bsd/netinet/ip_fw2.h

72 	@discussion The event code indicating a rule has been added.
78 	@discussion The event code indicating a rule has been removed.
84 	@discussion The event code indicating the rule set has been flushed.
181 	O_SKIPTO,		/* arg1=next rule number	*/
341  * Here we have the structure representing an ipfw rule.
347  * Given a rule pointer  r:
351  *			once a rule matched).
355  *  + if a rule has a "keep-state" (or "limit") option, then the
357  *  + if a rule has a "log" option, then the first action
361  * 	to delete a rule without scanning the list. We do not use
370 							/* identify this rule. */
372 	struct ip_fw	*next_rule;	/* ptr to next [skipto] rule	*/
377 	u_int16_t	rulenum;	/* rule number			*/
378 	u_int8_t	set;		/* rule set (0..31)		*/
394 #define ACTION_PTR(rule)				\
395 	(ipfw_insn *)( (u_int32_t *)((rule)->cmd) + ((rule)->act_ofs) )
397 #define RULESIZE(rule)  (sizeof(struct ip_fw) + \
398 	((struct ip_fw *)(rule))->cmd_len * 4 - 4)
414  * Dynamic ipfw rule.
433 	struct ip_fw *rule;		/* pointer to rule		*/
434 	/* 'rule' is used to pass up the rule number (from the parent)	*/
436 	ipfw_dyn_rule *parent;		/* pointer to parent rule	*/
442 	u_int32_t	state;		/* state of this rule (typically a
448 	u_int16_t	dyn_type;	/* rule type			*/
454 	struct ip_fw *rule;		/* pointer to rule		*/
455 	/* 'rule' is used to pass up the rule number (from the parent)	*/
457 	ipfw_dyn_rule *parent;		/* pointer to parent rule	*/
463 	u_int32_t	state;		/* state of this rule (typically a
469 	u_int16_t	dyn_type;	/* rule type			*/
504 										/* identify this rule. */
506         user32_addr_t	next_rule;/* ptr to next [skipto] rule    */
511         u_int16_t       rulenum;        /* rule number                  */
512         u_int8_t        set;            /* rule set (0..31)             */
535                                                         /* identify this rule. */
537         user64_addr_t	next_rule;     /* ptr to next [skipto] rule    */
542         u_int16_t       rulenum;        /* rule number                  */
543         u_int8_t        set;            /* rule set (0..31)             */
566         user32_addr_t	rule;			/* pointer to rule              */
567         /* 'rule' is used to pass up the rule number (from the parent)  */
569         user32_addr_t	parent;          /* pointer to parent rule       */
575         u_int32_t       state;          /* state of this rule (typically a
581         u_int16_t       dyn_type;       /* rule type                    */
589         user64_addr_t	rule;             /* pointer to rule              */
590         /* 'rule' is used to pass up the rule number (from the parent)  */
592         user64_addr_t	parent;          /* pointer to parent rule       */
598         u_int32_t       state;          /* state of this rule (typically a
604         u_int16_t       dyn_type;       /* rule type                    */