bsd/netinet/ip_fw2.c

94 #include <netinet/ip_fw.h>
150 static struct ip_fw *layer3_chain;
178     &fw_debug, 0, "Enable printing of debug ip_fw statements");
322 							((struct ip_fw *)(rule))->cmd_len * 4 - 4)
325 							((struct ip_fw *)(rule))->cmd_len * 4 - 4)
400 	struct ip_fw *rule;
424 	struct ip_fw *rule;
444 copyto32fw_insn( struct ip_fw_32 *fw32 , struct ip_fw *user_ip_fw, int cmdsize)
478 copyto64fw_insn( struct ip_fw_64 *fw64 , struct ip_fw *user_ip_fw, int cmdsize)
512 copyto32fw( struct ip_fw *user_ip_fw, struct ip_fw_32 *fw32 , __unused size_t copysize)
537 copyto64fw( struct ip_fw *user_ip_fw, struct ip_fw_64	*fw64, size_t copysize)
565 copyfrom32fw_insn( struct ip_fw_32 *fw32 , struct ip_fw *user_ip_fw, int cmdsize)
602 copyfrom64fw_insn( struct ip_fw_64 *fw64 , struct ip_fw *user_ip_fw, int cmdsize)
638 copyfrom32fw( struct ip_fw_32	*fw32, struct ip_fw *user_ip_fw, size_t copysize)
644 	user_ip_fw->next = CAST_DOWN(struct ip_fw*, fw32->next);
645 	user_ip_fw->next_rule = CAST_DOWN_EXPLICIT(struct ip_fw*, fw32->next_rule);
663 	return( sizeof(struct ip_fw) + cmdsize - 4);
667 copyfrom64fw( struct ip_fw_64 *fw64, struct ip_fw *user_ip_fw, size_t copysize)
673 	user_ip_fw->next = CAST_DOWN_EXPLICIT(struct ip_fw*, fw64->next);
674 	user_ip_fw->next_rule = CAST_DOWN_EXPLICIT(struct ip_fw*, fw64->next_rule);
693 	return( sizeof(struct ip_fw) + cmdsize - 4);
779 sooptcopyin_fw( struct sockopt *sopt, struct ip_fw *user_ip_fw, size_t *size )
1058 ipfw_log(struct ip_fw *f, u_int hlen, struct ether_header *eh,
1301 remove_dyn_rule(struct ip_fw *rule, ipfw_dyn_rule *keep_me)
1543 add_dyn_rule(struct ip_flow_id *id, u_int8_t dyn_type, struct ip_fw *rule)
1601 lookup_dyn_parent(struct ip_flow_id *pkt, struct ip_fw *rule)
1634 install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
1717 		add_dyn_rule(&args->fwa_id, O_LIMIT, (struct ip_fw *)parent);
1852  * Given an ip_fw *, lookup_next_rule will return a pointer
1865 static struct ip_fw *
1866 lookup_next_rule(struct ip_fw *me)
1868 	struct ip_fw *rule = NULL;
1956 	struct ip_fw *f = NULL;		/* matching rule */
2715 	struct ip_fw *rule;
2729 	struct ip_fw *rule;
2754 add_rule(struct ip_fw **head, struct ip_fw *input_rule)
2756 	struct ip_fw *rule, *f, *prev;
2840 static struct ip_fw *
2841 delete_rule(struct ip_fw **head, struct ip_fw *prev, struct ip_fw *rule)
2843 	struct ip_fw *n;
2867 print_chain(struct ip_fw **chain)
2869 	struct ip_fw *rule = *chain;
2926 	struct ip_fw *inactive_rule = (struct ip_fw *)param;
2927 	struct ip_fw *rule, *prev;
2933 			struct ip_fw *n = rule;
2957 mark_inactive(struct ip_fw **prev, struct ip_fw **rule)
2981 free_chain(struct ip_fw **chain, int kill_default)
2983 	struct ip_fw *prev, *rule;
3020 del_entry(struct ip_fw **chain, u_int32_t arg)
3022 	struct ip_fw *prev = NULL, *rule = *chain;
3122 clear_counters(struct ip_fw *rule, int log_only)
3143 	struct ip_fw *rule;
3184 check_ipfw_struct(struct ip_fw *rule, int size)
3399 	struct ip_fw *bp , *buf, *rule;
3486 				bp = (struct ip_fw *)((char *)bp + rulesize_64);
3494 				bp = (struct ip_fw *)((char *)bp + rulesize_32);
3585 					bp = (struct ip_fw *)((char *)bp + j);
3628 						bp = (struct ip_fw *)((char *)bp + rulesize_64);
3633 						bp = (struct ip_fw *)((char *)bp + rulesize_32);
3768 		struct ip_fw	temp_rule;
3772 		bzero(&temp_rule, sizeof(struct ip_fw));
3823 		struct ip_fw temp_rule;
3825 		bzero(&temp_rule, sizeof(struct ip_fw));
3878 struct ip_fw *ip_fw_default_rule;
3949 	struct ip_fw default_rule;