diff options
| author | Henning Brauer <henning@cvs.openbsd.org> | 2003-12-26 15:42:15 +0000 |
|---|---|---|
| committer | Henning Brauer <henning@cvs.openbsd.org> | 2003-12-26 15:42:15 +0000 |
| commit | d2668c4f417ed6351faad27bf85c1c4b406427b8 (patch) | |
| tree | 7febe8e5889701f1537014a67295af6256381bee | |
| parent | d90cfecaccfc625c502b9ad0416c5a5aac40c17b (diff) | |
127/8 is special, and thus needs special protection.
on startup, insert a fake route for it to our private view of the kernel
routing table, and flag it as kernel and connected route.
we never allow a bgp route to overwrite a kernel route.
prodded by theo
| -rw-r--r-- | usr.sbin/bgpd/kroute.c | 23 |
1 files changed, 21 insertions, 2 deletions
diff --git a/usr.sbin/bgpd/kroute.c b/usr.sbin/bgpd/kroute.c index 3c1780f74d0..18dae13ff9d 100644 --- a/usr.sbin/bgpd/kroute.c +++ b/usr.sbin/bgpd/kroute.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kroute.c,v 1.28 2003/12/26 15:27:31 henning Exp $ */ +/* $OpenBSD: kroute.c,v 1.29 2003/12/26 15:42:14 henning Exp $ */ /* * Copyright (c) 2003 Henning Brauer <henning@openbsd.org> @@ -46,6 +46,7 @@ struct knexthop_node { struct kroute_node *kroute; }; +void kroute_protect_lo(void); int kroute_msg(int, int, struct kroute *); int kroute_compare(struct kroute_node *, struct kroute_node *); void get_rtaddrs(int, struct sockaddr *, struct sockaddr **); @@ -78,7 +79,7 @@ pid_t pid; int kroute_init(void) { - int s, opt; + int s, opt; if ((s = socket(AF_ROUTE, SOCK_RAW, 0)) < 0) fatal("route socket", errno); @@ -92,10 +93,28 @@ kroute_init(void) RB_INIT(&krt); RB_INIT(&knt); kroute_fetchtable(); + kroute_protect_lo(); return (s); } +void +kroute_protect_lo(void) +{ + struct kroute_node *kr; + + /* special protection for 127/8 */ + if ((kr = calloc(1, sizeof(struct kroute_node))) == NULL) + fatal(NULL, errno); + kr->r.prefix = inet_addr("127.0.0.1"); + kr->r.prefixlen = 8; + kr->r.nexthop = 0; + kr->flags = F_KERNEL|F_CONNECTED; + + if (RB_INSERT(kroute_tree, &krt, kr) != NULL) + free(kr); /* kernel route already there, no problem */ +} + int kroute_msg(int fd, int action, struct kroute *kroute) { |