sbin/pfctl/pfctl.c

249 pfctl_enable(int dev, int opts)
261 	if ((opts & PF_OPT_QUIET) == 0)
272 pfctl_disable(int dev, int opts)
280 	if ((opts & PF_OPT_QUIET) == 0)
291 pfctl_clear_stats(int dev, int opts)
295 	if ((opts & PF_OPT_QUIET) == 0)
301 pfctl_clear_interface_flags(int dev, int opts)
305 	if ((opts & PF_OPT_NOACTION) == 0) {
311 		if ((opts & PF_OPT_QUIET) == 0)
318 pfctl_clear_rules(int dev, int opts, char *anchorname)
329 	if ((opts & PF_OPT_QUIET) == 0)
335 pfctl_clear_nat(int dev, int opts, char *anchorname)
347 	if ((opts & PF_OPT_QUIET) == 0)
353 pfctl_clear_altq(int dev, int opts)
365 	if ((opts & PF_OPT_QUIET) == 0)
371 pfctl_clear_src_nodes(int dev, int opts)
375 	if ((opts & PF_OPT_QUIET) == 0)
381 pfctl_clear_states(int dev, const char *iface, int opts)
392 	if ((opts & PF_OPT_QUIET) == 0)
448 pfctl_kill_src_nodes(int dev, const char *iface, int opts)
544 	if ((opts & PF_OPT_QUIET) == 0)
551 pfctl_net_kill_states(int dev, const char *iface, int opts)
650 	if ((opts & PF_OPT_QUIET) == 0)
657 pfctl_label_kill_states(int dev, const char *iface, int opts)
677 	if ((opts & PF_OPT_QUIET) == 0)
684 pfctl_id_kill_states(int dev, const char *iface, int opts)
712 	if ((opts & PF_OPT_QUIET) == 0)
776 pfctl_print_rule_counters(struct pf_rule *rule, int opts)
778 	if (opts & PF_OPT_DEBUG) {
798 	if (opts & PF_OPT_VERBOSE) {
806 		if (!(opts & PF_OPT_DEBUG))
824 pfctl_show_rules(int dev, char *path, int opts, enum pfctl_show format,
829 	int rule_numbers = opts & (PF_OPT_VERBOSE2 | PF_OPT_DEBUG);
830 	int numeric = opts & PF_OPT_NUMERIC;
842 	if (opts & PF_OPT_SHOWALL) {
855 	if (opts & PF_OPT_SHOWALL) {
862 	if (opts & PF_OPT_CLRRULECTRS)
880 			if (pr.rule.label[0] && (opts & PF_OPT_SHOWALL))
884 			pfctl_print_rule_counters(&pr.rule, opts);
928 			if (pr.rule.label[0] && (opts & PF_OPT_SHOWALL))
930 			INDENT(depth, !(opts & PF_OPT_VERBOSE));
934 			   *(--p) == '/')) || (opts & PF_OPT_RECURSE))) {
949 			pfctl_print_rule_counters(&pr.rule, opts);
951 				pfctl_show_rules(dev, path, opts, format,
953 				INDENT(depth, !(opts & PF_OPT_VERBOSE));
971 pfctl_show_nat(int dev, int opts, char *anchorname)
976 	int i, dotitle = opts & PF_OPT_SHOWALL;
1001 			    opts & PF_OPT_VERBOSE2, opts & PF_OPT_NUMERIC);
1003 			pfctl_print_rule_counters(&pr.rule, opts);
1011 pfctl_show_src_nodes(int dev, int opts)
1044 	if (psn.psn_len > 0 && (opts & PF_OPT_SHOWALL))
1047 		print_src_node(p, opts);
1056 pfctl_show_states(int dev, const char *iface, int opts)
1062 	int i, dotitle = (opts & PF_OPT_SHOWALL);
1096 		print_state(p, opts);
1104 pfctl_show_status(int dev, int opts)
1112 	if (opts & PF_OPT_SHOWALL)
1114 	print_status(&status, opts);
1119 pfctl_show_timeouts(int dev, int opts)
1124 	if (opts & PF_OPT_SHOWALL)
1144 pfctl_show_limits(int dev, int opts)
1149 	if (opts & PF_OPT_SHOWALL)
1171 	if ((pf->opts & PF_OPT_NOACTION) == 0) {
1179 		if ((pf->opts & PF_OPT_NOACTION) == 0) {
1282 			if (pf->opts & PF_OPT_VERBOSE)
1284 			if ((pf->opts & PF_OPT_NOACTION) == 0 &&
1291 		} else if (pf->opts & PF_OPT_VERBOSE)
1307 		} else if (pf->opts & PF_OPT_VERBOSE)
1311 	if (brace && pf->opts & PF_OPT_VERBOSE) {
1312 		INDENT(depth - 1, (pf->opts & PF_OPT_VERBOSE));
1334 	if ((pf->opts & PF_OPT_NOACTION) == 0)
1353 	if ((pf->opts & PF_OPT_NOACTION) == 0) {
1365 	if (pf->opts & PF_OPT_VERBOSE) {
1366 		INDENT(depth, !(pf->opts & PF_OPT_VERBOSE2));
1368 		    pf->opts & PF_OPT_VERBOSE2,
1369 		    pf->opts & PF_OPT_NUMERIC);
1382 		if ((pf->opts & PF_OPT_NOACTION) == 0) {
1399 pfctl_rules(int dev, char *filename, int opts, int optimize,
1436 	pf.opts = opts;
1462 	if ((opts & PF_OPT_NOACTION) == 0) {
1479 		if ((opts & PF_OPT_NOACTION) == 0)
1494 		if ((opts & PF_OPT_NOACTION) == 0)
1501 		if (check_commit_altq(dev, opts) != 0)
1509 	if (trans == NULL && (opts & PF_OPT_NOACTION) == 0) {
1520 		if ((opts & PF_OPT_NOACTION) == 0)
1596 		if ((pf->opts & PF_OPT_MERGE) && !pf->limit_set[i])
1619 		if ((pf->opts & PF_OPT_MERGE) && !pf->timeout_set[i])
1626 	if (!(pf->opts & PF_OPT_MERGE) || pf->debug_set)
1631 	if (!(pf->opts & PF_OPT_MERGE) || pf->ifname_set)
1636 	if (!(pf->opts & PF_OPT_MERGE) || pf->hostid_set)
1661 	if (pf->opts & PF_OPT_VERBOSE)
1707 	if (pf->opts & PF_OPT_VERBOSE && ! quiet)
1752 	if (pf->opts & PF_OPT_VERBOSE)
1775 	if (pf->opts & PF_OPT_VERBOSE)
1810 	if (pf->opts & PF_OPT_VERBOSE)
1850 	if ((pf->opts & PF_OPT_NOACTION) == 0)
1854 	if (pf->opts & PF_OPT_VERBOSE)
1886 	if ((pf->opts & PF_OPT_NOACTION) == 0) {
1899 pfctl_debug(int dev, u_int32_t level, int opts)
1903 	if ((opts & PF_OPT_QUIET) == 0) {
1927 pfctl_test_altqsupport(int dev, int opts)
1933 			if (opts & PF_OPT_VERBOSE)
1944 pfctl_show_anchors(int dev, int opts, char *anchorname)
1974 		if (sub[0] != '_' || (opts & PF_OPT_VERBOSE))
1976 		if ((opts & PF_OPT_VERBOSE) && pfctl_show_anchors(dev, opts, sub))
1998 	int	 opts = 0;
2013 			opts |= PF_OPT_DISABLE;
2022 			opts |= PF_OPT_ENABLE;
2026 			opts |= PF_OPT_QUIET;
2058 			opts |= PF_OPT_MERGE;
2061 			opts |= PF_OPT_NOACTION;
2067 			opts |= PF_OPT_USEDNS;
2074 			opts |= PF_OPT_DEBUG;
2088 			opts |= PF_OPT_OPTIMIZE;
2097 			opts |= PF_OPT_NUMERIC;
2117 			if (opts & PF_OPT_VERBOSE)
2118 				opts |= PF_OPT_VERBOSE2;
2119 			opts |= PF_OPT_VERBOSE;
2130 			opts |= PF_OPT_CLRRULECTRS;
2169 			opts |= PF_OPT_RECURSE;
2178 	if ((opts & PF_OPT_NOACTION) == 0) {
2182 		altqsupport = pfctl_test_altqsupport(dev, opts);
2186 			opts |= PF_OPT_DUMMYACTION;
2188 		opts &= ~ (PF_OPT_DISABLE | PF_OPT_ENABLE);
2197 	if (opts & PF_OPT_DISABLE)
2198 		if (pfctl_disable(dev, opts))
2204 			pfctl_show_anchors(dev, opts, anchorname);
2207 			pfctl_load_fingerprints(dev, opts);
2208 			pfctl_show_rules(dev, path, opts, PFCTL_SHOW_RULES,
2212 			pfctl_load_fingerprints(dev, opts);
2213 			pfctl_show_rules(dev, path, opts, PFCTL_SHOW_LABELS,
2217 			pfctl_load_fingerprints(dev, opts);
2218 			pfctl_show_nat(dev, opts, anchorname);
2221 			pfctl_show_altq(dev, ifaceopt, opts,
2222 			    opts & PF_OPT_VERBOSE2);
2225 			pfctl_show_states(dev, ifaceopt, opts);
2228 			pfctl_show_src_nodes(dev, opts);
2231 			pfctl_show_status(dev, opts);
2234 			pfctl_show_timeouts(dev, opts);
2237 			pfctl_show_limits(dev, opts);
2240 			opts |= PF_OPT_SHOWALL;
2241 			pfctl_load_fingerprints(dev, opts);
2243 			pfctl_show_nat(dev, opts, anchorname);
2244 			pfctl_show_rules(dev, path, opts, 0, anchorname, 0);
2245 			pfctl_show_altq(dev, ifaceopt, opts, 0);
2246 			pfctl_show_states(dev, ifaceopt, opts);
2247 			pfctl_show_src_nodes(dev, opts);
2248 			pfctl_show_status(dev, opts);
2249 			pfctl_show_rules(dev, path, opts, 1, anchorname, 0);
2250 			pfctl_show_timeouts(dev, opts);
2251 			pfctl_show_limits(dev, opts);
2252 			pfctl_show_tables(anchorname, opts);
2253 			pfctl_show_fingerprints(opts);
2256 			pfctl_show_tables(anchorname, opts);
2259 			pfctl_load_fingerprints(dev, opts);
2260 			pfctl_show_fingerprints(opts);
2263 			pfctl_show_ifaces(ifaceopt, opts);
2268 	if ((opts & PF_OPT_CLRRULECTRS) && showopt == NULL)
2269 		pfctl_show_rules(dev, path, opts, PFCTL_SHOW_NOTHING,
2279 			pfctl_clear_rules(dev, opts, anchorname);
2282 			pfctl_clear_nat(dev, opts, anchorname);
2285 			pfctl_clear_altq(dev, opts);
2288 			pfctl_clear_states(dev, ifaceopt, opts);
2291 			pfctl_clear_src_nodes(dev, opts);
2294 			pfctl_clear_stats(dev, opts);
2297 			pfctl_clear_rules(dev, opts, anchorname);
2298 			pfctl_clear_nat(dev, opts, anchorname);
2299 			pfctl_clear_tables(anchorname, opts);
2301 				pfctl_clear_altq(dev, opts);
2302 				pfctl_clear_states(dev, ifaceopt, opts);
2303 				pfctl_clear_src_nodes(dev, opts);
2304 				pfctl_clear_stats(dev, opts);
2305 				pfctl_clear_fingerprints(dev, opts);
2306 				pfctl_clear_interface_flags(dev, opts);
2310 			pfctl_clear_fingerprints(dev, opts);
2313 			pfctl_clear_tables(anchorname, opts);
2319 			pfctl_label_kill_states(dev, ifaceopt, opts);
2321 			pfctl_id_kill_states(dev, ifaceopt, opts);
2323 			pfctl_net_kill_states(dev, ifaceopt, opts);
2327 		pfctl_kill_src_nodes(dev, ifaceopt, opts);
2331 		    tblcmdopt, rulesopt, anchorname, opts);
2351 		if (pfctl_clear_interface_flags(dev, opts | PF_OPT_QUIET))
2354 	if (rulesopt != NULL && !(opts & (PF_OPT_MERGE|PF_OPT_NOACTION)) &&
2356 		if (pfctl_file_fingerprints(dev, opts, PF_OSFP_FILE))
2363 		if (pfctl_rules(dev, rulesopt, opts, optimize,
2366 		else if (!(opts & PF_OPT_NOACTION) &&
2371 	if (opts & PF_OPT_ENABLE)
2372 		if (pfctl_enable(dev, opts))
2378 			pfctl_debug(dev, PF_DEBUG_NONE, opts);
2381 			pfctl_debug(dev, PF_DEBUG_URGENT, opts);
2384 			pfctl_debug(dev, PF_DEBUG_MISC, opts);
2387 			pfctl_debug(dev, PF_DEBUG_NOISY, opts);