ipf/netinet/ip_ipsec_pxy.c

117 	ipsec_pxy_t *ipsec;
142 	aps->aps_psiz = sizeof(*ipsec);
143 	KMALLOCS(aps->aps_data, ipsec_pxy_t *, sizeof(*ipsec));
147 	ipsec = aps->aps_data;
148 	bzero((char *)ipsec, sizeof(*ipsec));
155 	ipn = &ipsec->ipsc_rule;
187 	bcopy(ptr, (char *)ipsec->ipsc_icookie, sizeof(ipsec_cookie_t));
189 	bcopy(ptr, (char *)ipsec->ipsc_rcookie, sizeof(ipsec_cookie_t));
195 	if ((ipsec->ipsc_rcookie[0]|ipsec->ipsc_rcookie[1]) != 0)
196 		ipsec->ipsc_rckset = 1;
198 	ipsec->ipsc_nat = nat_new(&fi, ipn, &ipsec->ipsc_nat,
200 	if (ipsec->ipsc_nat != NULL) {
201 		(void) nat_proto(&fi, ipsec->ipsc_nat, 0);
202 		nat_update(&fi, ipsec->ipsc_nat, ipn);
206 		ipsec->ipsc_state = fr_addstate(&fi, &ipsec->ipsc_state,
224 	ipsec_pxy_t *ipsec;
237 	ipsec = aps->aps_data;
239 	if (ipsec != NULL) {
243 		if ((ipsec->ipsc_nat == NULL) || (ipsec->ipsc_state == NULL)) {
257 		if (ipsec->ipsc_nat != NULL)
258 			fr_queueback(&ipsec->ipsc_nat->nat_tqe, ifs);
260 			ipsec->ipsc_nat = nat_new(&fi, &ipsec->ipsc_rule,
261 						  &ipsec->ipsc_nat,
264 			if (ipsec->ipsc_nat != NULL) {
265 				(void) nat_proto(&fi, ipsec->ipsc_nat, 0);
266 				nat_update(&fi, ipsec->ipsc_nat,
267 					   &ipsec->ipsc_rule);
275 		if (ipsec->ipsc_state != NULL) {
276 			fr_queueback(&ipsec->ipsc_state->is_sti, ifs);
277 			ipsec->ipsc_state->is_die = nat->nat_age;
283 			ipsec->ipsc_state = fr_addstate(&fi,
284 							&ipsec->ipsc_state,
306 	ipsec_pxy_t *ipsec;
317 	ipsec = aps->aps_data;
321 	if ((cookies[0] != ipsec->ipsc_icookie[0]) ||
322 	    (cookies[1] != ipsec->ipsc_icookie[1]))
325 	if (ipsec->ipsc_rckset == 0) {
329 		ipsec->ipsc_rckset = 1;
330 		ipsec->ipsc_rcookie[0] = cookies[2];
331 		ipsec->ipsc_rcookie[1] = cookies[3];
335 	if ((cookies[2] != ipsec->ipsc_rcookie[0]) ||
336 	    (cookies[3] != ipsec->ipsc_rcookie[1]))
351 	ipsec_pxy_t *ipsec;
353 	ipsec = aps->aps_data;
355 	if (ipsec != NULL) {
362 		if (ipsec->ipsc_state != NULL) {
363 			ipsec->ipsc_state->is_die = ifs->ifs_fr_ticks + 1;
364 			ipsec->ipsc_state->is_me = NULL;
365 			fr_queuefront(&ipsec->ipsc_state->is_sti);
369 		ipsec->ipsc_state = NULL;
370 		ipsec->ipsc_nat = NULL;