bsd/netinet/ip_fw2_compat.h

8 int		ipfw_convert_to_latest(struct sockopt *sopt, struct ip_fw *rule, int api_version, int is64user);
53 							/* identify this rule. */
75 		u_short fu_skipto_rule;		/* SKIPTO command rule number */
87     void *next_rule_ptr ;              /* next rule in case of match */
104     struct ip_fw rule;      /* must be at offset 0 */
106     u_int   dyn_type;  /* type for dynamic rule */
111 	struct ip_fw_compat *rule;
115  * dynamic ipfw rule
123     struct ip_fw_chain_compat *chain ;		/* pointer to parent rule	*/
124     u_int32_t type ;			/* rule type			*/
128     u_int32_t state ;			/* state of this rule (typ. a   */
139 							/* identify this rule. */
161 		u_short fu_skipto_rule;		/* SKIPTO command rule number */
173     user32_addr_t next_rule_ptr ;              /* next rule in case of match */
184 									/* identify this rule. */
206 		u_short fu_skipto_rule;		/* SKIPTO command rule number */
218     user64_addr_t next_rule_ptr ;              /* next rule in case of match */
229     user32_addr_t chain ;		/* pointer to parent rule	*/
230     u_int32_t type ;			/* rule type			*/
234     u_int32_t state ;			/* state of this rule (typ. a   */
243     user64_addr_t chain ;		/* pointer to parent rule	*/
244     u_int32_t type ;			/* rule type			*/
248     u_int32_t state ;			/* state of this rule (typ. a   */
254 #define IP_FW_GETNSRCP_COMPAT(rule)		((rule)->fw_nports & 0x0f)
255 #define IP_FW_SETNSRCP_COMPAT(rule, n)		do {				\
256 					  (rule)->fw_nports &= ~0x0f;	\
257 					  (rule)->fw_nports |= (n);	\
259 #define IP_FW_GETNDSTP_COMPAT(rule)		((rule)->fw_nports >> 4)
260 #define IP_FW_SETNDSTP_COMPAT(rule, n)		do {				\
261 					  (rule)->fw_nports &= ~0xf0;	\
262 					  (rule)->fw_nports |= (n) << 4;\
275 #define IP_FW_F_DENY_COMPAT	0x00000000	/* This is a deny rule			*/
277 #define IP_FW_F_ACCEPT_COMPAT	0x00000002	/* This is an accept rule		*/
278 #define IP_FW_F_COUNT_COMPAT	0x00000003	/* This is a count rule			*/
279 #define IP_FW_F_DIVERT_COMPAT	0x00000004	/* This is a divert rule		*/
280 #define IP_FW_F_TEE_COMPAT	0x00000005	/* This is a tee rule			*/
281 #define IP_FW_F_SKIPTO_COMPAT	0x00000006	/* This is a skipto rule		*/
282 #define IP_FW_F_FWD_COMPAT	0x00000007	/* This is a "change forwarding address" rule */
283 #define IP_FW_F_PIPE_COMPAT	0x00000008	/* This is a dummynet rule */
291 #define IP_FW_F_PRN_COMPAT	0x00001000	/* Print if this rule matches		*/
313 #define IP_FW_F_RND_MATCH_COMPAT 0x00800000	/* probabilistic rule match		*/
413 	u_short fu_skipto_rule;		/* SKIPTO command rule number */
423     void *next_rule_ptr ;              /* next rule in case of match */
426 #define IP_OLD_FW_GETNSRCP(rule)		((rule)->fw_nports & 0x0f)
427 #define IP_OLD_FW_SETNSRCP(rule, n)		do {				\
428 					  (rule)->fw_nports &= ~0x0f;	\
429 					  (rule)->fw_nports |= (n);	\
431 #define IP_OLD_FW_GETNDSTP(rule)		((rule)->fw_nports >> 4)
432 #define IP_OLD_FW_SETNDSTP(rule, n)		do {				\
433 					  (rule)->fw_nports &= ~0xf0;	\
434 					  (rule)->fw_nports |= (n) << 4;\
447 #define IP_OLD_FW_F_DENY	0x00000000	/* This is a deny rule			*/
449 #define IP_OLD_FW_F_ACCEPT	0x00000002	/* This is an accept rule		*/
450 #define IP_OLD_FW_F_COUNT	0x00000003	/* This is a count rule			*/
451 #define IP_OLD_FW_F_DIVERT	0x00000004	/* This is a divert rule		*/
452 #define IP_OLD_FW_F_TEE	0x00000005	/* This is a tee rule			*/
453 #define IP_OLD_FW_F_SKIPTO	0x00000006	/* This is a skipto rule		*/
454 #define IP_OLD_FW_F_FWD	0x00000007	/* This is a "change forwarding address" rule */
455 #define IP_OLD_FW_F_PIPE	0x00000008	/* This is a dummynet rule */
462 #define IP_OLD_FW_F_PRN	0x00001000	/* Print if this rule matches		*/