bsd/net/pf.c

812 	if ((diff = a->proto - b->proto) != 0)
819 	switch (a->proto) {
941 	if ((diff = a->proto - b->proto) != 0)
949 	switch (a->proto) {
1374 		switch (sk->proto) {
1388 			printf("PROTO=%u", sk->proto);
1392 		pf_print_sk_host(&sk->lan, sk->af, sk->proto,
1395 		pf_print_sk_host(&sk->gwy, sk->af, sk->proto,
1398 		pf_print_sk_host(&sk->ext, sk->af, sk->proto,
1823 pf_print_sk_host(struct pf_state_host *sh, sa_family_t af, int proto,
1828 	switch (proto) {
1861 	switch (sk->proto) {
1881 		printf("%u ", sk->proto);
1884 	pf_print_sk_host(&sk->lan, sk->af, sk->proto, sk->proto_variant);
1886 	pf_print_sk_host(&sk->gwy, sk->af, sk->proto, sk->proto_variant);
1888 	pf_print_sk_host(&sk->ext, sk->af, sk->proto, sk->proto_variant);
1951 		if (cur->proto != prev->proto)
1960 			switch (cur->proto) {
1966 				if (prev->proto == IPPROTO_GRE ||
1967 				    prev->proto == IPPROTO_ESP ||
1982 			switch (cur->proto) {
1984 				if (cur->proto != prev->proto ||
1989 				if (cur->proto != prev->proto ||
1994 				if (prev->proto == IPPROTO_GRE ||
1995 				    prev->proto == IPPROTO_ESP ||
2032 	fh.proto = sk->proto;
2709 pf_match_xport(u_int8_t proto, u_int8_t proto_variant, union pf_rule_xport *rx,
2715 		switch (proto) {
3178 	u_int8_t proto = pd->proto;
3186 	if (proto == IPPROTO_ICMP) {
3195 	if (proto == IPPROTO_UDP) {
3213 				if (sk->proto != IPPROTO_UDP || sk->af != af)
3227 	} else if (proto == IPPROTO_TCP) {
3240 			if (sk->proto != IPPROTO_TCP || sk->af != af)
3252 		key.proto = proto;
3255 		switch (proto) {
3271 		if (!(proto == IPPROTO_TCP || proto == IPPROTO_UDP ||
3272 		    proto == IPPROTO_ICMP)) {
3379 		else if (r->proto && r->proto != pd->proto)
3387 		    !pf_match_xport(r->proto, r->proto_variant, &rdrxport,
3390 		else if (!xsrc && !pf_match_xport(r->proto,
3400 		else if (dst && !pf_match_xport(r->proto, r->proto_variant,
3405 		else if (r->os_fingerprint != PF_OSFP_ANY && (pd->proto !=
3653 	switch (pd->proto) {
3962 		sk->proto = psk->proto;
4042 	switch (pd->proto) {
4109 			switch (pd->proto) {
4207 			switch (pd->proto) {
4308 		else if (r->proto && r->proto != pd->proto)
4314 		else if (r->proto == pd->proto &&
4315 		    (r->proto == IPPROTO_TCP || r->proto == IPPROTO_UDP) &&
4325 		else if (r->proto == pd->proto &&
4326 		    (r->proto == IPPROTO_TCP || r->proto == IPPROTO_UDP) &&
4349 		else if (pd->proto == IPPROTO_TCP &&
4369 		    (pd->proto != IPPROTO_TCP || !pf_osfp_match(
4424 				switch (pd->proto) {
4497 				switch (pd->proto) {
4574 		if (pd->proto == IPPROTO_TCP &&
4611 		} else if (pd->proto != IPPROTO_ICMP && af == AF_INET &&
4612 		    pd->proto != IPPROTO_ESP && pd->proto != IPPROTO_AH &&
4616 		else if (pd->proto != IPPROTO_ICMPV6 && af == AF_INET6 &&
4617 		    pd->proto != IPPROTO_ESP && pd->proto != IPPROTO_AH &&
4628 	psk.proto = pd->proto;
4631 	if (pd->proto == IPPROTO_UDP) {
4640 	} else if (pd->proto == IPPROTO_GRE) {
4646 		switch (pd->proto) {
4677 		switch (pd->proto) {
4723 		if (pd->proto == IPPROTO_UDP) {
4736 		if (nr != NULL && pd->proto == IPPROTO_ESP &&
4750 			sk0.proto = IPPROTO_ESP;
4819 		switch (pd->proto) {
4896 		if (pd->proto == IPPROTO_TCP) {
4932 			switch (pd->proto) {
4992 			if (pd->proto == IPPROTO_TCP)
5005 		if (pd->proto == IPPROTO_TCP &&
5040 			switch (pd->proto) {
5126 		switch (pd->proto) {
5175 		else if (r->proto && r->proto != pd->proto)
5181 		else if (r->proto == pd->proto &&
5182 		    (r->proto == IPPROTO_TCP || r->proto == IPPROTO_UDP) &&
5193 		else if (r->proto == pd->proto &&
5194 		    (r->proto == IPPROTO_TCP || r->proto == IPPROTO_UDP) &&
5215 		else if (pd->proto == IPPROTO_TCP &&
5286 		dnflow.fwa_id.proto = pd->proto;
5372 		else if (r->proto && r->proto != pd->proto)
5391 		else if (pd->proto == IPPROTO_UDP &&
5394 		else if (pd->proto == IPPROTO_TCP &&
5398 		else if ((pd->proto == IPPROTO_ICMP ||
5399 		    pd->proto == IPPROTO_ICMPV6) &&
5523 		gsk->proto = IPPROTO_GRE;
5647 			key.proto = IPPROTO_GRE;
5806 	key.proto = IPPROTO_TCP;
6327 	key.proto = IPPROTO_UDP;
6471 	switch (pd->proto) {
6508 		key.proto = pd->proto;
6650 			pd2.proto = h2.ip_p;
6667 			pd2.proto = h2_6.ip6_nxt;
6673 				switch (pd2.proto) {
6695 					if (pd2.proto == IPPROTO_AH)
6699 					pd2.proto = opt6.ip6e_nxt;
6712 		switch (pd2.proto) {
6734 			key.proto = IPPROTO_TCP;
6845 			key.proto = IPPROTO_UDP;
6964 			key.proto = IPPROTO_ICMP;
7018 			key.proto = IPPROTO_ICMPV6;
7064 			key.proto = pd2.proto;
7136 	key.proto = IPPROTO_GRE;
7238 	key.proto = IPPROTO_ESP;
7392 	key.proto = pd->proto;
8103 	pd.proto = h->ip_p;
8148 	pd.proto = h->ip_p;
8443 		if (pd.proto == IPPROTO_TCP)
8454 	if (dir == PF_IN && action == PF_PASS && (pd.proto == IPPROTO_TCP ||
8455 	    pd.proto == IPPROTO_UDP) && s != NULL && s->nat_rule.ptr != NULL &&
8641 	pd.proto = nxt;
8701 	pd.proto = h->ip6_nxt;
8722 			pd.proto = nxt = ip6f.ip6f_nxt;
8757 			if (pd.proto == IPPROTO_AH)
8775 	switch (pd.proto) {
9042 		if (pd.proto == IPPROTO_TCP)
9048 	if (dir == PF_IN && action == PF_PASS && (pd.proto == IPPROTO_TCP ||
9049 	    pd.proto == IPPROTO_UDP) && s != NULL && s->nat_rule.ptr != NULL &&