patch-2.1.106 linux/net/ipv4/ip_output.c

• Lines: 37
• Date: Thu Jun 11 22:52:35 1998
• Orig file: v2.1.105/linux/net/ipv4/ip_output.c
• Orig date: Thu May 14 19:47:44 1998

diff -u --recursive --new-file v2.1.105/linux/net/ipv4/ip_output.c linux/net/ipv4/ip_output.c
@@ -5,7 +5,7 @@
  *
  *		The Internet Protocol (IP) output module.
  *
- * Version:	$Id: ip_output.c,v 1.57 1998/05/08 01:54:56 davem Exp $
+ * Version:	$Id: ip_output.c,v 1.58 1998/05/15 15:21:36 davem Exp $
  *
  * Authors:	Ross Biro, <bir7@leland.Stanford.Edu>
  *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
@@ -99,6 +99,7 @@
 {
 	struct rtable *rt = (struct rtable *)skb->dst;
 	struct iphdr *iph;
+	struct device *dev;
 	
 	/* Build the IP header. */
 	if (opt)
@@ -126,10 +127,19 @@
 		ip_options_build(skb, opt, daddr, rt, 0);
 	}
 
+	dev = rt->u.dst.dev;
+
+	if (call_out_firewall(PF_INET, dev, iph, NULL, &skb) < FW_ACCEPT)
+		goto drop;
+
 	ip_send_check(iph);
 
 	/* Send it out. */
 	skb->dst->output(skb);
+	return;
+
+drop:
+	kfree_skb(skb);
 }
 
 int __ip_finish_output(struct sk_buff *skb)