicast Transport */
214df6ad731Slogwang #define	IPPROTO_AX25		93		/* AX.25 Frames */
215df6ad731Slogwang #define	IPPROTO_IPEIP		94		/* IP encapsulated in IP */
216df6ad731Slogwang #define	IPPROTO_MICP		95		/* Mobile Int.ing control */
217df6ad731Slogwang #define	IPPROTO_SCCSP		96		/* Semaphore Comm. security */
218df6ad731Slogwang #define	IPPROTO_ETHERIP		97		/* Ethernet IP encapsulation */
219df6ad731Slogwang #define	IPPROTO_ENCAP		98		/* encapsulation header */
220df6ad731Slogwang #define	IPPROTO_APES		99		/* any private encr. scheme */
221df6ad731Slogwang #define	IPPROTO_GMTP		100		/* GMTP*/
222df6ad731Slogwang #define	IPPROTO_IPCOMP		108		/* payload compression (IPComp) */
223df6ad731Slogwang #define	IPPROTO_SCTP		132		/* SCTP */
224df6ad731Slogwang #define	IPPROTO_MH		135		/* IPv6 Mobility Header */
225df6ad731Slogwang #define	IPPROTO_UDPLITE		136		/* UDP-Lite */
226df6ad731Slogwang #define	IPPROTO_HIP		139		/* IP6 Host Identity Protocol */
227df6ad731Slogwang #define	IPPROTO_SHIM6		140		/* IP6 Shim6 Protocol */
228df6ad731Slogwang /* 101-254: Partly Unassigned */
229df6ad731Slogwang #define	IPPROTO_PIM		103		/* Protocol Independent Mcast */
230df6ad731Slogwang #define	IPPROTO_CARP		112		/* CARP */
231df6ad731Slogwang #define	IPPROTO_PGM		113		/* PGM */
232df6ad731Slogwang #define	IPPROTO_MPLS		137		/* MPLS-in-IP */
233df6ad731Slogwang #define	IPPROTO_PFSYNC		240		/* PFSYNC */
234df6ad731Slogwang #define	IPPROTO_RESERVED_253	253		/* Reserved */
235df6ad731Slogwang #define	IPPROTO_RESERVED_254	254		/* Reserved */
236df6ad731Slogwang /* 255: Reserved */
237df6ad731Slogwang /* BSD Private, local use, namespace incursion, no longer used */
238df6ad731Slogwang #define	IPPROTO_OLD_DIVERT	254		/* OLD divert pseudo-proto */
239df6ad731Slogwang #define	IPPROTO_MAX		256
240df6ad731Slogwang 
241df6ad731Slogwang /* last return value of *_input(), meaning "all job for this pkt is done".  */
242df6ad731Slogwang #define	IPPROTO_DONE		257
243df6ad731Slogwang 
244df6ad731Slogwang /* Only used internally, so can be outside the range of valid IP protocols. */
245df6ad731Slogwang #define	IPPROTO_DIVERT		258		/* divert pseudo-protocol */
246df6ad731Slogwang #define	IPPROTO_SEND		259		/* SeND pseudo-protocol */
247df6ad731Slogwang 
248df6ad731Slogwang /*
249df6ad731Slogwang  * Defined to avoid confusion.  The master value is defined by
250df6ad731Slogwang  * PROTO_SPACER in sys/protosw.h.
251df6ad731Slogwang  */
252df6ad731Slogwang #define	IPPROTO_SPACER		32767		/* spacer for loadable protos */
253df6ad731Slogwang 
254df6ad731Slogwang /*
255df6ad731Slogwang  * Local port number conventions:
256df6ad731Slogwang  *
257df6ad731Slogwang  * When a user does a bind(2) or connect(2) with a port number of zero,
258df6ad731Slogwang  * a non-conflicting local port address is chosen.
259df6ad731Slogwang  * The default range is IPPORT_HIFIRSTAUTO through
260df6ad731Slogwang  * IPPORT_HILASTAUTO, although that is settable by sysctl.
261df6ad731Slogwang  *
262df6ad731Slogwang  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
263df6ad731Slogwang  * default assignment range.
264df6ad731Slogwang  *
265df6ad731Slogwang  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
266df6ad731Slogwang  *
267df6ad731Slogwang  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
268df6ad731Slogwang  * into the "high" range.  These are reserved for client outbound connections
269df6ad731Slogwang  * which do not want to be filtered by any firewalls.
270df6ad731Slogwang  *
271df6ad731Slogwang  * The value IP_PORTRANGE_LOW changes the range to the "low" are
272df6ad731Slogwang  * that is (by convention) restricted to privileged processes.  This
273df6ad731Slogwang  * convention is based on "vouchsafe" principles only.  It is only secure
274df6ad731Slogwang  * if you trust the remote host to restrict these ports.
275df6ad731Slogwang  *
276df6ad731Slogwang  * The default range of ports and the high range can be changed by
277*d4a07e70Sfengbojiang  * sysctl(3).  (net.inet.ip.portrange.{hi,low,}{first,last})
278df6ad731Slogwang  *
279df6ad731Slogwang  * Changing those values has bad security implications if you are
280df6ad731Slogwang  * using a stateless firewall that is allowing packets outside of that
281df6ad731Slogwang  * range in order to allow transparent outgoing connections.
282df6ad731Slogwang  *
283df6ad731Slogwang  * Such a firewall configuration will generally depend on the use of these
284df6ad731Slogwang  * default values.  If you change them, you may find your Security
285df6ad731Slogwang  * Administrator looking for you with a heavy object.
286df6ad731Slogwang  *
287df6ad731Slogwang  * For a slightly more orthodox text view on this:
288df6ad731Slogwang  *
289df6ad731Slogwang  *            ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers
290df6ad731Slogwang  *
291df6ad731Slogwang  *    port numbers are divided into three ranges:
292df6ad731Slogwang  *
293df6ad731Slogwang  *                0 -  1023 Well Known Ports
294df6ad731Slogwang  *             1024 - 49151 Registered Ports
295df6ad731Slogwang  *            49152 - 65535 Dynamic and/or Private Ports
296df6ad731Slogwang  *
297df6ad731Slogwang  */
298df6ad731Slogwang 
299df6ad731Slogwang /*
300df6ad731Slogwang  * Ports < IPPORT_RESERVED are reserved for
301df6ad731Slogwang  * privileged processes (e.g. root).         (IP_PORTRANGE_LOW)
302df6ad731Slogwang  */
303df6ad731Slogwang #define	IPPORT_RESERVED		1024
304df6ad731Slogwang 
305df6ad731Slogwang /*
306df6ad731Slogwang  * Default local port range, used by IP_PORTRANGE_DEFAULT
307df6ad731Slogwang  */
308df6ad731Slogwang #define IPPORT_EPHEMERALFIRST	10000
309df6ad731Slogwang #define IPPORT_EPHEMERALLAST	65535
310df6ad731Slogwang 
311df6ad731Slogwang /*
312df6ad731Slogwang  * Dynamic port range, used by IP_PORTRANGE_HIGH.
313df6ad731Slogwang  */
314df6ad731Slogwang #define	IPPORT_HIFIRSTAUTO	49152
315df6ad731Slogwang #define	IPPORT_HILASTAUTO	65535
316df6ad731Slogwang 
317df6ad731Slogwang /*
318df6ad731Slogwang  * Scanning for a free reserved port return a value below IPPORT_RESERVED,
319df6ad731Slogwang  * but higher than IPPORT_RESERVEDSTART.  Traditionally the start value was
320df6ad731Slogwang  * 512, but that conflicts with some well-known-services that firewalls may
321df6ad731Slogwang  * have a fit if we use.
322df6ad731Slogwang  */
323df6ad731Slogwang #define	IPPORT_RESERVEDSTART	600
324df6ad731Slogwang 
325df6ad731Slogwang #define	IPPORT_MAX		65535
326df6ad731Slogwang 
327df6ad731Slogwang /*
328df6ad731Slogwang  * Definitions of bits in internet address integers.
329df6ad731Slogwang  * On subnets, the decomposition of addresses to host and net parts
330df6ad731Slogwang  * is done according to subnet mask, not the masks here.
331df6ad731Slogwang  */
332df6ad731Slogwang #define	IN_CLASSA(i)		(((in_addr_t)(i) & 0x80000000) == 0)
333df6ad731Slogwang #define	IN_CLASSA_NET		0xff000000
334df6ad731Slogwang #define	IN_CLASSA_NSHIFT	24
335df6ad731Slogwang #define	IN_CLASSA_HOST		0x00ffffff
336df6ad731Slogwang #define	IN_CLASSA_MAX		128
337df6ad731Slogwang 
338df6ad731Slogwang #define	IN_CLASSB(i)		(((in_addr_t)(i) & 0xc0000000) == 0x80000000)
339df6ad731Slogwang #define	IN_CLASSB_NET		0xffff0000
340df6ad731Slogwang #define	IN_CLASSB_NSHIFT	16
341df6ad731Slogwang #define	IN_CLASSB_HOST		0x0000ffff
342df6ad731Slogwang #define	IN_CLASSB_MAX		65536
343df6ad731Slogwang 
344df6ad731Slogwang #define	IN_CLASSC(i)		(((in_addr_t)(i) & 0xe0000000) == 0xc0000000)
345df6ad731Slogwang #define	IN_CLASSC_NET		0xffffff00
346df6ad731Slogwang #define	IN_CLASSC_NSHIFT	8
347df6ad731Slogwang #define	IN_CLASSC_HOST		0x000000ff
348df6ad731Slogwang 
349df6ad731Slogwang #define	IN_CLASSD(i)		(((in_addr_t)(i) & 0xf0000000) == 0xe0000000)
350df6ad731Slogwang #define	IN_CLASSD_NET		0xf0000000	/* These ones aren't really */
351df6ad731Slogwang #define	IN_CLASSD_NSHIFT	28		/* net and host fields, but */
352df6ad731Slogwang #define	IN_CLASSD_HOST		0x0fffffff	/* routing needn't know.    */
353df6ad731Slogwang #define	IN_MULTICAST(i)		IN_CLASSD(i)
354df6ad731Slogwang 
355df6ad731Slogwang #define	IN_EXPERIMENTAL(i)	(((in_addr_t)(i) & 0xf0000000) == 0xf0000000)
356df6ad731Slogwang #define	IN_BADCLASS(i)		(((in_addr_t)(i) & 0xf0000000) == 0xf0000000)
357df6ad731Slogwang 
358df6ad731Slogwang #define IN_LINKLOCAL(i)		(((in_addr_t)(i) & 0xffff0000) == 0xa9fe0000)
359df6ad731Slogwang #define IN_LOOPBACK(i)		(((in_addr_t)(i) & 0xff000000) == 0x7f000000)
360df6ad731Slogwang #define IN_ZERONET(i)		(((in_addr_t)(i) & 0xff000000) == 0)
361df6ad731Slogwang 
362df6ad731Slogwang #define	IN_PRIVATE(i)	((((in_addr_t)(i) & 0xff000000) == 0x0a000000) || \
363df6ad731Slogwang 			 (((in_addr_t)(i) & 0xfff00000) == 0xac100000) || \
364df6ad731Slogwang 			 (((in_addr_t)(i) & 0xffff0000) == 0xc0a80000))
365df6ad731Slogwang 
366df6ad731Slogwang #define	IN_LOCAL_GROUP(i)	(((in_addr_t)(i) & 0xffffff00) == 0xe0000000)
367df6ad731Slogwang 
368df6ad731Slogwang #define	IN_ANY_LOCAL(i)		(IN_LINKLOCAL(i) || IN_LOCAL_GROUP(i))
369df6ad731Slogwang 
370df6ad731Slogwang #define	INADDR_LOOPBACK		((in_addr_t)0x7f000001)
371df6ad731Slogwang #ifndef _KERNEL
372df6ad731Slogwang #define	INADDR_NONE		((in_addr_t)0xffffffff)	/* -1 return */
373df6ad731Slogwang #endif
374df6ad731Slogwang 
375df6ad731Slogwang #define	INADDR_UNSPEC_GROUP	((in_addr_t)0xe0000000)	/* 224.0.0.0 */
376df6ad731Slogwang #define	INADDR_ALLHOSTS_GROUP	((in_addr_t)0xe0000001)	/* 224.0.0.1 */
377df6ad731Slogwang #define	INADDR_ALLRTRS_GROUP	((in_addr_t)0xe0000002)	/* 224.0.0.2 */
378df6ad731Slogwang #define	INADDR_ALLRPTS_GROUP	((in_addr_t)0xe0000016)	/* 224.0.0.22, IGMPv3 */
379df6ad731Slogwang #define	INADDR_CARP_GROUP	((in_addr_t)0xe0000012)	/* 224.0.0.18 */
380df6ad731Slogwang #define	INADDR_PFSYNC_GROUP	((in_addr_t)0xe00000f0)	/* 224.0.0.240 */
381df6ad731Slogwang #define	INADDR_ALLMDNS_GROUP	((in_addr_t)0xe00000fb)	/* 224.0.0.251 */
382df6ad731Slogwang #define	INADDR_MAX_LOCAL_GROUP	((in_addr_t)0xe00000ff)	/* 224.0.0.255 */
383df6ad731Slogwang 
384df6ad731Slogwang #define	IN_LOOPBACKNET		127			/* official! */
385df6ad731Slogwang 
386df6ad731Slogwang #define	IN_RFC3021_MASK		((in_addr_t)0xfffffffe)
387df6ad731Slogwang 
388df6ad731Slogwang /*
389df6ad731Slogwang  * Options for use with [gs]etsockopt at the IP level.
390df6ad731Slogwang  * First word of comment is data type; bool is stored in int.
391df6ad731Slogwang  */
392df6ad731Slogwang #define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
393df6ad731Slogwang #define	IP_HDRINCL		2    /* int; header is included with data */
394df6ad731Slogwang #define	IP_TOS			3    /* int; IP type of service and preced. */
395df6ad731Slogwang #define	IP_TTL			4    /* int; IP time to live */
396df6ad731Slogwang #define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
397df6ad731Slogwang #define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
398df6ad731Slogwang #define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
399df6ad731Slogwang #define	IP_SENDSRCADDR		IP_RECVDSTADDR /* cmsg_type to set src addr */
400df6ad731Slogwang #define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
401df6ad731Slogwang #define	IP_MULTICAST_IF		9    /* struct in_addr *or* struct ip_mreqn;
402df6ad731Slogwang 				      * set/get IP multicast i/f  */
403df6ad731Slogwang #define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
404df6ad731Slogwang #define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
405df6ad731Slogwang #define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
406df6ad731Slogwang #define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
407df6ad731Slogwang #define	IP_MULTICAST_VIF	14   /* set/get IP mcast virt. iface */
408df6ad731Slogwang #define	IP_RSVP_ON		15   /* enable RSVP in kernel */
409df6ad731Slogwang #define	IP_RSVP_OFF		16   /* disable RSVP in kernel */
410df6ad731Slogwang #define	IP_RSVP_VIF_ON		17   /* set RSVP per-vif socket */
411df6ad731Slogwang #define	IP_RSVP_VIF_OFF		18   /* unset RSVP per-vif socket */
412df6ad731Slogwang #define	IP_PORTRANGE		19   /* int; range to choose for unspec port */
413df6ad731Slogwang #define	IP_RECVIF		20   /* bool; receive reception if w/dgram */
414df6ad731Slogwang /* for IPSEC */
415df6ad731Slogwang #define	IP_IPSEC_POLICY		21   /* int; set/get security policy */
416df6ad731Slogwang 				     /* unused; was IP_FAITH */
417df6ad731Slogwang #define	IP_ONESBCAST		23   /* bool: send all-ones broadcast */
418df6ad731Slogwang #define	IP_BINDANY		24   /* bool: allow bind to any address */
419df6ad731Slogwang #define	IP_BINDMULTI		25   /* bool: allow multiple listeners on a tuple */
420df6ad731Slogwang #define	IP_RSS_LISTEN_BUCKET	26   /* int; set RSS listen bucket */
421*d4a07e70Sfengbojiang #define	IP_ORIGDSTADDR		27   /* bool: receive IP dst addr/port w/dgram */
422*d4a07e70Sfengbojiang #define	IP_RECVORIGDSTADDR      IP_ORIGDSTADDR
423df6ad731Slogwang 
424df6ad731Slogwang /*
425df6ad731Slogwang  * Options for controlling the firewall and dummynet.
426df6ad731Slogwang  * Historical options (from 40 to 64) will eventually be
427df6ad731Slogwang  * replaced by only two options, IP_FW3 and IP_DUMMYNET3.
428df6ad731Slogwang  */
429df6ad731Slogwang #define	IP_FW_TABLE_ADD		40   /* add entry */
430df6ad731Slogwang #define	IP_FW_TABLE_DEL		41   /* delete entry */
431df6ad731Slogwang #define	IP_FW_TABLE_FLUSH	42   /* flush table */
432df6ad731Slogwang #define	IP_FW_TABLE_GETSIZE	43   /* get table size */
433df6ad731Slogwang #define	IP_FW_TABLE_LIST	44   /* list table contents */
434df6ad731Slogwang 
435df6ad731Slogwang #define	IP_FW3			48   /* generic ipfw v.3 sockopts */
436df6ad731Slogwang #define	IP_DUMMYNET3		49   /* generic dummynet v.3 sockopts */
437df6ad731Slogwang 
438df6ad731Slogwang #define	IP_FW_ADD		50   /* add a firewall rule to chain */
439df6ad731Slogwang #define	IP_FW_DEL		51   /* delete a firewall rule from chain */
440df6ad731Slogwang #define	IP_FW_FLUSH		52   /* flush firewall rule chain */
441df6ad731Slogwang #define	IP_FW_ZERO		53   /* clear single/all firewall counter(s) */
442df6ad731Slogwang #define	IP_FW_GET		54   /* get entire firewall rule chain */
443df6ad731Slogwang #define	IP_FW_RESETLOG		55   /* reset logging counters */
444df6ad731Slogwang 
445df6ad731Slogwang #define IP_FW_NAT_CFG           56   /* add/config a nat rule */
446df6ad731Slogwang #define IP_FW_NAT_DEL           57   /* delete a nat rule */
447df6ad731Slogwang #define IP_FW_NAT_GET_CONFIG    58   /* get configuration of a nat rule */
448df6ad731Slogwang #define IP_FW_NAT_GET_LOG       59   /* get log of a nat rule */
449df6ad731Slogwang 
450df6ad731Slogwang #define	IP_DUMMYNET_CONFIGURE	60   /* add/configure a dummynet pipe */
451df6ad731Slogwang #define	IP_DUMMYNET_DEL		61   /* delete a dummynet pipe from chain */
452df6ad731Slogwang #define	IP_DUMMYNET_FLUSH	62   /* flush dummynet */
453df6ad731Slogwang #define	IP_DUMMYNET_GET		64   /* get entire dummynet pipes */
454df6ad731Slogwang 
455df6ad731Slogwang #define	IP_RECVTTL		65   /* bool; receive IP TTL w/dgram */
456df6ad731Slogwang #define	IP_MINTTL		66   /* minimum TTL for packet or drop */
457df6ad731Slogwang #define	IP_DONTFRAG		67   /* don't fragment packet */
458df6ad731Slogwang #define	IP_RECVTOS		68   /* bool; receive IP TOS w/dgram */
459df6ad731Slogwang 
460df6ad731Slogwang /* IPv4 Source Filter Multicast API [RFC3678] */
461df6ad731Slogwang #define	IP_ADD_SOURCE_MEMBERSHIP	70   /* join a source-specific group */
462df6ad731Slogwang #define	IP_DROP_SOURCE_MEMBERSHIP	71   /* drop a single source */
463df6ad731Slogwang #define	IP_BLOCK_SOURCE			72   /* block a source */
464df6ad731Slogwang #define	IP_UNBLOCK_SOURCE		73   /* unblock a source */
465df6ad731Slogwang 
466df6ad731Slogwang /* The following option is private; do not use it from user applications. */
467df6ad731Slogwang #define	IP_MSFILTER			74   /* set/get filter list */
468df6ad731Slogwang 
469*d4a07e70Sfengbojiang /* The following option deals with the 802.1Q Ethernet Priority Code Point */
470*d4a07e70Sfengbojiang #define	IP_VLAN_PCP		75   /* int; set/get PCP used for packet, */
471*d4a07e70Sfengbojiang 				     /*      -1 use interface default */
472*d4a07e70Sfengbojiang 
473df6ad731Slogwang /* Protocol Independent Multicast API [RFC3678] */
474df6ad731Slogwang #define	MCAST_JOIN_GROUP		80   /* join an any-source group */
475df6ad731Slogwang #define	MCAST_LEAVE_GROUP		81   /* leave all sources for group */
476df6ad731Slogwang #define	MCAST_JOIN_SOURCE_GROUP		82   /* join a source-specific group */
477df6ad731Slogwang #define	MCAST_LEAVE_SOURCE_GROUP	83   /* leave a single source */
478df6ad731Slogwang #define	MCAST_BLOCK_SOURCE		84   /* block a source */
479df6ad731Slogwang #define	MCAST_UNBLOCK_SOURCE		85   /* unblock a source */
480df6ad731Slogwang 
481df6ad731Slogwang /* Flow and RSS definitions */
482df6ad731Slogwang #define	IP_FLOWID		90   /* get flow id for the given socket/inp */
483df6ad731Slogwang #define	IP_FLOWTYPE		91   /* get flow type (M_HASHTYPE) */
484df6ad731Slogwang #define	IP_RSSBUCKETID		92   /* get RSS flowid -> bucket mapping */
485df6ad731Slogwang #define	IP_RECVFLOWID		93   /* bool; receive IP flowid/flowtype w/ datagram */
486df6ad731Slogwang #define	IP_RECVRSSBUCKETID	94   /* bool; receive IP RSS bucket id w/ datagram */
487df6ad731Slogwang 
488df6ad731Slogwang /*
489df6ad731Slogwang  * Defaults and limits for options
490df6ad731Slogwang  */
491df6ad731Slogwang #define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
492df6ad731Slogwang #define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
493df6ad731Slogwang 
494df6ad731Slogwang /*
495*d4a07e70Sfengbojiang  * Limit for IPv4 multicast memberships
496df6ad731Slogwang  */
497df6ad731Slogwang #define	IP_MAX_MEMBERSHIPS	4095
498df6ad731Slogwang 
499df6ad731Slogwang /*
500df6ad731Slogwang  * Default resource limits for IPv4 multicast source filtering.
501df6ad731Slogwang  * These may be modified by sysctl.
502df6ad731Slogwang  */
503df6ad731Slogwang #define	IP_MAX_GROUP_SRC_FILTER		512	/* sources per group */
504df6ad731Slogwang #define	IP_MAX_SOCK_SRC_FILTER		128	/* sources per socket/group */
505df6ad731Slogwang #define	IP_MAX_SOCK_MUTE_FILTER		128	/* XXX no longer used */
506df6ad731Slogwang 
507df6ad731Slogwang /*
508df6ad731Slogwang  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
509df6ad731Slogwang  */
510df6ad731Slogwang struct ip_mreq {
511df6ad731Slogwang 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
512df6ad731Slogwang 	struct	in_addr imr_interface;	/* local IP address of interface */
513df6ad731Slogwang };
514df6ad731Slogwang 
515df6ad731Slogwang /*
516df6ad731Slogwang  * Modified argument structure for IP_MULTICAST_IF, obtained from Linux.
517df6ad731Slogwang  * This is used to specify an interface index for multicast sends, as
518df6ad731Slogwang  * the IPv4 legacy APIs do not support this (unless IP_SENDIF is available).
519df6ad731Slogwang  */
520df6ad731Slogwang struct ip_mreqn {
521df6ad731Slogwang 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
522df6ad731Slogwang 	struct	in_addr imr_address;	/* local IP address of interface */
523df6ad731Slogwang 	int		imr_ifindex;	/* Interface index; cast to uint32_t */
524df6ad731Slogwang };
525df6ad731Slogwang 
526df6ad731Slogwang /*
527df6ad731Slogwang  * Argument structure for IPv4 Multicast Source Filter APIs. [RFC3678]
528df6ad731Slogwang  */
529df6ad731Slogwang struct ip_mreq_source {
530df6ad731Slogwang 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
531df6ad731Slogwang 	struct	in_addr imr_sourceaddr;	/* IP address of source */
532df6ad731Slogwang 	struct	in_addr imr_interface;	/* local IP address of interface */
533df6ad731Slogwang };
534df6ad731Slogwang 
535df6ad731Slogwang /*
536df6ad731Slogwang  * Argument structures for Protocol-Independent Multicast Source
537df6ad731Slogwang  * Filter APIs. [RFC3678]
538df6ad731Slogwang  */
539df6ad731Slogwang struct group_req {
540df6ad731Slogwang 	uint32_t		gr_interface;	/* interface index */
541df6ad731Slogwang 	struct sockaddr_storage	gr_group;	/* group address */
542df6ad731Slogwang };
543df6ad731Slogwang 
544df6ad731Slogwang struct group_source_req {
545df6ad731Slogwang 	uint32_t		gsr_interface;	/* interface index */
546df6ad731Slogwang 	struct sockaddr_storage	gsr_group;	/* group address */
547df6ad731Slogwang 	struct sockaddr_storage	gsr_source;	/* source address */
548df6ad731Slogwang };
549df6ad731Slogwang 
550df6ad731Slogwang #ifndef __MSFILTERREQ_DEFINED
551df6ad731Slogwang #define __MSFILTERREQ_DEFINED
552df6ad731Slogwang /*
553df6ad731Slogwang  * The following structure is private; do not use it from user applications.
554df6ad731Slogwang  * It is used to communicate IP_MSFILTER/IPV6_MSFILTER information between
555df6ad731Slogwang  * the RFC 3678 libc functions and the kernel.
556df6ad731Slogwang  */
557df6ad731Slogwang struct __msfilterreq {
558df6ad731Slogwang 	uint32_t		 msfr_ifindex;	/* interface index */
559df6ad731Slogwang 	uint32_t		 msfr_fmode;	/* filter mode for group */
560df6ad731Slogwang 	uint32_t		 msfr_nsrcs;	/* # of sources in msfr_srcs */
561df6ad731Slogwang 	struct sockaddr_storage	 msfr_group;	/* group address */
562df6ad731Slogwang 	struct sockaddr_storage	*msfr_srcs;	/* pointer to the first member
563df6ad731Slogwang 						 * of a contiguous array of
564df6ad731Slogwang 						 * sources to filter in full.
565df6ad731Slogwang 						 */
566df6ad731Slogwang };
567df6ad731Slogwang #endif
568df6ad731Slogwang 
569df6ad731Slogwang /*
570df6ad731Slogwang  * Filter modes; also used to represent per-socket filter mode internally.
571df6ad731Slogwang  */
572df6ad731Slogwang #define	MCAST_UNDEFINED	0	/* fmode: not yet defined */
573df6ad731Slogwang #define	MCAST_INCLUDE	1	/* fmode: include these source(s) */
574df6ad731Slogwang #define	MCAST_EXCLUDE	2	/* fmode: exclude these source(s) */
575df6ad731Slogwang 
576df6ad731Slogwang /*
577df6ad731Slogwang  * Argument for IP_PORTRANGE:
578df6ad731Slogwang  * - which range to search when port is unspecified at bind() or connect()
579df6ad731Slogwang  */
580df6ad731Slogwang #define	IP_PORTRANGE_DEFAULT	0	/* default range */
581df6ad731Slogwang #define	IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
582df6ad731Slogwang #define	IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
583df6ad731Slogwang 
584df6ad731Slogwang /*
585df6ad731Slogwang  * Identifiers for IP sysctl nodes
586df6ad731Slogwang  */
587df6ad731Slogwang #define	IPCTL_FORWARDING	1	/* act as router */
588df6ad731Slogwang #define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
589df6ad731Slogwang #define	IPCTL_DEFTTL		3	/* default TTL */
590df6ad731Slogwang #ifdef notyet
591df6ad731Slogwang #define	IPCTL_DEFMTU		4	/* default MTU */
592df6ad731Slogwang #endif
593df6ad731Slogwang /*	IPCTL_RTEXPIRE		5	deprecated */
594df6ad731Slogwang /*	IPCTL_RTMINEXPIRE	6	deprecated */
595df6ad731Slogwang /*	IPCTL_RTMAXCACHE	7	deprecated */
596df6ad731Slogwang #define	IPCTL_SOURCEROUTE	8	/* may perform source routes */
597df6ad731Slogwang #define	IPCTL_DIRECTEDBROADCAST	9	/* may re-broadcast received packets */
598df6ad731Slogwang #define	IPCTL_INTRQMAXLEN	10	/* max length of netisr queue */
599df6ad731Slogwang #define	IPCTL_INTRQDROPS	11	/* number of netisr q drops */
600df6ad731Slogwang #define	IPCTL_STATS		12	/* ipstat structure */
601df6ad731Slogwang #define	IPCTL_ACCEPTSOURCEROUTE	13	/* may accept source routed packets */
602df6ad731Slogwang #define	IPCTL_FASTFORWARDING	14	/* use fast IP forwarding code */
603df6ad731Slogwang 					/* 15, unused, was: IPCTL_KEEPFAITH  */
604df6ad731Slogwang #define	IPCTL_GIF_TTL		16	/* default TTL for gif encap packet */
605*d4a07e70Sfengbojiang #define	IPCTL_INTRDQMAXLEN	17	/* max length of direct netisr queue */
606*d4a07e70Sfengbojiang #define	IPCTL_INTRDQDROPS	18	/* number of direct netisr q drops */
607df6ad731Slogwang 
608df6ad731Slogwang #endif /* __BSD_VISIBLE */
609df6ad731Slogwang 
610df6ad731Slogwang /* INET6 stuff */
611df6ad731Slogwang #define	__KAME_NETINET_IN_H_INCLUDED_
612df6ad731Slogwang #include <netinet6/in6.h>
613df6ad731Slogwang #undef __KAME_NETINET_IN_H_INCLUDED_
614df6ad731Slogwang 
615df6ad731Slogwang #endif /* !_NETINET_IN_H_*/
616