Hi, this diff adds a sysctl to disable kernel icmp echo processing and pass it
to userland via raw sockets. I'm terrible with names but I chose userecho, so
net.inet.icmp.userecho.

I did some basic tests and it seems to work ok.

I kinda need this to tunnel ip over icmp echo.

Index: netinet/icmp_var.h
===================================================================
RCS file: /cvs/src/sys/netinet/icmp_var.h,v
retrieving revision 1.13
diff -d -u -p -w -r1.13 icmp_var.h
--- netinet/icmp_var.h  13 Dec 2007 20:00:53 -0000      1.13
+++ netinet/icmp_var.h  15 Jul 2011 22:47:17 -0000
@@ -65,7 +65,8 @@ struct        icmpstat {
 #define        ICMPCTL_REDIRTIMEOUT    5       /* Remove routes added via 
redirects */
 #define        ICMPCTL_TSTAMPREPL      6       /* allow replies to timestamp 
requests */
 #define ICMPCTL_STATS          7       /* ICMP statistics */
-#define ICMPCTL_MAXID          8
+#define ICMPCTL_USERECHO       8       /* ICMP echo requests in raw sockets */
+#define ICMPCTL_MAXID          9
 
 #define ICMPCTL_NAMES { \
        { 0, 0 }, \
@@ -75,7 +76,8 @@ struct        icmpstat {
        { "rediraccept", CTLTYPE_INT }, \
        { "redirtimeout", CTLTYPE_INT }, \
        { "tstamprepl", CTLTYPE_INT }, \
-       { "stats", CTLTYPE_STRUCT } \
+       { "stats", CTLTYPE_STRUCT }, \
+       { "userecho", CTLTYPE_INT } \
 }
 
 #define ICMPCTL_VARS { \
@@ -86,7 +88,8 @@ struct        icmpstat {
        &icmp_rediraccept, \
        NULL, \
        &icmptstamprepl, \
-       NULL \
+       NULL, \
+       &icmpuserecho, \
 }
 
 #ifdef _KERNEL
Index: netinet/ip_icmp.c
===================================================================
RCS file: /cvs/src/sys/netinet/ip_icmp.c,v
retrieving revision 1.94
diff -d -u -p -w -r1.94 ip_icmp.c
--- netinet/ip_icmp.c   6 Jul 2011 01:57:37 -0000       1.94
+++ netinet/ip_icmp.c   15 Jul 2011 22:47:17 -0000
@@ -106,6 +106,7 @@
  */
 
 int    icmpmaskrepl = 0;
+int    icmpuserecho = 0;
 int    icmpbmcastecho = 0;
 int    icmptstamprepl = 1;
 #ifdef ICMPPRINTFS
@@ -482,6 +483,8 @@ icmp_input(struct mbuf *m, ...)
                break;
 
        case ICMP_ECHO:
+               if (icmpuserecho)
+                       goto raw;
                if (!icmpbmcastecho &&
                    (m->m_flags & (M_MCAST | M_BCAST)) != 0) {
                        icmpstat.icps_bmcastecho++;

Reply via email to