1/* $OpenBSD: filter.c,v 1.1 2005/12/28 19:07:07 jcs Exp $ */
2
3/*
4 * Copyright (c) 2004, 2005 Camiel Dobbelaar, <cd@sentia.nl>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *

--- 282 unchanged lines hidden (view full) ---

292 * pass quick [log] inet[6] proto tcp \
293 * from $src to $dst port = $d_port flags S/SAFR keep state
294 * (max 1) [queue qname]
295 */
296 pfr.rule.action = PF_PASS;
297 pfr.rule.quick = 1;
298 pfr.rule.log = rule_log;
299 pfr.rule.keep_state = 1;
300 pfr.rule.flags = (proto == IPPROTO_TCP ? TH_SYN : NULL);
301 pfr.rule.flagset = (proto == IPPROTO_TCP ?
302 (TH_SYN|TH_ACK|TH_FIN|TH_RST) : NULL);
303 pfr.rule.max_states = 1;
304 if (qname != NULL)
305 strlcpy(pfr.rule.qname, qname, sizeof pfr.rule.qname);
306 break;
307 case PF_RULESET_NAT:
308 /*
309 * nat inet[6] proto tcp from $src to $dst port $d_port -> $nat
310 */

--- 87 unchanged lines hidden ---