ipfilter/netinet/ip_state.c

1360 /*              flags(I)  - flags to use when creating the structure        */
1373 ipf_state_add(softc, fin, stsave, flags)
1377 	u_int flags;
1497 			flags |= SI_W_DADDR;
1511 		flags |= SI_W_DADDR;
1577 		/* TRACE is, flags, hv */
1585 		if ((flags & (SI_W_DPORT|SI_W_SPORT)) == 0) {
1590 		/* TRACE is, flags, hv */
1629 				flags |= IS_TCPFSM;
1650 		if ((flags & (SI_W_DPORT|SI_W_SPORT)) == 0) {
1690 	is->is_flags = flags & IS_INHERITED;
2012 	int source, ret, flags;
2070 		flags = tcp->th_flags & ~(TH_FIN|TH_ECNALL);
2071 		if (flags == (TH_SYN|TH_ACK)) {
2083 		} else if (flags == TH_SYN) {
2158 ipf_state_tcpinwindow(fin, fdata, tdata, tcp, flags)
2162 	int flags;
2210 	    (!(flags & IS_TCPFSM) ||
2234 	if ((flags & IS_STRICT) != 0) {
2270 	} else if (!(flags & IS_TCPFSM)) {
2446 	int ret = 0, rev, out, flags, flx = 0, idx;
2461 	flags = is->is_flags;
2471 			if (!(flags & SI_W_SPORT) && (sp != is->is_sport))
2473 			else if (!(flags & SI_W_DPORT) && (dp != is->is_dport))
2501 		if ((IP6_EQ(&is->is_dst, dst) || (flags & SI_W_DADDR)) &&
2502 		    (IP6_EQ(&is->is_src, src) || (flags & SI_W_SADDR))) {
2504 				if ((sp == is->is_sport || flags & SI_W_SPORT)
2506 				    (dp == is->is_dport || flags & SI_W_DPORT))
2513 		if ((IP6_EQ(&is->is_dst, src) || (flags & SI_W_DADDR)) &&
2514 		    (IP6_EQ(&is->is_src, dst) || (flags & SI_W_SADDR))) {
2516 				if ((dp == is->is_sport || flags & SI_W_SPORT)
2518 				    (sp == is->is_dport || flags & SI_W_DPORT))
2538 		flags = is->is_flags & ~(SI_WILDP|SI_NEWFR|SI_CLONE|SI_CLONED);
2547 	if ((flags & (SI_W_SADDR|SI_W_DADDR))) {
2550 		if ((flags & SI_W_SADDR) != 0) {
2560 		} else if ((flags & SI_W_DADDR) != 0) {
2580 	 * Match up any flags set from IP options.
2600 	if ((flags & (SI_W_SPORT|SI_W_DPORT))) {
2601 		if ((flags & SI_CLONE) != 0) {
2612 		if ((flags & SI_W_SPORT) != 0) {
2621 		} else if ((flags & SI_W_DPORT) != 0) {
2632 		if ((flags & SI_CLONED) && softs->ipf_state_logging)
2797 	 * the flags for the current packet (fin_flx) are compared against
3307 /*              passp(I) - pointer to filtering result flags                */
3629 	 * table that have wildcard flags set, only decerement it once
3995 /*              flags(I) - flags from state/NAT entry                       */
4040 ipf_tcp_age(tqe, fin, tqtab, flags, ok)
4044 	int flags, ok;
4090 			 * does not work when a strict 'flags S keep state' is
4093 			if (((flags & IS_TCPFSM) == 0) &&
4130 				 * passed the check for its flags being valid
4238 				 * an ACK, should we exclude other flags here?