1/* 2 * Copyright (c) 2002 Luigi Rizzo, Universita` di Pisa 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. --- 8 unchanged lines hidden (view full) --- 17 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23 * SUCH DAMAGE. 24 * |
25 * $FreeBSD: head/sys/netinet/ip_fw.h 135920 2004-09-29 04:54:33Z mlaier $ |
26 */ 27 28#ifndef _IPFW2_H 29#define _IPFW2_H 30#define IPFW2 1 31 32/* 33 * The kernel representation of ipfw rules is made of a list of --- 386 unchanged lines hidden (view full) --- 420 struct sockaddr_in *next_hop; /* forward address */ 421 struct ip_fw *rule; /* matching rule */ 422 struct ether_header *eh; /* for bridged packets */ 423 424 int flags; /* for dummynet */ 425 426 struct ipfw_flow_id f_id; /* grabbed from IP header */ 427 u_int32_t retval; |
428 struct inpcb *inp; |
429}; 430 431/* 432 * Function definitions. 433 */ 434 435/* Firewall hooks */ 436struct sockopt; 437struct dn_flow_set; 438 |
439int ipfw_check_in(void *, struct mbuf **, struct ifnet *, int, struct inpcb *inp); 440int ipfw_check_out(void *, struct mbuf **, struct ifnet *, int, struct inpcb *inp); |
441 442int ipfw_chk(struct ip_fw_args *); 443 444int ipfw_init(void); 445void ipfw_destroy(void); 446 447void flush_pipe_ptrs(struct dn_flow_set *match); /* used by dummynet */ 448 --- 12 unchanged lines hidden --- |