ipfilter/netinet/ip_ipsec_pxy.c

145 	ipsec_pxy_t *ipsec;
173 	KMALLOC(ipsec, ipsec_pxy_t *);
174 	if (ipsec == NULL)
179 		KFREE(ipsec);
183 	aps->aps_data = ipsec;
184 	aps->aps_psiz = sizeof(*ipsec);
185 	bzero((char *)ipsec, sizeof(*ipsec));
187 	ipsec->ipsc_rule = ipn;
234 	bcopy(ptr, (char *)ipsec->ipsc_icookie, sizeof(ipsec_cookie_t));
236 	bcopy(ptr, (char *)ipsec->ipsc_rcookie, sizeof(ipsec_cookie_t));
242 	if ((ipsec->ipsc_rcookie[0]|ipsec->ipsc_rcookie[1]) != 0)
243 		ipsec->ipsc_rckset = 1;
246 	ipsec->ipsc_nat = ipf_nat_add(&fi, ipn, &ipsec->ipsc_nat,
249 	if (ipsec->ipsc_nat != NULL) {
250 		(void) ipf_nat_proto(&fi, ipsec->ipsc_nat, 0);
251 		MUTEX_ENTER(&ipsec->ipsc_nat->nat_lock);
252 		ipf_nat_update(&fi, ipsec->ipsc_nat);
253 		MUTEX_EXIT(&ipsec->ipsc_nat->nat_lock);
257 		(void) ipf_state_add(softc, &fi, &ipsec->ipsc_state, SI_WILDP);
277 	ipsec_pxy_t *ipsec;
288 	ipsec = aps->aps_data;
290 	if (ipsec != NULL) {
294 		if ((ipsec->ipsc_nat == NULL) || (ipsec->ipsc_state == NULL)) {
308 		if (ipsec->ipsc_nat != NULL)
310 				      &ipsec->ipsc_nat->nat_tqe);
317 			ipsec->ipsc_nat = ipf_nat_add(&fi, ipsec->ipsc_rule,
318 						      &ipsec->ipsc_nat,
322 			if (ipsec->ipsc_nat != NULL) {
323 				(void) ipf_nat_proto(&fi, ipsec->ipsc_nat, 0);
324 				MUTEX_ENTER(&ipsec->ipsc_nat->nat_lock);
325 				ipf_nat_update(&fi, ipsec->ipsc_nat);
326 				MUTEX_EXIT(&ipsec->ipsc_nat->nat_lock);
334 		if (ipsec->ipsc_state != NULL) {
336 				      &ipsec->ipsc_state->is_sti);
337 			ipsec->ipsc_state->is_die = nat->nat_age;
343 			(void) ipf_state_add(softc, &fi, &ipsec->ipsc_state,
364 	ipsec_pxy_t *ipsec;
375 	ipsec = aps->aps_data;
379 	if ((cookies[0] != ipsec->ipsc_icookie[0]) ||
380 	    (cookies[1] != ipsec->ipsc_icookie[1]))
383 	if (ipsec->ipsc_rckset == 0) {
387 		ipsec->ipsc_rckset = 1;
388 		ipsec->ipsc_rcookie[0] = cookies[2];
389 		ipsec->ipsc_rcookie[1] = cookies[3];
393 	if ((cookies[2] != ipsec->ipsc_rcookie[0]) ||
394 	    (cookies[3] != ipsec->ipsc_rcookie[1]))
408 	ipsec_pxy_t *ipsec;
410 	ipsec = aps->aps_data;
412 	if (ipsec != NULL) {
419 		if (ipsec->ipsc_state != NULL) {
420 			ipsec->ipsc_state->is_die = softc->ipf_ticks + 1;
421 			ipsec->ipsc_state->is_me = NULL;
422 			ipf_queuefront(&ipsec->ipsc_state->is_sti);
426 		ipsec->ipsc_state = NULL;
427 		ipsec->ipsc_nat = NULL;
428 		ipsec->ipsc_rule->in_flags |= IPN_DELETE;
429 		ipf_nat_rule_deref(softc, &ipsec->ipsc_rule);