bsd/net/pf.c

2379     const struct pf_addr *saddr, const struct pf_addr *daddr,
2475 		h->ip_src.s_addr = saddr->v4.s_addr;
2488 		memcpy(&h6->ip6_src, &saddr->v6, sizeof (struct in6_addr));
2907     struct pf_addr *rmask, struct pf_addr *saddr, sa_family_t af)
2913 		    ((rmask->addr32[0] ^ 0xffffffff) & saddr->addr32[0]);
2918 		    ((rmask->addr32[0] ^ 0xffffffff) & saddr->addr32[0]);
2920 		    ((rmask->addr32[1] ^ 0xffffffff) & saddr->addr32[1]);
2922 		    ((rmask->addr32[2] ^ 0xffffffff) & saddr->addr32[2]);
2924 		    ((rmask->addr32[3] ^ 0xffffffff) & saddr->addr32[3]);
3019 pf_map_addr(sa_family_t af, struct pf_rule *r, struct pf_addr *saddr,
3032 		PF_ACPY(&k.addr, saddr, af);
3093 		PF_POOLMASK(naddr, raddr, rmask, saddr, af);
3135 		pf_hash(saddr, (struct pf_addr *)(void *)&hash,
3208     struct pf_addr *saddr, union pf_state_xport *sxport, struct pf_addr *daddr,
3222 	if (pf_map_addr(af, r, saddr, naddr, &init_addr, sn))
3256 				if (PF_ANEQ(&sk->lan.addr, saddr, af))
3283 			if (!(PF_AEQ(&sk->lan.addr, saddr, af)))
3360 			if (pf_map_addr(af, r, saddr, naddr, &init_addr, sn))
3376     int direction, struct pfi_kif *kif, struct pf_addr *saddr,
3420 		else if (xsrc && PF_MISMATCHAW(xsrc, saddr, pd->af, 0, NULL))
3422 		else if (!xsrc && PF_MISMATCHAW(&src->addr, saddr, pd->af,
3474     struct pf_addr *saddr, union pf_state_xport *sxport, struct pf_addr *daddr,
3481 		r = pf_match_translation(pd, m, off, direction, kif, saddr,
3485 			    saddr, sxport, daddr, dxport, PF_RULESET_RDR);
3488 			    saddr, sxport, daddr, dxport, PF_RULESET_NAT);
3490 		r = pf_match_translation(pd, m, off, direction, kif, saddr,
3494 			    saddr, sxport, daddr, dxport, PF_RULESET_BINAT);
3504 			if (pf_get_sport(pd, kif, r, saddr, sxport, daddr,
3532 						    saddr, AF_INET);
3545 						    saddr, AF_INET6);
3553 					    saddr, pd->af);
3641 				if (pf_map_addr(pd->af, r, saddr,
3687 	struct pf_addr		*saddr, *daddr;
3717 		saddr = pd->src;
3725 		saddr = pd->dst;
3731 		inp = in_pcblookup_hash_exists(pi, saddr->v4, sport, daddr->v4, dport,
3739 			memcpy(&s6.s6_addr32[3], &saddr->v4,
3740 			    sizeof (saddr->v4));
3750 				inp = in_pcblookup_hash_exists(pi, saddr->v4, sport,
3763 			inp = in_pcblookup_hash_exists(pi, saddr->v4, sport,
3774 		inp = in6_pcblookup_hash_exists(pi, &saddr->v6, sport, &daddr->v6,
3777 			inp = in6_pcblookup_hash_exists(pi, &saddr->v6, sport,
3929 pf_set_rt_ifp(struct pf_state *s, struct pf_addr *saddr)
3939 		pf_map_addr(AF_INET, r, saddr, &s->rt_addr, NULL,
3946 		pf_map_addr(AF_INET6, r, saddr, &s->rt_addr, NULL,
4056 	struct pf_addr		*saddr = pd->src, *daddr = pd->dst;
4152 		    saddr, &sxport, daddr, &dxport, &pd->naddr, &nxport)) !=
4154 			PF_ACPY(&pd->baddr, saddr, af);
4157 				pf_change_ap(direction, pd->mp, saddr,
4164 				pf_change_ap(direction, pd->mp, saddr,
4174 					pf_change_a(&saddr->v4.s_addr, pd->ip_sum,
4187 					pf_change_a6(saddr, &pd->hdr.icmp6->icmp6_cksum,
4197 					pf_change_a(&saddr->v4.s_addr,
4203 					PF_ACPY(saddr, &pd->naddr, AF_INET6);
4214 					pf_change_a(&saddr->v4.s_addr,
4220 					PF_ACPY(saddr, &pd->naddr, AF_INET6);
4229 					pf_change_a(&saddr->v4.s_addr,
4235 					PF_ACPY(saddr, &pd->naddr, af);
4250 		    saddr, &sxport, daddr, &dxport, &pd->naddr, &nxport)) !=
4356 		else if (PF_MISMATCHAW(&r->src.addr, saddr, af,
4472 					pf_change_ap(direction, pd->mp, saddr,
4480 					pf_change_ap(direction, pd->mp, saddr,
4494 					PF_ACPY(&pd->baddr, saddr, af);
4499 						pf_change_a(&saddr->v4.s_addr,
4506 						PF_ACPY(saddr, &pd->baddr,
4513 					PF_ACPY(&pd->baddr, saddr, af);
4517 						pf_change_a(&saddr->v4.s_addr,
4524 						PF_ACPY(saddr, &pd->baddr,
4533 						pf_change_a(&saddr->v4.s_addr,
4538 						PF_ACPY(saddr, &pd->baddr, af);
4690 		PF_ACPY(&psk.gwy.addr, saddr, af);
4722 		PF_ACPY(&psk.ext.addr, saddr, af);
4803 			PF_ACPY(&sk0.gwy.addr, saddr, sk0.af);
4823 		    pf_insert_src_node(&sn, r, saddr, af) != 0) {
4832 		    (pf_insert_src_node(&nsn, nr, saddr, af) != 0))) {
4979 		pf_set_rt_ifp(s, saddr);	/* needs s->state_key set */
5063 					pf_change_ap(direction, pd->mp, saddr,
5079 			mss = pf_calc_mss(saddr, af, mss);
5082 			pf_send_tcp(r, af, daddr, saddr, th->th_dport,
5148 	struct pf_addr		*saddr = pd->src, *daddr = pd->dst;
5229 		else if (PF_MISMATCHAW(&r->src.addr, saddr, af,
5345 				dnflow.fwa_id.src_ip = ntohl(saddr->v4.s_addr);
5350 				dnflow.fwa_id.src_ip6 = saddr->v6;
5351 				dnflow.fwa_id.dst_ip6 = saddr->v6;
6527 	struct pf_addr	*saddr = pd->src, *daddr = pd->dst;
6597 					pf_change_a(&saddr->v4.s_addr,
6616 					pf_change_a6(saddr,
6861 					    saddr, &(*state)->state_key->gwy.addr,
6990 					    saddr, &(*state)->state_key->gwy.addr,
7060 					    saddr, &(*state)->state_key->gwy.addr,
7114 					    saddr, &(*state)->state_key->gwy.addr,
7160 					    saddr, &(*state)->state_key->gwy.addr,