bsd/netinet/ip_fw2.c

218  * obey the 'randomized match', and we do not do multiple
968 	if (ifp == NULL)	/* no iface with this packet, match fails */
971 	if (cmd->name[0] != '\0') { /* match by name */
992 				return(1);	/* match */
998 	return(0);	/* no match, fail ... */
1860  * This never returns NULL -- in case we do not have an exact match,
2155 			int match;
2168 			 * The first match will set "skip_or", and cause
2177 			match = 0; /* set to 1 if we succeed */
2182 			 * fields with some pattern, setting 'match' if a
2183 			 * match is found. At the end of the loop there is
2188 				match = 1;
2238 					match =
2248 					match = 0;
2250 						(gid_t)((ipfw_insn_u32 *)cmd)->d[0], &match);
2260 				match = iface_match(m->m_pkthdr.rcvif,
2265 				match = iface_match(oif, (ipfw_insn_if *)cmd);
2269 				match = iface_match(oif ? oif :
2281 					match =
2296 					for (i = cmdlen - 1; !match && i>0;
2298 						match = (t>=p[0] && t<=p[1]);
2303 				match = (hlen > 0 && offset != 0);
2307 				match = (oif == NULL);
2311 				match = (args->fwa_eh != NULL);
2319 				match = (proto == cmd->arg1);
2323 				match = (hlen > 0 &&
2337 				    for (; !match && i>0; i-= 2, p+= 2)
2338 					match = (p[0] == (a & p[1]));
2347 					match = (tif != NULL);
2363 					    match = (addr < cmd->arg1) &&
2370 				match = (hlen > 0 &&
2380 					match = (tif != NULL);
2400 					for (i = cmdlen - 1; !match && i>0;
2402 						match = (x>=p[0] && x<=p[1]);
2407 				match = (offset == 0 && proto==IPPROTO_ICMP &&
2412 				match = (hlen > 0 && ipopts_match(ip, cmd) );
2416 				match = (hlen > 0 && cmd->arg1 == ip->ip_v);
2434 					match = (cmd->arg1 == x);
2440 				    for (; !match && i>0; i--, p += 2)
2441 					match = (x >= p[0] && x <= p[1]);
2446 				match = (hlen > 0 &&
2451 				match = (hlen > 0 &&
2456 				match = (proto == IPPROTO_TCP && offset == 0 &&
2462 				match = (proto == IPPROTO_TCP && offset == 0 &&
2467 				match = (proto == IPPROTO_TCP && offset == 0 &&
2473 				match = (proto == IPPROTO_TCP && offset == 0 &&
2479 				match = (proto == IPPROTO_TCP && offset == 0 &&
2487 				match = (proto == IPPROTO_TCP && offset == 0 &&
2495 				match = 1;
2499 				match = (random()<((ipfw_insn_u32 *)cmd)->d[0]);
2503 				/* Outgoing packets automatically pass/match */
2504 				match = ((oif != NULL) ||
2511 				match = (m_tag_find(m,
2515 				match = (ipsec_gethist(m, NULL) != NULL);
2517 				/* otherwise no match */
2544 			 *   the next opcode (match=1; break;), otherwise
2565 				match = 1;
2603 				match = 1;
2673 				match = !match;
2675 			if (match) {
2723  * pipe/queue, or to all of them (match == NULL).
2727 flush_pipe_ptrs(struct dn_flow_set *match)
2742 		if (match == NULL ||
2743 		    !bcmp(&cmd->pipe_ptr, &match, sizeof(match)) )
3702 				 * adjust sopt_valsize to match what would be expected.