bsd/net/pf.c

70 #include <sys/mbuf.h>
220 static void		 pf_change_ap(int, struct mbuf *, struct pf_addr *,
223 static int		 pf_modulate_sack(struct mbuf *, int, struct pf_pdesc *,
238 static void		 pf_send_icmp(struct mbuf *, u_int8_t, u_int8_t,
240 static struct pf_rule	*pf_match_translation(struct pf_pdesc *, struct mbuf *,
245 			    struct mbuf *, int, int, struct pfi_kif *,
255 			    int, struct pfi_kif *, struct mbuf *, int,
260 			    struct pfi_kif *, struct mbuf **,
264 			    struct pfi_kif *, struct mbuf *, void *,
268 			    struct pfi_kif *, struct mbuf *, int,
271 			    struct pfi_kif *, struct mbuf *, int,
274 			    struct pfi_kif *, struct mbuf *, int,
278 static int		 pf_match_tag(struct mbuf *, struct pf_rule *,
290 static void		 pf_route(struct mbuf **, struct pf_rule *, int,
294 static void		 pf_route6(struct mbuf **, struct pf_rule *, int,
298 static u_int8_t		 pf_get_wscale(struct mbuf *, int, u_int16_t,
300 static u_int16_t	 pf_get_mss(struct mbuf *, int, u_int16_t,
306 static int		 pf_check_proto_cksum(struct mbuf *, int, int,
344 struct mbuf *
345 pf_lazy_makewritable(struct pf_pdesc *pd, struct mbuf *m, int len)
2111 pf_change_ap(int dir, struct mbuf *m, struct pf_addr *a, u_int16_t *p,
2321 pf_modulate_sack(struct mbuf *m, int off, struct pf_pdesc *pd,
2385 	struct mbuf	*m;
2418 	/* create outgoing mbuf */
2563 pf_send_icmp(struct mbuf *m, u_int8_t type, u_int8_t code, sa_family_t af,
2566 	struct mbuf	*m0;
2794 pf_match_tag(struct mbuf *m, struct pf_rule *r, struct pf_mtag *pf_mtag,
2806 pf_tag_packet(struct mbuf *m, struct pf_mtag *pf_mtag, int tag,
3375 pf_match_translation(struct pf_pdesc *pd, struct mbuf *m, int off,
3472 pf_get_translation_aux(struct pf_pdesc *pd, struct mbuf *m, int off,
3794 pf_get_wscale(struct mbuf *m, int off, u_int16_t th_off, sa_family_t af)
3834 pf_get_mss(struct mbuf *m, int off, u_int16_t th_off, sa_family_t af)
4050     struct pfi_kif *kif, struct mbuf *m, int off, void *h,
5138  * PF_PASS and zero out the mbuf rule as the packet is effectively siphoned
5143     struct mbuf **m0, struct pf_pdesc *pd, struct ip_fw_args *fwa)
5145 	struct mbuf		*m = *m0;
5392 		 * mbuf so the caller can still return success.
5405     struct mbuf *m, void *h, struct pf_pdesc *pd, struct pf_rule **am,
5515 	struct mbuf *m;
5846     struct mbuf *m, int off, void *h, struct pf_pdesc *pd,
6374     struct mbuf *m, int off, void *h, struct pf_pdesc *pd, u_short *reason)
6524     struct mbuf *m, int off, void *h, struct pf_pdesc *pd, u_short *reason)
6693 			/* offset of h2 in mbuf chain */
7204 	struct mbuf *m;
7548  * ipoff and off are measured from the start of the mbuf chain.
7549  * h must be at "ipoff" on the mbuf chain.
7552 pf_pull_hdr(struct mbuf *m, int off, void *p, int len,
7687 pf_route(struct mbuf **m, struct pf_rule *r, int dir, struct ifnet *oifp,
7691 	struct mbuf		*m0, *m1;
7861 pf_route6(struct mbuf **m, struct pf_rule *r, int dir, struct ifnet *oifp,
7865 	struct mbuf		*m0;
7982  * check protocol (tcp/udp/icmp/icmp6) checksum and set mbuf flag
7988 pf_check_proto_cksum(struct mbuf *m, int off, int len, u_int8_t p,
8082 pf_test(int dir, struct ifnet *ifp, struct mbuf **m0,
8090 	struct mbuf		*m = *m0;
8594 		/* pf_route can free the mbuf causing *m0 to become NULL */
8613 pf_test6(int dir, struct ifnet *ifp, struct mbuf **m0,
8621 	struct mbuf		*m = *m0, *n = NULL;
8801 	/* if there's no routing header, use unmodified mbuf for checksumming */
9168 		/* pf_route6 can free the mbuf causing *m0 to become NULL */
9198 		/* pf_route6 can free the mbuf causing *m0 to become NULL */
9284 pf_find_mtag(struct mbuf *m)
9293 pf_get_mtag(struct mbuf *m)