svn commit: r345259 - stable/11/sys/netpfil/ipfw

[Andrey V. Elsukov]

Author: ae
Date: Mon Mar 18 09:31:23 2019
New Revision: 345259
URL: https://svnweb.freebsd.org/changeset/base/345259

Log:
  MFC r345004 (with modification):
    Add IP_FW_NAT64 to codes that ipfw_chk() can return.
  
    It will be used by upcoming NAT64 changes. We use separate code
    to avoid propogating EACCES error code to user level applications
    when NAT64 consumes a packet.
  
    Obtained from:	Yandex LLC
    Sponsored by:	Yandex LLC

Modified:
  stable/11/sys/netpfil/ipfw/ip_fw_pfil.c
  stable/11/sys/netpfil/ipfw/ip_fw_private.h
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netpfil/ipfw/ip_fw_pfil.c
==============================================================================
--- stable/11/sys/netpfil/ipfw/ip_fw_pfil.c	Mon Mar 18 09:28:53 2019	(r345258)
+++ stable/11/sys/netpfil/ipfw/ip_fw_pfil.c	Mon Mar 18 09:31:23 2019	(r345259)
@@ -288,6 +288,10 @@ again:
 	case IP_FW_REASS:
 		goto again;		/* continue with packet */
 	
+	case IP_FW_NAT64:
+		ret = 0;
+		break;
+
 	default:
 		KASSERT(0, ("%s: unknown retval", __func__));
 	}

Modified: stable/11/sys/netpfil/ipfw/ip_fw_private.h
==============================================================================
--- stable/11/sys/netpfil/ipfw/ip_fw_private.h	Mon Mar 18 09:28:53 2019	(r345258)
+++ stable/11/sys/netpfil/ipfw/ip_fw_private.h	Mon Mar 18 09:31:23 2019	(r345259)
@@ -59,6 +59,7 @@ enum {
 	IP_FW_NGTEE,
 	IP_FW_NAT,
 	IP_FW_REASS,
+	IP_FW_NAT64,
 };
 
 /*