bsd/net/pf.c

524 	u_int8_t	reason;
531 	u_int8_t	reason;
4016 	u_short			 reason;
4033 		REASON_SET(&reason, PFRES_CONGEST);
4398 	REASON_SET(&reason, PFRES_MATCH);
4407 				REASON_SET(&reason, PFRES_MEMORY);
4413 		PFLOG_PACKET(kif, h, m, af, direction, reason, r->log ? r : nr,
4600 				REASON_SET(&reason, PFRES_PROTCKSUM);
4711 		REASON_SET(&reason, PFRES_MEMORY);
4765 			REASON_SET(&reason, PFRES_MAXSTATES);
4772 			REASON_SET(&reason, PFRES_SRCLIMIT);
4781 			REASON_SET(&reason, PFRES_SRCLIMIT);
4786 			REASON_SET(&reason, PFRES_MEMORY);
4900 				REASON_SET(&reason, PFRES_MEMORY);
4907 			    pf_normalize_tcp_stateful(m, off, pd, &reason,
4923 			REASON_SET(&reason, PFRES_MEMORY);
4944 						REASON_SET(&reason,
4972 						REASON_SET(&reason,
4994 			REASON_SET(&reason, PFRES_STATEINS);
5033 			REASON_SET(&reason, PFRES_SYNPROXY);
5056 					REASON_SET(&reason, PFRES_MEMORY);
5071 			REASON_SET(&reason, PFRES_MEMORY);
5101 	u_short			 reason;
5257 	REASON_SET(&reason, PFRES_DUMMYNET);
5260 		PFLOG_PACKET(kif, h, m, af, direction, reason, r,
5273 		REASON_SET(&reason, PFRES_MEMORY);
5358 	u_short			 reason;
5427 	REASON_SET(&reason, PFRES_MATCH);
5430 		PFLOG_PACKET(kif, h, m, af, direction, reason, r, a, ruleset,
5437 		REASON_SET(&reason, PFRES_MEMORY);
5792     u_short *reason)
5831 			REASON_SET(reason, PFRES_SYNPROXY);
5836 				REASON_SET(reason, PFRES_SYNPROXY);
5844 			REASON_SET(reason, PFRES_SYNPROXY);
5849 			REASON_SET(reason, PFRES_SYNPROXY);
5853 			REASON_SET(reason, PFRES_SRCLIMIT);
5872 				REASON_SET(reason, PFRES_SYNPROXY);
5882 			REASON_SET(reason, PFRES_SYNPROXY);
5887 			REASON_SET(reason, PFRES_SYNPROXY);
5913 			REASON_SET(reason, PFRES_SYNPROXY);
5953 				REASON_SET(reason, PFRES_MEMORY);
6080 			REASON_SET(reason, PFRES_MEMORY);
6103 			if (pf_normalize_tcp_stateful(m, off, pd, reason, th,
6133 					REASON_SET(reason, PFRES_SRCLIMIT);
6203 			if (pf_normalize_tcp_stateful(m, off, pd, reason, th,
6267 		REASON_SET(reason, PFRES_BADSTATE);
6278 			REASON_SET(reason, PFRES_MEMORY);
6302 			REASON_SET(reason, PFRES_MEMORY);
6315     struct mbuf *m, int off, void *h, struct pf_pdesc *pd, u_short *reason)
6427 			REASON_SET(reason, PFRES_MEMORY);
6437 			REASON_SET(reason, PFRES_MEMORY);
6459     struct mbuf *m, int off, void *h, struct pf_pdesc *pd, u_short *reason)
6632 			    NULL, reason, pd2.af)) {
6643 				REASON_SET(reason, PFRES_FRAG);
6661 			    NULL, reason, pd2.af)) {
6679 					REASON_SET(reason, PFRES_FRAG);
6689 					    sizeof (opt6), NULL, reason,
6725 			if (!pf_pull_hdr(m, off2, &th, 8, NULL, reason,
6783 				REASON_SET(reason, PFRES_BADSTATE);
6837 			    NULL, reason, pd2.af)) {
6956 			    NULL, reason, pd2.af)) {
7010 			    sizeof (struct icmp6_hdr), NULL, reason, pd2.af)) {
8053 	u_short			 action = PF_PASS, reason = 0, log = 0;
8112 		REASON_SET(&reason, PFRES_SHORT);
8123 	action = pf_normalize_ip(m0, dir, kif, &reason, &pd);
8139 		REASON_SET(&reason, PFRES_SHORT);
8186 		    &action, &reason, AF_INET)) {
8208 		    &reason);
8230 		    &action, &reason, AF_INET)) {
8238 			REASON_SET(&reason, PFRES_SHORT);
8250 		    &reason);
8272 		    &action, &reason, AF_INET)) {
8285 		    &reason);
8306 		if (!pf_pull_hdr(m, off, &esp, sizeof (esp), &action, &reason,
8340 		    &reason, AF_INET)) {
8357 				REASON_SET(&reason, PFRES_SHORT);
8416 		REASON_SET(&reason, PFRES_IPOPTIONS);
8469 		PFLOG_PACKET(kif, h, m, AF_INET, dir, reason, lr, a, ruleset,
8543 			REASON_SET(&reason, PFRES_MEMORY);
8587 	u_short			 action = PF_PASS, reason = 0, log = 0;
8656 		REASON_SET(&reason, PFRES_SHORT);
8667 	action = pf_normalize_ip6(m0, dir, kif, &reason, &pd);
8686 		REASON_SET(&reason, PFRES_NORM);	/*XXX*/
8714 			    &reason, pd.af)) {
8718 				REASON_SET(&reason, PFRES_SHORT);
8734 				REASON_SET(&reason, PFRES_FRAG);
8750 			    NULL, &reason, pd.af)) {
8782 		    &action, &reason, AF_INET6)) {
8802 		    &reason);
8824 		    &action, &reason, AF_INET6)) {
8832 			REASON_SET(&reason, PFRES_SHORT);
8844 		    &reason);
8866 		    &action, &reason, AF_INET6)) {
8879 		    m, off, h, &pd, &reason);
8900 		if (!pf_pull_hdr(m, off, &esp, sizeof (esp), &action, &reason,
8935 		    &reason, AF_INET6)) {
8952 				REASON_SET(&reason, PFRES_SHORT);
9017 		REASON_SET(&reason, PFRES_IPOPTIONS);
9063 		PFLOG_PACKET(kif, h, m, AF_INET6, dir, reason, lr, a, ruleset,
9145 			REASON_SET(&reason, PFRES_MEMORY);