/*	$FreeBSD: src/sys/netinet6/in6.h,v 1.36.2.2 2005/10/09 05:21:18 ume Exp $	*/

/*	$KAME: in6.h,v 1.89 2001/05/27 13:28:35 itojun Exp $	*/

/*-

 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.

 * All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the above copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 * 3. Neither the name of the project nor the names of its contributors

 *    may be used to endorse or promote products derived from this software

 *    without specific prior written permission.

 *

 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

 */

/*-

 * Copyright (c) 1982, 1986, 1990, 1993

 *	The Regents of the University of California.  All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the above copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 * 4. Neither the name of the University nor the names of its contributors

 *    may be used to endorse or promote products derived from this software

 *    without specific prior written permission.

 *

 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

* © Portions copyright (c) 2007 Symbian Software Ltd. All rights reserved.

 *	@(#)in.h	8.3 (Berkeley) 1/3/94

 */

#ifndef __KAME_NETINET_IN_H_INCLUDED_

#error "do not include netinet6/in6.h directly, include netinet/in.h.  see RFC2553"

#endif

#ifndef _NETINET6_IN6_H_

#define _NETINET6_IN6_H_

/*

 * Identification of the network protocol stack

 * for *BSD-current/release: http://www.kame.net/dev/cvsweb.cgi/kame/COVERAGE

 * has the table of implementation/integration differences.

 */

#define __KAME__

#define __KAME_VERSION		"20010528/FreeBSD"

/*

 * Local port number conventions:

 *

 * Ports < IPPORT_RESERVED are reserved for privileged processes (e.g. root),

 * unless a kernel is compiled with IPNOPRIVPORTS defined.

 *

 * When a user does a bind(2) or connect(2) with a port number of zero,

 * a non-conflicting local port address is chosen.

 *

 * The default range is IPPORT_ANONMIN to IPPORT_ANONMAX, although

 * that is settable by sysctl(3); net.inet.ip.anonportmin and

 * net.inet.ip.anonportmax respectively.

 *

 * A user may set the IPPROTO_IP option IP_PORTRANGE to change this

 * default assignment range.

 *

 * The value IP_PORTRANGE_DEFAULT causes the default behavior.

 *

 * The value IP_PORTRANGE_HIGH is the same as IP_PORTRANGE_DEFAULT,

 * and exists only for FreeBSD compatibility purposes.

 *

 * The value IP_PORTRANGE_LOW changes the range to the "low" are

 * that is (by convention) restricted to privileged processes.

 * This convention is based on "vouchsafe" principles only.

 * It is only secure if you trust the remote host to restrict these ports.

 * The range is IPPORT_RESERVEDMIN to IPPORT_RESERVEDMAX.

 */

#if __BSD_VISIBLE

#define	IPV6PORT_RESERVED	1024

#define	IPV6PORT_ANONMIN	49152

#define	IPV6PORT_ANONMAX	65535

#define	IPV6PORT_RESERVEDMIN	600

#define	IPV6PORT_RESERVEDMAX	(IPV6PORT_RESERVED-1)

#endif

/*

 * IPv6 address

 */

struct in6_addr {

	union {

		uint8_t		__u6_addr8[16];

		uint16_t	__u6_addr16[8];

		uint32_t	__u6_addr32[4];

	} __u6_addr;			/* 128-bit IP6 address */

};

#define s6_addr   __u6_addr.__u6_addr8

#ifdef _KERNEL	/* XXX nonstandard */

#define s6_addr8  __u6_addr.__u6_addr8

#define s6_addr16 __u6_addr.__u6_addr16

#define s6_addr32 __u6_addr.__u6_addr32

#endif

#define INET6_ADDRSTRLEN	46

/*

 * XXX missing POSIX.1-2001 macro IPPROTO_IPV6.

 */

/*

 * Socket address for IPv6

 */

#if __BSD_VISIBLE

#define SIN6_LEN

#endif

#ifdef __SYMBIAN32__

struct sockaddr_in6 {

	u_short 	sin6_family;	/* AF_INET6 */

	u_short 	sin6_port;	/* Transport layer port # */

	struct in6_addr	sin6_addr;	/* IP6 address */

	uint32_t	sin6_flowinfo;	/* IP6 flow information */

	uint32_t	sin6_scope_id;	/* scope zone index */

	uint8_t		sin6_len;	/* length of this struct */

};

#else

struct sockaddr_in6 {

	uint8_t		sin6_len;	/* length of this struct */

	sa_family_t	sin6_family;	/* AF_INET6 */

	in_port_t	sin6_port;	/* Transport layer port # */

	uint32_t	sin6_flowinfo;	/* IP6 flow information */

	struct in6_addr	sin6_addr;	/* IP6 address */

	uint32_t	sin6_scope_id;	/* scope zone index */

};

#endif

/*

 * Local definition for masks

 */

#ifdef _KERNEL	/* XXX nonstandard */

#define IN6MASK0	{{{ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 }}}

#define IN6MASK32	{{{ 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, \

			    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }}}

#define IN6MASK64	{{{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, \

			    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }}}

#define IN6MASK96	{{{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, \

			    0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00 }}}

#define IN6MASK128	{{{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, \

			    0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }}}

#endif

#ifdef _KERNEL

extern const struct sockaddr_in6 sa6_any;

extern const struct in6_addr in6mask0;

extern const struct in6_addr in6mask32;

extern const struct in6_addr in6mask64;

extern const struct in6_addr in6mask96;

extern const struct in6_addr in6mask128;

#endif /* _KERNEL */

/*

 * Macros started with IPV6_ADDR is KAME local

 */

#ifdef _KERNEL	/* XXX nonstandard */

#if _BYTE_ORDER == _BIG_ENDIAN

#define IPV6_ADDR_INT32_ONE	1

#define IPV6_ADDR_INT32_TWO	2

#define IPV6_ADDR_INT32_MNL	0xff010000

#define IPV6_ADDR_INT32_MLL	0xff020000

#define IPV6_ADDR_INT32_SMP	0x0000ffff

#define IPV6_ADDR_INT16_ULL	0xfe80

#define IPV6_ADDR_INT16_USL	0xfec0

#define IPV6_ADDR_INT16_MLL	0xff02

#elif _BYTE_ORDER == _LITTLE_ENDIAN

#define IPV6_ADDR_INT32_ONE	0x01000000

#define IPV6_ADDR_INT32_TWO	0x02000000

#define IPV6_ADDR_INT32_MNL	0x000001ff

#define IPV6_ADDR_INT32_MLL	0x000002ff

#define IPV6_ADDR_INT32_SMP	0xffff0000

#define IPV6_ADDR_INT16_ULL	0x80fe

#define IPV6_ADDR_INT16_USL	0xc0fe

#define IPV6_ADDR_INT16_MLL	0x02ff

#endif

#endif

/*

 * Definition of some useful macros to handle IP6 addresses

 */

#if __BSD_VISIBLE

#define IN6ADDR_ANY_INIT \

	{{{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }}}

#define IN6ADDR_LOOPBACK_INIT \

	{{{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }}}

#define IN6ADDR_NODELOCAL_ALLNODES_INIT \

	{{{ 0xff, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }}}

#define IN6ADDR_INTFACELOCAL_ALLNODES_INIT \

	{{{ 0xff, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }}}

#define IN6ADDR_LINKLOCAL_ALLNODES_INIT \

	{{{ 0xff, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }}}

#define IN6ADDR_LINKLOCAL_ALLROUTERS_INIT \

	{{{ 0xff, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \

	    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 }}}

#endif

#ifndef __SYMBIAN32__

extern const struct in6_addr in6addr_any;

extern const struct in6_addr in6addr_loopback;

#if __BSD_VISIBLE

extern const struct in6_addr in6addr_nodelocal_allnodes;

extern const struct in6_addr in6addr_linklocal_allnodes;

extern const struct in6_addr in6addr_linklocal_allrouters;

#endif

#endif//__SYMBIAN32__

/*

 * Equality

 * NOTE: Some of kernel programming environment (for example, openbsd/sparc)

 * does not supply memcmp().  For userland memcmp() is preferred as it is

 * in ANSI standard.

 */

#ifdef _KERNEL

#define IN6_ARE_ADDR_EQUAL(a, b)			\

    (bcmp(&(a)->s6_addr[0], &(b)->s6_addr[0], sizeof(struct in6_addr)) == 0)

#else

#if __BSD_VISIBLE

#define IN6_ARE_ADDR_EQUAL(a, b)			\

    (memcmp(&(a)->s6_addr[0], &(b)->s6_addr[0], sizeof(struct in6_addr)) == 0)

#endif

#endif

#ifdef _KERNEL			/* non standard */

/* see if two addresses are equal in a scope-conscious manner. */

#define SA6_ARE_ADDR_EQUAL(a, b) \

	(((a)->sin6_scope_id == 0 || (b)->sin6_scope_id == 0 || \

	  ((a)->sin6_scope_id == (b)->sin6_scope_id)) && \

	 (bcmp(&(a)->sin6_addr, &(b)->sin6_addr, sizeof(struct in6_addr)) == 0))

#endif

/*

 * Unspecified

 */

#define IN6_IS_ADDR_UNSPECIFIED(a)	\

	((*(const u_int32_t *)(const void *)(&(a)->s6_addr[0]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[4]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[8]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[12]) == 0))

/*

 * Loopback

 */

#define IN6_IS_ADDR_LOOPBACK(a)		\

	((*(const u_int32_t *)(const void *)(&(a)->s6_addr[0]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[4]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[8]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[12]) == ntohl(1)))

/*

 * IPv4 compatible

 */

#define IN6_IS_ADDR_V4COMPAT(a)		\

	((*(const u_int32_t *)(const void *)(&(a)->s6_addr[0]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[4]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[8]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[12]) != 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[12]) != ntohl(1)))

/*

 * Mapped

 */

#define IN6_IS_ADDR_V4MAPPED(a)		      \

	((*(const u_int32_t *)(const void *)(&(a)->s6_addr[0]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[4]) == 0) &&	\

	 (*(const u_int32_t *)(const void *)(&(a)->s6_addr[8]) == ntohl(0x0000ffff)))

/*

 * KAME Scope Values

 */

#ifdef _KERNEL	/* XXX nonstandard */

#define IPV6_ADDR_SCOPE_NODELOCAL	0x01

#define IPV6_ADDR_SCOPE_INTFACELOCAL	0x01

#define IPV6_ADDR_SCOPE_LINKLOCAL	0x02

#define IPV6_ADDR_SCOPE_SITELOCAL	0x05

#define IPV6_ADDR_SCOPE_ORGLOCAL	0x08	/* just used in this file */

#define IPV6_ADDR_SCOPE_GLOBAL		0x0e

#else

#define __IPV6_ADDR_SCOPE_NODELOCAL	0x01

#define __IPV6_ADDR_SCOPE_INTFACELOCAL	0x01

#define __IPV6_ADDR_SCOPE_LINKLOCAL	0x02

#define __IPV6_ADDR_SCOPE_SITELOCAL	0x05

#define __IPV6_ADDR_SCOPE_ORGLOCAL	0x08	/* just used in this file */

#define __IPV6_ADDR_SCOPE_GLOBAL	0x0e

#endif

/*

 * Unicast Scope

 * Note that we must check topmost 10 bits only, not 16 bits (see RFC2373).

 */

#define IN6_IS_ADDR_LINKLOCAL(a)	\

	(((a)->s6_addr[0] == 0xfe) && (((a)->s6_addr[1] & 0xc0) == 0x80))

#define IN6_IS_ADDR_SITELOCAL(a)	\

	(((a)->s6_addr[0] == 0xfe) && (((a)->s6_addr[1] & 0xc0) == 0xc0))

/*

 * Multicast

 */

#define IN6_IS_ADDR_MULTICAST(a)	((a)->s6_addr[0] == 0xff)

#ifdef _KERNEL	/* XXX nonstandard */

#define IPV6_ADDR_MC_SCOPE(a)		((a)->s6_addr[1] & 0x0f)

#else

#define __IPV6_ADDR_MC_SCOPE(a)		((a)->s6_addr[1] & 0x0f)

#endif

/*

 * Multicast Scope

 */

#ifdef _KERNEL	/* refers nonstandard items */

#define IN6_IS_ADDR_MC_NODELOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_NODELOCAL))

#define IN6_IS_ADDR_MC_INTFACELOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_INTFACELOCAL))

#define IN6_IS_ADDR_MC_LINKLOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_LINKLOCAL))

#define IN6_IS_ADDR_MC_SITELOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) && 	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_SITELOCAL))

#define IN6_IS_ADDR_MC_ORGLOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_ORGLOCAL))

#define IN6_IS_ADDR_MC_GLOBAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (IPV6_ADDR_MC_SCOPE(a) == IPV6_ADDR_SCOPE_GLOBAL))

#else

#define IN6_IS_ADDR_MC_NODELOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (__IPV6_ADDR_MC_SCOPE(a) == __IPV6_ADDR_SCOPE_NODELOCAL))

#define IN6_IS_ADDR_MC_LINKLOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (__IPV6_ADDR_MC_SCOPE(a) == __IPV6_ADDR_SCOPE_LINKLOCAL))

#define IN6_IS_ADDR_MC_SITELOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) && 	\

	 (__IPV6_ADDR_MC_SCOPE(a) == __IPV6_ADDR_SCOPE_SITELOCAL))

#define IN6_IS_ADDR_MC_ORGLOCAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (__IPV6_ADDR_MC_SCOPE(a) == __IPV6_ADDR_SCOPE_ORGLOCAL))

#define IN6_IS_ADDR_MC_GLOBAL(a)	\

	(IN6_IS_ADDR_MULTICAST(a) &&	\

	 (__IPV6_ADDR_MC_SCOPE(a) == __IPV6_ADDR_SCOPE_GLOBAL))

#endif

#ifdef _KERNEL	/* nonstandard */

/*

 * KAME Scope

 */

#define IN6_IS_SCOPE_LINKLOCAL(a)	\

	((IN6_IS_ADDR_LINKLOCAL(a)) ||	\

	 (IN6_IS_ADDR_MC_LINKLOCAL(a)))

#define IFA6_IS_DEPRECATED(a) \

	((a)->ia6_lifetime.ia6t_preferred != 0 && \

	 (a)->ia6_lifetime.ia6t_preferred < time_second)

#define IFA6_IS_INVALID(a) \

	((a)->ia6_lifetime.ia6t_expire != 0 && \

	 (a)->ia6_lifetime.ia6t_expire < time_second)

#endif /* _KERNEL */

/*

 * IP6 route structure

 */

#if __BSD_VISIBLE

struct route_in6 {

	struct	rtentry *ro_rt;

	struct	sockaddr_in6 ro_dst;

};

#endif

/*

 * Options for use with [gs]etsockopt at the IPV6 level.

 * First word of comment is data type; bool is stored in int.

 */

/* no hdrincl */

#if 0 /* the followings are relic in IPv4 and hence are disabled */

#define IPV6_OPTIONS		1  /* buf/ip6_opts; set/get IP6 options */

#define IPV6_RECVOPTS		5  /* bool; receive all IP6 opts w/dgram */

#define IPV6_RECVRETOPTS	6  /* bool; receive IP6 opts for response */

#define IPV6_RECVDSTADDR	7  /* bool; receive IP6 dst addr w/dgram */

#define IPV6_RETOPTS		8  /* ip6_opts; set/get IP6 options */

#endif

#define IPV6_SOCKOPT_RESERVED1	3  /* reserved for future use */

#define IPV6_UNICAST_HOPS	4  /* int; IP6 hops */

#define IPV6_MULTICAST_IF	9  /* u_int; set/get IP6 multicast i/f  */

#define IPV6_MULTICAST_HOPS	10 /* int; set/get IP6 multicast hops */

#define IPV6_MULTICAST_LOOP	11 /* u_int; set/get IP6 multicast loopback */

#define IPV6_JOIN_GROUP		12 /* ip6_mreq; join a group membership */

#define IPV6_LEAVE_GROUP	13 /* ip6_mreq; leave a group membership */

#define IPV6_PORTRANGE		14 /* int; range to choose for unspec port */

#define ICMP6_FILTER		18 /* icmp6_filter; icmp6 filter */

/* RFC2292 options */

#ifdef _KERNEL

#define IPV6_2292PKTINFO	19 /* bool; send/recv if, src/dst addr */

#define IPV6_2292HOPLIMIT	20 /* bool; hop limit */

#define IPV6_2292NEXTHOP	21 /* bool; next hop addr */

#define IPV6_2292HOPOPTS	22 /* bool; hop-by-hop option */

#define IPV6_2292DSTOPTS	23 /* bool; destinaion option */

#define IPV6_2292RTHDR		24 /* bool; routing header */

#define IPV6_2292PKTOPTIONS	25 /* buf/cmsghdr; set/get IPv6 options */

#endif

#define IPV6_CHECKSUM		26 /* int; checksum offset for raw socket */

#define IPV6_V6ONLY		27 /* bool; make AF_INET6 sockets v6 only */

#ifndef _KERNEL

#define IPV6_BINDV6ONLY		IPV6_V6ONLY

#endif

#if 1 /* IPSEC */

#define IPV6_IPSEC_POLICY	28 /* struct; get/set security policy */

#endif

#define IPV6_FAITH		29 /* bool; accept FAITH'ed connections */

#if 1 /* IPV6FIREWALL */

#define IPV6_FW_ADD		30 /* add a firewall rule to chain */

#define IPV6_FW_DEL		31 /* delete a firewall rule from chain */

#define IPV6_FW_FLUSH		32 /* flush firewall rule chain */

#define IPV6_FW_ZERO		33 /* clear single/all firewall counter(s) */

#define IPV6_FW_GET		34 /* get entire firewall rule chain */

#endif

/* new socket options introduced in RFC3542 */

#define IPV6_RTHDRDSTOPTS	35 /* ip6_dest; send dst option before rthdr */

#define IPV6_RECVPKTINFO	36 /* bool; recv if, dst addr */

#define IPV6_RECVHOPLIMIT	37 /* bool; recv hop limit */

#define IPV6_RECVRTHDR		38 /* bool; recv routing header */

#define IPV6_RECVHOPOPTS	39 /* bool; recv hop-by-hop option */

#define IPV6_RECVDSTOPTS	40 /* bool; recv dst option after rthdr */

#ifdef _KERNEL

#define IPV6_RECVRTHDRDSTOPTS	41 /* bool; recv dst option before rthdr */

#endif

#define IPV6_USE_MIN_MTU	42 /* bool; send packets at the minimum MTU */

#define IPV6_RECVPATHMTU	43 /* bool; notify an according MTU */

#define IPV6_PATHMTU		44 /* mtuinfo; get the current path MTU (sopt),

				      4 bytes int; MTU notification (cmsg) */

#if 0 /*obsoleted during 2292bis -> 3542*/

#define IPV6_REACHCONF		45 /* no data; ND reachability confirm

				      (cmsg only/not in of RFC3542) */

#endif

/* more new socket options introduced in RFC3542 */

#define IPV6_PKTINFO		46 /* in6_pktinfo; send if, src addr */

#define IPV6_HOPLIMIT		47 /* int; send hop limit */

#define IPV6_NEXTHOP		48 /* sockaddr; next hop addr */

#define IPV6_HOPOPTS		49 /* ip6_hbh; send hop-by-hop option */

#define IPV6_DSTOPTS		50 /* ip6_dest; send dst option befor rthdr */

#define IPV6_RTHDR		51 /* ip6_rthdr; send routing header */

#if 0

#define IPV6_PKTOPTIONS		52 /* buf/cmsghdr; set/get IPv6 options */