bsd/netinet6/ip6_fw.c

182 static int	add_entry6 __P((struct ip6_fw_head *chainptr, struct ip6_fw *frwl));
184 static int	zero_entry6 __P((struct ip6_fw *frwl));
902 add_entry6(struct ip6_fw_head *chainptr, struct ip6_fw *frwl)
918 	bcopy(frwl, ftmp, sizeof(struct ip6_fw));
965 	bcopy(ftmp, frwl, sizeof(struct ip6_fw));
996 zero_entry6(struct ip6_fw *frwl)
1008 		if (!frwl || frwl->fw_number == 0 || frwl->fw_number == fcp->rule->fw_number) {
1015 		if (frwl)
1017 			    "ip6fw: Entry %d cleared.\n", frwl->fw_number);
1027 check_ip6fw_struct(struct ip6_fw *frwl)
1030 	if ((frwl->fw_flg & ~IPV6_FW_F_MASK) != 0) {
1032 		    err_prefix, frwl->fw_flg));
1036 	if (!(frwl->fw_flg & (IPV6_FW_F_IN | IPV6_FW_F_OUT))) {
1041 	if (((frwl->fw_flg & IPV6_FW_F_IIFNAME)
1042 	      && !*frwl->fw_in_if.fu_via_if.name)
1043 	    || ((frwl->fw_flg & IPV6_FW_F_OIFNAME)
1044 	      && !*frwl->fw_out_if.fu_via_if.name)) {
1049 	if ((frwl->fw_flg & IF6_FW_F_VIAHACK) == IF6_FW_F_VIAHACK) {
1051 	} else if ((frwl->fw_flg & IPV6_FW_F_IN)
1052 	    && (frwl->fw_flg & IPV6_FW_F_OIFACE)) {
1058 	if ((frwl->fw_flg & IPV6_FW_F_SRNG) && IPV6_FW_GETNSRCP(frwl) < 2) {
1060 		    err_prefix, IPV6_FW_GETNSRCP(frwl)));
1063 	if ((frwl->fw_flg & IPV6_FW_F_DRNG) && IPV6_FW_GETNDSTP(frwl) < 2) {
1065 		    err_prefix, IPV6_FW_GETNDSTP(frwl)));
1068 	if (IPV6_FW_GETNSRCP(frwl) + IPV6_FW_GETNDSTP(frwl) > IPV6_FW_MAX_PORTS) {
1070 		    err_prefix, IPV6_FW_GETNSRCP(frwl), IPV6_FW_GETNDSTP(frwl)));
1076 	if ((frwl->fw_prot != IPPROTO_TCP) &&
1077 	    (frwl->fw_prot != IPPROTO_UDP) &&
1078 	    (IPV6_FW_GETNSRCP(frwl) || IPV6_FW_GETNDSTP(frwl))) {
1089 	if ((frwl->fw_src.s6_addr32[0] & (~frwl->fw_smsk.s6_addr32[0])) ||
1090 		(frwl->fw_src.s6_addr32[1] & (~frwl->fw_smsk.s6_addr32[1])) ||
1091 		(frwl->fw_src.s6_addr32[2] & (~frwl->fw_smsk.s6_addr32[2])) ||
1092 		(frwl->fw_src.s6_addr32[3] & (~frwl->fw_smsk.s6_addr32[3])) ||
1093 		(frwl->fw_dst.s6_addr32[0] & (~frwl->fw_dmsk.s6_addr32[0])) ||
1094 		(frwl->fw_dst.s6_addr32[1] & (~frwl->fw_dmsk.s6_addr32[1])) ||
1095 		(frwl->fw_dst.s6_addr32[2] & (~frwl->fw_dmsk.s6_addr32[2])) ||
1096 		(frwl->fw_dst.s6_addr32[3] & (~frwl->fw_dmsk.s6_addr32[3]))) {
1101 	if ((frwl->fw_flg & IPV6_FW_F_FRAG) &&
1102 		(frwl->fw_prot == IPPROTO_UDP || frwl->fw_prot == IPPROTO_TCP)) {
1103 		if (frwl->fw_nports) {
1107 		if (frwl->fw_prot == IPPROTO_TCP &&
1108 			frwl->fw_tcpf != frwl->fw_tcpnf) {
1115 	switch (frwl->fw_flg & IPV6_FW_F_COMMAND)
1118 		if (frwl->fw_reject_code >= 0x100
1119 		    && !(frwl->fw_prot == IPPROTO_TCP
1120 		      && frwl->fw_reject_code == IPV6_FW_REJECT_RST)) {
1127 		if (frwl->fw_divert_port == 0) {
1142 	return frwl;