bsd/netinet/kpi_ipfilter.h

69 	@discussion ipf_input_func is used to filter incoming ip packets.
70 		The IP filter is called for packets from all interfaces. The
71 		filter is called between when the general IP processing is
74 		as UDP in ESP (IPSec), your filter will be called once for ESP
75 		and then again for UDP. This will give your filter an
81 	@param cookie The cookie specified when your filter was attached.
101 	@discussion ipf_output_func is used to filter outbound ip packets.
102 		The IP filter is called for packets to all interfaces. The
103 		filter is called before fragmentation and IPSec processing. If
106 	@param cookie The cookie specified when your filter was attached.
123 	@discussion ipf_detach_func is called to notify your filter that it
125 	@param cookie The cookie specified when your filter was attached.
131 	@discussion This structure is used to define an IP filter for
134 		filter functions.
135 	@field name A filter name used for debugging purposes.
136 	@field ipf_input The filter function to handle inbound packets.
137 	@field ipf_output The filter function to handle outbound packets.
138 	@field ipf_detach The filter function to notify of a detach.
153 	@discussion Attaches an IPv4 ip filter.
154 	@param filter A structure defining the filter.
155 	@param filter_ref A reference to the filter used to detach it.
158 extern errno_t ipf_addv4(const struct ipf_filter *filter,
163 	@discussion Attaches an IPv6 ip filter.
164 	@param filter A structure defining the filter.
165 	@param filter_ref A reference to the filter used to detach it.
168 extern errno_t ipf_addv6(const struct ipf_filter *filter,
173 	@discussion Detaches an IPv4 or IPv6 filter.
174 	@param filter_ref The reference to the filter returned from ipf_addv4 or
184 		by the filter's ipf_input function, an IP filter can pass its
186 		prevents ip filters installed before this filter from
187 		getting a chance to process the packet. If the filter modified
188 		the packet, it should not specify the filter ref to give other
195 	@param filter_ref The reference to the filter injecting the data
204 		filter's ipf_output function, an IP filter can pass its
206 		prevents ip filters installed before this filter from getting a
207 		chance to process the packet. If the filter modified the packet,
208 		it should not specify the filter ref to give other filters a
211 	@param filter_ref The reference to the filter injecting the data