bsd/net/pf.c

1110 pf_find_state(struct pfi_kif *kif, struct pf_state_key_cmp *key, u_int dir)
1117 	switch (dir) {
1140 pf_find_state_all(struct pf_state_key_cmp *key, u_int dir, int *more)
1147 	switch (dir) {
2081 pf_change_ap(int dir, struct mbuf *m, struct pf_addr *a, u_int16_t *p,
2106 		if (dir == PF_OUT && m != NULL &&
2129 		if (dir == PF_OUT && m != NULL &&
6194 			    "pkts=%llu:%llu dir=%s,%s\n", seq, orig_seq, ack,
6251 			    "pkts=%llu:%llu dir=%s,%s\n",
7611 pf_route(struct mbuf **m, struct pf_rule *r, int dir, struct ifnet *oifp,
7627 	    (dir != PF_IN && dir != PF_OUT) || oifp == NULL)
7640 		if ((r->rt == PF_REPLYTO) == (r->direction == dir))
7826 pf_route6(struct mbuf **m, struct pf_rule *r, int dir, struct ifnet *oifp,
7841 	    (dir != PF_IN && dir != PF_OUT) || oifp == NULL)
7854 		if ((r->rt == PF_REPLYTO) == (r->direction == dir))
8046 pf_test(int dir, struct ifnet *ifp, struct mbuf **m0,
8101 	PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET);
8123 	action = pf_normalize_ip(m0, dir, kif, &reason, &pd);
8146 	PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET);
8169 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8175 		action = pf_test_fragment(&r, dir, kif, m, h,
8195 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8201 		action = pf_normalize_tcp(dir, kif, m, 0, off, h, &pd);
8207 		action = pf_test_state_tcp(&s, dir, kif, m, off, h, &pd,
8220 			action = pf_test_rule(&r, &s, dir, kif,
8243 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8249 		action = pf_test_state_udp(&s, dir, kif, m, off, h, &pd,
8262 			action = pf_test_rule(&r, &s, dir, kif,
8278 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8284 		action = pf_test_state_icmp(&s, dir, kif, m, off, h, &pd,
8297 			action = pf_test_rule(&r, &s, dir, kif,
8313 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8319 		action = pf_test_state_esp(&s, dir, kif, off, &pd);
8331 			action = pf_test_rule(&r, &s, dir, kif,
8346 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8361 			action = pf_test_state_grev1(&s, dir, kif, off, &pd);
8373 				action = pf_test_rule(&r, &s, dir, kif, m, off,
8386 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8392 		action = pf_test_state_other(&s, dir, kif, &pd);
8404 			action = pf_test_rule(&r, &s, dir, kif, m, off, h,
8454 	if (dir == PF_IN && action == PF_PASS && (pd.proto == IPPROTO_TCP ||
8469 		PFLOG_PACKET(kif, h, m, AF_INET, dir, reason, lr, a, ruleset,
8473 	kif->pfik_bytes[0][dir == PF_OUT][action != PF_PASS] += pd.tot_len;
8474 	kif->pfik_packets[0][dir == PF_OUT][action != PF_PASS]++;
8477 		dirndx = (dir == PF_OUT);
8498 			dirndx = (dir == sk->direction) ? 0 : 1;
8513 				x = (sk == NULL || sk->direction == dir) ?
8516 				x = (sk == NULL || sk->direction == dir) ?
8520 				if (dir == PF_OUT)
8528 			    sk->direction == dir) ?
8530 			    pd.tot_len, dir == PF_OUT, r->action == PF_PASS,
8534 			    sk->direction == dir) ? pd.dst : pd.src, pd.af,
8535 			    pd.tot_len, dir == PF_OUT, r->action == PF_PASS,
8562 		pf_route(m0, r, dir, kif->pfik_ifp, s, &pd);
8580 pf_test6(int dir, struct ifnet *ifp, struct mbuf **m0,
8638 	PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET6);
8667 	action = pf_normalize_ip6(m0, dir, kif, &reason, &pd);
8693 	PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET6);
8725 			action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8731 			action = pf_test_fragment(&r, dir, kif, m, h, &pd, &a,
8789 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8795 		action = pf_normalize_tcp(dir, kif, m, 0, off, h, &pd);
8801 		action = pf_test_state_tcp(&s, dir, kif, m, off, h, &pd,
8814 			action = pf_test_rule(&r, &s, dir, kif,
8837 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8843 		action = pf_test_state_udp(&s, dir, kif, m, off, h, &pd,
8856 			action = pf_test_rule(&r, &s, dir, kif,
8872 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8878 		action = pf_test_state_icmp(&s, dir, kif,
8891 			action = pf_test_rule(&r, &s, dir, kif,
8907 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8913 		action = pf_test_state_esp(&s, dir, kif, off, &pd);
8925 			action = pf_test_rule(&r, &s, dir, kif,
8941 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8955 			action = pf_test_state_grev1(&s, dir, kif, off, &pd);
8968 				action = pf_test_rule(&r, &s, dir, kif, m, off,
8981 		action = pf_test_dummynet(&r, dir, kif, &m, &pd, fwa);
8987 		action = pf_test_state_other(&s, dir, kif, &pd);
8999 			action = pf_test_rule(&r, &s, dir, kif, m, off, h,
9048 	if (dir == PF_IN && action == PF_PASS && (pd.proto == IPPROTO_TCP ||
9063 		PFLOG_PACKET(kif, h, m, AF_INET6, dir, reason, lr, a, ruleset,
9067 	kif->pfik_bytes[1][dir == PF_OUT][action != PF_PASS] += pd.tot_len;
9068 	kif->pfik_packets[1][dir == PF_OUT][action != PF_PASS]++;
9071 		dirndx = (dir == PF_OUT);
9092 			dirndx = (dir == sk->direction) ? 0 : 1;
9107 				x = (s == NULL || sk->direction == dir) ?
9110 				x = (s == NULL || sk->direction == dir) ?
9114 				if (dir == PF_OUT)
9122 			    sk->direction == dir) ? pd.src : pd.dst, pd.af,
9123 			    pd.tot_len, dir == PF_OUT, r->action == PF_PASS,
9127 			    sk->direction == dir) ? pd.dst : pd.src, pd.af,
9128 			    pd.tot_len, dir == PF_OUT, r->action == PF_PASS,
9139 		pf_route6(m0, r, dir, kif->pfik_ifp, s, &pd);
9169 		pf_route6(m0, r, dir, kif->pfik_ifp, s, &pd);