bsd/net/pf.c

385 	int direction, int *action)
392 	if (direction == PF_OUT &&
394 	    (*state)->rule.ptr->direction == PF_OUT) ||
396 	    (*state)->rule.ptr->direction == PF_IN)) &&
408 		*state = pf_find_state(kif, &key, direction);		 \
418 		if (pf_state_lookup_aux(state, kif, direction, &action)) \
1287 				    (((*state)->state_key->direction ==
1291 				    ((*state)->state_key->direction == PF_IN &&
1966 		if (cur->direction != prev->direction)
3375     int direction, struct pfi_kif *kif, struct pf_addr *saddr,
3392 		if (r->action == PF_BINAT && direction == PF_IN) {
3396 		} else if (r->action == PF_RDR && direction == PF_OUT) {
3413 		else if (r->direction && r->direction != direction)
3472     int direction, struct pfi_kif *kif, struct pf_src_node **sn,
3479 	if (direction == PF_OUT) {
3480 		r = pf_match_translation(pd, m, off, direction, kif, saddr,
3483 			r = pf_match_translation(pd, m, off, direction, kif,
3486 			r = pf_match_translation(pd, m, off, direction, kif,
3489 		r = pf_match_translation(pd, m, off, direction, kif, saddr,
3492 			r = pf_match_translation(pd, m, off, direction, kif,
3514 			switch (direction) {
3596 			switch (direction) {
3684 pf_socket_lookup(int direction, struct pf_pdesc *pd)
3715 	if (direction == PF_IN) {
4007 		sk->direction = psk->direction;
4048 pf_test_rule(struct pf_rule **rm, struct pf_state **sm, int direction,
4077 	if (direction == PF_IN && pf_check_congestion(ifq)) {
4147 	if (direction == PF_OUT) {
4156 				pf_change_ap(direction, pd->mp, saddr,
4163 				pf_change_ap(direction, pd->mp, saddr,
4254 				pf_change_ap(direction, pd->mp, daddr,
4261 				pf_change_ap(direction, pd->mp, daddr,
4349 		else if (r->direction && r->direction != direction)
4399 		    pf_socket_lookup(direction, pd), 1)) &&
4405 		    pf_socket_lookup(direction, pd), 1)) &&
4458 		PFLOG_PACKET(kif, h, m, af, direction, reason, r->log ? r : nr,
4468 			if (direction == PF_OUT) {
4471 					pf_change_ap(direction, pd->mp, saddr,
4479 					pf_change_ap(direction, pd->mp, saddr,
4544 					pf_change_ap(direction, pd->mp, daddr,
4552 					pf_change_ap(direction, pd->mp, daddr,
4674 	psk.direction = direction;
4688 	if (direction == PF_OUT) {
4788 		    direction == PF_OUT) {
4828 		    ((direction == PF_OUT &&
4985 				u_int16_t dport = (direction == PF_OUT) ?
5061 				if (direction == PF_OUT) {
5062 					pf_change_ap(direction, pd->mp, saddr,
5068 					pf_change_ap(direction, pd->mp, daddr,
5104 				sk->app_state->handler(s, direction, offx,
5141 pf_test_dummynet(struct pf_rule **rm, int direction, struct pfi_kif *kif,
5222 		else if (r->direction && r->direction != direction)
5313 		PFLOG_PACKET(kif, h, m, af, direction, reason, r,
5318 		int dirndx = (direction == PF_OUT);
5332 		int dirndx = (direction == PF_OUT);
5385 				direction == PF_IN ? DN_TO_IP_IN : DN_TO_IP_OUT :
5386 				direction == PF_IN ? DN_TO_IP6_IN : DN_TO_IP6_OUT,
5403 pf_test_fragment(struct pf_rule **rm, int direction, struct pfi_kif *kif,
5421 		else if (r->direction && r->direction != direction)
5483 		PFLOG_PACKET(kif, h, m, af, direction, reason, r, a, ruleset,
5498 pf_pptp_handler(struct pf_state *s, int direction, int off,
5501 #pragma unused(direction)
5594 	switch (sk->direction) {
5844 pf_test_state_tcp(struct pf_state **state, int direction, struct pfi_kif *kif,
5861 	if (direction == PF_IN)	{
5875 	if (direction == (*state)->state_key->direction) {
5884 		if (direction != (*state)->state_key->direction) {
5915 		if (direction == PF_OUT) {
5922 		if (direction == (*state)->state_key->direction) {
5981 		/* XXX make sure it's the same direction ?? */
6254 			    direction == PF_IN ? "in" : "out",
6255 			    direction == (*state)->state_key->direction ?
6312 			    direction == PF_IN ? "in" : "out",
6313 			    direction == (*state)->state_key->direction ?
6333 		(*state)->state_key->app_state->handler(*state, direction,
6344 		if (direction == PF_OUT)
6345 			pf_change_ap(direction, pd->mp, pd->src, &th->th_sport,
6350 			pf_change_ap(direction, pd->mp, pd->dst, &th->th_dport,
6372 pf_test_state_udp(struct pf_state **state, int direction, struct pfi_kif *kif,
6386 	if (direction == PF_IN)	{
6454 	if (pf_state_lookup_aux(state, kif, direction, &action))
6457 	if (direction == (*state)->state_key->direction) {
6488 		(*state)->state_key->app_state->handler(*state, direction,
6505 		if (direction == PF_OUT)
6506 			pf_change_ap(direction, pd->mp, pd->src, &uh->uh_sport,
6511 			pf_change_ap(direction, pd->mp, pd->dst, &uh->uh_dport,
6522 pf_test_state_icmp(struct pf_state **state, int direction, struct pfi_kif *kif,
6573 		if (direction == PF_IN)	{
6592 			if (direction == PF_OUT) {
6799 			if (direction == PF_IN)	{
6813 			if (direction == (*state)->state_key->direction) {
6852 				if (direction == PF_IN) {
6910 			if (direction == PF_IN)	{
6931 				if (direction == PF_IN &&
6977 			if (pf_state_lookup_aux(state, kif, direction, &action))
6981 				if (direction == PF_IN) {
7036 			if (direction == PF_IN)	{
7051 				if (direction == PF_IN) {
7090 			if (direction == PF_IN)	{
7105 				if (direction == PF_IN) {
7136 			if (direction == PF_IN)	{
7151 				if (direction == PF_IN) {
7196 pf_test_state_grev1(struct pf_state **state, int direction,
7209 	if (direction == PF_IN)	{
7221 	if (direction == (*state)->state_key->direction) {
7251 		if (direction == PF_OUT) {
7297 pf_test_state_esp(struct pf_state **state, int direction, struct pfi_kif *kif,
7310 	if (direction == PF_IN)	{
7320 	*state = pf_find_state(kif, &key, direction);
7331 		if (direction == PF_IN) {
7334 			s = pf_find_state(kif, &key, direction);
7352 			s = pf_find_state(kif, &key, direction);
7394 	if (pf_state_lookup_aux(state, kif, direction, &action))
7397 	if (direction == (*state)->state_key->direction) {
7421 		if (direction == PF_OUT) {
7460 pf_test_state_other(struct pf_state **state, int direction, struct pfi_kif *kif,
7469 	if (direction == PF_IN)	{
7483 	if (direction == (*state)->state_key->direction) {
7506 		if (direction == PF_OUT) {
7717 		if ((r->rt == PF_REPLYTO) == (r->direction == dir))
7888 		if ((r->rt == PF_REPLYTO) == (r->direction == dir))
8530 			dirndx = (dir == sk->direction) ? 0 : 1;
8545 				x = (sk == NULL || sk->direction == dir) ?
8548 				x = (sk == NULL || sk->direction == dir) ?
8560 			    sk->direction == dir) ?
8566 			    sk->direction == dir) ? pd.dst : pd.src, pd.af,
9121 			dirndx = (dir == sk->direction) ? 0 : 1;
9136 				x = (s == NULL || sk->direction == dir) ?
9139 				x = (s == NULL || sk->direction == dir) ?
9151 			    sk->direction == dir) ? pd.src : pd.dst, pd.af,
9156 			    sk->direction == dir) ? pd.dst : pd.src, pd.af,