sbin/ipfw/ipfw2.c

372 	{ "proto",		TOK_PROTO },
919 print_port(struct buf_pr *bp, int proto, uint16_t port)
922 	if (proto == IPPROTO_ETHERTYPE) {
932 			struct protoent *pe = getprotobynumber(proto);
962 print_newports(struct buf_pr *bp, const ipfw_insn_u16 *cmd, int proto, int opcode)
977 		print_port(bp, proto, p[0]);
980 			print_port(bp, proto, p[1]);
990  *	proto == -1 disables the protocol check;
991  *	proto == IPPROTO_ETHERTYPE looks up an internal table
992  *	proto == <some value in /etc/protocols> matches the values there.
996 strtoport(char *s, char **end, int base, int proto)
1027 	if (proto == IPPROTO_ETHERTYPE) {
1038 		if (proto != 0)
1039 			pe = getprotobynumber(proto);
1055 fill_newports(ipfw_insn_u16 *cmd, char *av, int proto, int cblen)
1062 		a = strtoport(av, &s, 0, proto);
1071 			b = strtoport(av, &s, 0, proto);
1510 	int			proto;
1524 	state->proto = 0;
1637 		print_newports(bp, insntod(cmd, u16), state->proto,
1644 			bprintf(bp, " proto");
1649 		state->proto = cmd->arg1;
1845 			bprintf(bp, " proto");
1850 			bprintf(bp, " proto");
2166 	int l, proto, ip4, ip6;
2169 	proto = ip4 = ip6 = 0;
2174 			proto++;
2190 	if (proto == 0 && ip4 == 0 && ip6 == 0) {
2191 		state->proto = IPPROTO_IP;
2203 		for (l = proto; l > 0; l--) {
2208 	/* Initialize proto, it is used by print_newports() */
2210 	if (state->proto == 0 && ip6 != 0)
2211 		state->proto = IPPROTO_IPV6;
2445 	if ((pe = getprotobynumber(d->id.proto)) != NULL)
2448 		bprintf(bp, " proto %u", d->id.proto);
3727 	int proto;
3729 	proto = strtol(av, &ep, 10);
3730 	if (*ep != '\0' || proto <= 0) {
3733 		proto = pe->p_proto;
3736 	fill_cmd(cmd, O_PROTO, 0, proto);
3737 	*protop = proto;
3744 	u_char proto = IPPROTO_IP;
3753 		proto = IPPROTO_IPV6;
3758 	*protop = proto;
3765 	u_char proto = IPPROTO_IP;
3774 		proto = IPPROTO_IPV6;
3779 	*protop = proto;
3861 add_ports(ipfw_insn *cmd, char *av, u_char proto, int opcode, int cblen)
3867 	if (fill_newports((ipfw_insn_u16 *)cmd, av, proto, cblen)) {
3876 add_src(ipfw_insn *cmd, char *av, u_char proto, int cblen, struct tidx *tstate)
3893 	if (proto == IPPROTO_IPV6  || strcmp(av, "me6") == 0 ||
3897 	if (ret == NULL && (proto == IPPROTO_IP || strcmp(av, "me") == 0 ||
3907 add_dst(ipfw_insn *cmd, char *av, u_char proto, int cblen, struct tidx *tstate)
3924 	if (proto == IPPROTO_IPV6  || strcmp(av, "me6") == 0 ||
3928 	if (ret == NULL && (proto == IPPROTO_IP || strcmp(av, "me") == 0 ||
4023 	/* proto is here because it is used to fetch ports */
4024 	u_char proto = IPPROTO_IP;	/* default protocol */
4266 			i = strtoport(s, &end, 0 /* base */, 0 /* proto */);
4612 	 * If we have this, we skip the part "proto from src to dst"
4638 	if (add_proto_compat(cmd, *av, &proto)) {
4667 	if (add_src(cmd, *av, proto, cblen, tstate)) {
4683 		    add_ports(cmd, *av, proto, O_IP_SRCPORT, cblen)) {
4703 	if (add_dst(cmd, *av, proto, cblen, tstate)) {
4719 		    add_ports(cmd, *av, proto, O_IP_DSTPORT, cblen)) {
5102 			if (add_proto(cmd, *av, &proto)) {
5155 			    add_ports(cmd, *av, proto, O_IP_SRCPORT, cblen)) {
5164 			    add_ports(cmd, *av, proto, O_IP_DSTPORT, cblen)) {
5214 			if (proto != IPPROTO_IPV6 )