bsd/net/pf.c

11  * unlawful or unlicensed copies of an Apple operating system, or to
13  * terms of an Apple operating system software license agreement.
19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
2082     u_int16_t *ic, u_int16_t *pc, struct pf_addr *an, u_int16_t pn,
2089 	PF_ACPY(a, an, af);
2097 		    ao.addr16[0], an->addr16[0], 0),
2098 		    ao.addr16[1], an->addr16[1], 0);
2101 		 * If the packet is originated from an ALG on the NAT gateway
2111 			    ao.addr16[0], an->addr16[0], u),
2112 			    ao.addr16[1], an->addr16[1], u);
2115 			    ao.addr16[0], an->addr16[0], u),
2116 			    ao.addr16[1], an->addr16[1], u),
2124 		 * If the packet is originated from an ALG on the NAT gateway
2136 		    		ao.addr16[0], an->addr16[0], u),
2137 		    		ao.addr16[1], an->addr16[1], u),
2138 		    		ao.addr16[2], an->addr16[2], u),
2139 		    		ao.addr16[3], an->addr16[3], u),
2140 		    		ao.addr16[4], an->addr16[4], u),
2141 		    		ao.addr16[5], an->addr16[5], u),
2142 		    		ao.addr16[6], an->addr16[6], u),
2143 		    		ao.addr16[7], an->addr16[7], u),
2149 		    		ao.addr16[0], an->addr16[0], u),
2150 		    		ao.addr16[1], an->addr16[1], u),
2151 		    		ao.addr16[2], an->addr16[2], u),
2152 		    		ao.addr16[3], an->addr16[3], u),
2153 		    		ao.addr16[4], an->addr16[4], u),
2154 		    		ao.addr16[5], an->addr16[5], u),
2155 		    		ao.addr16[6], an->addr16[6], u),
2156 		    		ao.addr16[7], an->addr16[7], u),
2167 pf_change_a(void *a, u_int16_t *c, u_int32_t an, u_int8_t u)
2172 	memcpy(a, &an, sizeof (u_int32_t));
2173 	*c = pf_cksum_fixup(pf_cksum_fixup(*c, ao / 65536, an / 65536, u),
2174 	    ao % 65536, an % 65536, u);
2179 pf_change_a6(struct pf_addr *a, u_int16_t *c, struct pf_addr *an, u_int8_t u)
2184 	PF_ACPY(a, an, AF_INET6);
2189 	    ao.addr16[0], an->addr16[0], u),
2190 	    ao.addr16[1], an->addr16[1], u),
2191 	    ao.addr16[2], an->addr16[2], u),
2192 	    ao.addr16[3], an->addr16[3], u),
2193 	    ao.addr16[4], an->addr16[4], u),
2194 	    ao.addr16[5], an->addr16[5], u),
2195 	    ao.addr16[6], an->addr16[6], u),
2196 	    ao.addr16[7], an->addr16[7], u);
4744 			 * address matches an existing incomplete state with a
6050 		 * Many stacks (ours included) will set the ACK number in an
6088 #define MAXACKWINDOW (0xffff + 1500)	/* 1500 is an arbitrary fudge factor */
6100 	    /* Require an exact/+1 sequence match on resets when possible */
6172 		 *  2) When PF catches an already established stream (the
6221 		 * SYN and not an already established connection.
6505 		 * Search for an ICMP state.
6723 			 * th_seq, an ackskew test is not possible.
7920 	 * send back an icmp6 error.