Lines Matching refs:dst
364 pd->dst = (struct pf_addr *)&h->ip_dst;
372 pd->dst = (struct pf_addr *)&h->ip6_dst;
1095 pf_addrcpy(struct pf_addr *dst, struct pf_addr *src, sa_family_t af)
1100 dst->addr32[0] = src->addr32[0];
1104 dst->addr32[0] = src->addr32[0];
1105 dst->addr32[1] = src->addr32[1];
1106 dst->addr32[2] = src->addr32[2];
1107 dst->addr32[3] = src->addr32[3];
1298 st->src.state = st->dst.state =
1312 (*state)->src.state = (*state)->dst.state = TCPS_CLOSED;
1910 if (s->src.wscale && s->dst.wscale)
1913 printf(" [lo=%u high=%u win=%u modulator=%u", s->dst.seqlo,
1914 s->dst.seqhi, s->dst.max_win, s->dst.seqdiff);
1915 if (s->src.wscale && s->dst.wscale)
1916 printf(" wscale=%u", s->dst.wscale & PF_WSCALE_MASK);
1918 printf(" %u:%u", s->src.state, s->dst.state);
1994 if (cur->dst.neg != prev->dst.neg ||
1995 pf_addr_wrap_neq(&cur->dst.addr, &prev->dst.addr))
1998 union pf_rule_xport *cx = &cur->dst.xport;
1999 union pf_rule_xport *px = &prev->dst.xport;
2321 struct tcphdr *th, struct pf_state_peer *dst)
2350 dst->seqdiff), 0);
2353 dst->seqdiff), 0);
3387 struct pf_rule_addr *src = NULL, *dst = NULL;
3393 src = &r->dst;
3397 dst = &r->src;
3398 src = &r->dst;
3407 dst = &r->dst;
3432 else if (dst != NULL &&
3433 PF_MISMATCHAW(&dst->addr, daddr, pd->af, dst->neg, NULL))
3438 else if (dst && !pf_match_xport(r->proto, r->proto_variant,
3439 &dst->xport, dxport))
3598 if (r->dst.addr.type == PF_ADDR_DYNIFTL) {
3599 if (r->dst.addr.p.dyn == NULL)
3604 if (r->dst.addr.p.dyn->
3608 &r->dst.addr.p.dyn->
3610 &r->dst.addr.p.dyn->
3617 if (r->dst.addr.p.dyn->
3621 &r->dst.addr.p.dyn->
3623 &r->dst.addr.p.dyn->
3631 &r->dst.addr.v.a.addr,
3632 &r->dst.addr.v.a.mask,
3635 if (nxport && r->dst.xport.range.port[0])
3637 r->dst.xport.range.port[0];
3655 ntohs(r->dst.xport.range.
3717 daddr = pd->dst;
3724 saddr = pd->dst;
3876 struct sockaddr_in *dst;
3892 dst = (struct sockaddr_in *)(void *)&ro.ro_dst;
3893 dst->sin_family = AF_INET;
3894 dst->sin_len = sizeof (*dst);
3895 dst->sin_addr = addr->v4;
4037 MD5Update(&ctx, (char *)&pd->dst->v6, sizeof (struct in6_addr));
4040 MD5Update(&ctx, (char *)&pd->dst->v4, sizeof (struct in_addr));
4055 struct pf_addr *saddr = pd->src, *daddr = pd->dst;
4366 else if (PF_MISMATCHAW(&r->dst.addr, daddr, af,
4367 r->dst.neg, NULL))
4372 r->dst.xport.range.op &&
4373 !pf_match_port(r->dst.xport.range.op,
4374 r->dst.xport.range.port[0], r->dst.xport.range.port[1],
4651 pf_send_tcp(r, af, pd->dst,
4900 s->dst.seqhi = 1;
4901 s->dst.max_win = 1;
4903 s->dst.state = TCPS_CLOSED;
4908 s->dst.state = PFUDPS_NO_TRAFFIC;
4919 s->dst.state = PFGRE1S_NO_TRAFFIC;
4924 s->dst.state = PFESPS_NO_TRAFFIC;
4929 s->dst.state = PFOTHERS_NO_TRAFFIC;
4950 &s->dst)) {
4959 th, s, &s->src, &s->dst, &rewrite)) {
5147 struct pf_addr *saddr = pd->src, *daddr = pd->dst;
5240 else if (PF_MISMATCHAW(&r->dst.addr, daddr, af,
5241 r->dst.neg, NULL))
5246 r->dst.xport.range.op &&
5248 !pf_match_port(r->dst.xport.range.op,
5249 r->dst.xport.range.port[0], r->dst.xport.range.port[1],
5430 else if (PF_MISMATCHAW(&r->dst.addr, pd->dst, af,
5431 r->dst.neg, NULL))
5445 (r->src.xport.range.op || r->dst.xport.range.op))
5448 (r->src.xport.range.op || r->dst.xport.range.op ||
5556 gs->src.state = gs->dst.state = PFGRE1S_NO_TRAFFIC;
5557 gs->src.scrub = gs->dst.scrub = 0;
5597 pns_state = &gs->dst.state;
5606 pac_state = &gs->dst.state;
5758 gs->src.state = gs->dst.state = PFGRE1S_NO_TRAFFIC;
5856 struct pf_state_peer *src, *dst;
5863 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
5868 PF_ACPY(&key.ext.addr, pd->dst, key.af);
5877 dst = &(*state)->dst;
5879 src = &(*state)->dst;
5880 dst = &(*state)->src;
5893 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
5930 if ((*state)->dst.seqhi == 1)
5931 (*state)->dst.seqhi = htonl(random());
5934 (*state)->dst.seqhi, 0, TH_SYN, 0,
5940 (ntohl(th->th_ack) != (*state)->dst.seqhi + 1)) {
5944 (*state)->dst.max_win = MAX(ntohs(th->th_win), 1);
5945 (*state)->dst.seqlo = ntohl(th->th_seq);
5946 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
5954 TH_ACK, (*state)->dst.max_win, 0, 0, 1,
5956 (*state)->src.seqdiff = (*state)->dst.seqhi -
5958 (*state)->dst.seqdiff = (*state)->src.seqhi -
5959 (*state)->dst.seqlo;
5961 (*state)->dst.max_win;
5962 (*state)->dst.seqhi = (*state)->dst.seqlo +
5964 (*state)->src.wscale = (*state)->dst.wscale = 0;
5965 (*state)->src.state = (*state)->dst.state =
5973 dst->state >= TCPS_FIN_WAIT_2 &&
5982 (*state)->src.state = (*state)->dst.state = TCPS_CLOSED;
5991 dws = (dst->wscale & PF_WSCALE_FLAG) ?
5992 (dst->wscale & PF_WSCALE_MASK) : TCP_MAX_WINSHIFT;
6007 if ((pd->flags & PFDESC_TCP_NORM || dst->scrub) &&
6009 if (pf_normalize_tcp_init(m, off, pd, th, src, dst)) {
6016 if (dst->seqdiff && !src->seqdiff) {
6020 ack = ntohl(th->th_ack) - dst->seqdiff;
6032 if (dst->wscale & PF_WSCALE_FLAG) {
6043 dws = dst->wscale & PF_WSCALE_MASK;
6055 u_int32_t max_win = dst->max_win;
6057 dst->wscale & PF_WSCALE_MASK;
6058 dst->max_win = MIN(0xffff, max_win);
6060 dst->wscale = 0;
6077 SEQ_GEQ(end + MAX(1, (u_int32_t)dst->max_win << dws),
6079 src->seqhi = end + MAX(1, (u_int32_t)dst->max_win << dws);
6084 ack = ntohl(th->th_ack) - dst->seqdiff;
6101 ack = dst->seqlo;
6105 (dst->state < TCPS_SYN_SENT)) {
6110 ack = dst->seqlo;
6119 ackskew = dst->seqlo - ack;
6134 if (dst->seqdiff && (th->th_off << 2) > (int)sizeof (struct tcphdr)) {
6135 copyback = pf_modulate_sack(m, off, pd, th, dst);
6148 SEQ_GEQ(seq, src->seqlo - ((u_int32_t)dst->max_win << dws)) &&
6159 if (dst->scrub || src->scrub) {
6161 *state, src, dst, ©back))
6174 if (SEQ_GEQ(ack + ((u_int32_t)win << sws), dst->seqhi))
6175 dst->seqhi = ack + MAX(((u_int32_t)win << sws), 1);
6185 if (dst->state == TCPS_SYN_SENT) {
6186 dst->state = TCPS_ESTABLISHED;
6193 } else if (dst->state == TCPS_CLOSING)
6194 dst->state = TCPS_FIN_WAIT_2;
6197 src->state = dst->state = TCPS_TIME_WAIT;
6202 dst->state >= TCPS_FIN_WAIT_2)
6205 dst->state >= TCPS_CLOSING)
6208 dst->state < TCPS_ESTABLISHED)
6211 dst->state >= TCPS_CLOSING)
6218 } else if ((dst->state < TCPS_SYN_SENT ||
6219 dst->state >= TCPS_FIN_WAIT_2 || src->state >= TCPS_FIN_WAIT_2) &&
6259 if (dst->scrub || src->scrub) {
6261 *state, src, dst, ©back))
6273 if (SEQ_GEQ(ack + ((u_int32_t)win << sws), dst->seqhi))
6274 dst->seqhi = ack + MAX(((u_int32_t)win << sws), 1);
6277 * Cannot set dst->seqhi here since this could be a shotgunned
6285 src->state = dst->state = TCPS_TIME_WAIT;
6290 if ((*state)->dst.state == TCPS_SYN_SENT &&
6295 pd->dst, pd->src, th->th_dport,
6318 src->seqlo - ((u_int32_t)dst->max_win << dws)) ?
6350 pf_change_ap(direction, pd->mp, pd->dst, &th->th_dport,
6376 struct pf_state_peer *src, *dst;
6388 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
6394 PF_ACPY(&key.ext.addr, pd->dst, key.af);
6459 dst = &(*state)->dst;
6461 src = &(*state)->dst;
6462 dst = &(*state)->src;
6468 if (dst->state == PFUDPS_SINGLE)
6469 dst->state = PFUDPS_MULTIPLE;
6473 if (src->state == PFUDPS_MULTIPLE && dst->state == PFUDPS_MULTIPLE)
6511 pf_change_ap(direction, pd->mp, pd->dst, &uh->uh_dport,
6526 struct pf_addr *saddr = pd->src, *daddr = pd->dst;
6575 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
6580 PF_ACPY(&key.ext.addr, pd->dst, key.af);
6716 pd2.dst = (struct pf_addr *)&h2.ip_dst;
6733 pd2.dst = (struct pf_addr *)&h2_6.ip6_dst;
6780 struct pf_state_peer *src, *dst;
6800 PF_ACPY(&key.ext.addr, pd2.dst, key.af);
6805 PF_ACPY(&key.lan.addr, pd2.dst, key.af);
6814 src = &(*state)->dst;
6815 dst = &(*state)->src;
6818 dst = &(*state)->dst;
6821 if (src->wscale && (dst->wscale & PF_WSCALE_FLAG))
6822 dws = dst->wscale & PF_WSCALE_MASK;
6836 src->seqlo - ((u_int32_t)dst->max_win << dws))) {
6842 pf_print_host(pd->dst, 0, pd->af);
6859 pf_change_icmp(pd2.dst, &th.th_dport,
6911 PF_ACPY(&key.ext.addr, pd2.dst, key.af);
6917 PF_ACPY(&key.lan.addr, pd2.dst, key.af);
6988 pf_change_icmp(pd2.dst, &uh.uh_dport,
7037 PF_ACPY(&key.ext.addr, pd2.dst, key.af);
7042 PF_ACPY(&key.lan.addr, pd2.dst, key.af);
7058 pf_change_icmp(pd2.dst, &iih.icmp_id,
7091 PF_ACPY(&key.ext.addr, pd2.dst, key.af);
7096 PF_ACPY(&key.lan.addr, pd2.dst, key.af);
7112 pf_change_icmp(pd2.dst, &iih.icmp6_id,
7137 PF_ACPY(&key.ext.addr, pd2.dst, key.af);
7142 PF_ACPY(&key.lan.addr, pd2.dst, key.af);
7158 pf_change_icmp(pd2.dst, NULL,
7200 struct pf_state_peer *dst;
7211 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
7215 PF_ACPY(&key.ext.addr, pd->dst, key.af);
7223 dst = &(*state)->dst;
7225 src = &(*state)->dst;
7226 dst = &(*state)->src;
7236 dst->state >= PFGRE1S_INITIATING) {
7240 dst->state = PFGRE1S_ESTABLISHED;
7273 pf_change_a(&pd->dst->v4.s_addr,
7280 PF_ACPY(pd->dst, &(*state)->state_key->lan.addr,
7302 struct pf_state_peer *dst;
7312 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
7316 PF_ACPY(&key.ext.addr, pd->dst, key.af);
7399 dst = &(*state)->dst;
7401 src = &(*state)->dst;
7402 dst = &(*state)->src;
7412 dst->state >= PFESPS_INITIATING) {
7415 dst->state = PFESPS_ESTABLISHED;
7441 pf_change_a(&pd->dst->v4.s_addr,
7448 PF_ACPY(pd->dst, &(*state)->state_key->lan.addr,
7463 struct pf_state_peer *src, *dst;
7471 PF_ACPY(&key.gwy.addr, pd->dst, key.af);
7476 PF_ACPY(&key.ext.addr, pd->dst, key.af);
7485 dst = &(*state)->dst;
7487 src = &(*state)->dst;
7488 dst = &(*state)->src;
7494 if (dst->state == PFOTHERS_SINGLE)
7495 dst->state = PFOTHERS_MULTIPLE;
7499 if (src->state == PFOTHERS_MULTIPLE && dst->state == PFOTHERS_MULTIPLE)
7527 pf_change_a(&pd->dst->v4.s_addr,
7535 PF_ACPY(pd->dst,
7601 struct sockaddr_in *dst;
7613 dst = satosin(&ro.ro_dst);
7614 dst->sin_family = AF_INET;
7615 dst->sin_len = sizeof (*dst);
7616 dst->sin_addr = addr->v4;
7647 struct sockaddr_in *dst;
7659 dst = satosin(&ro.ro_dst);
7660 dst->sin_family = AF_INET;
7661 dst->sin_len = sizeof (*dst);
7662 dst->sin_addr = addr->v4;
7693 struct sockaddr_in *dst;
7730 dst = satosin((void *)&ro->ro_dst);
7731 dst->sin_family = AF_INET;
7732 dst->sin_len = sizeof (*dst);
7733 dst->sin_addr = ip->ip_dst;
7747 dst = satosin((void *)ro->ro_rt->rt_gateway);
7759 dst->sin_addr.s_addr = naddr.v4.s_addr;
7764 dst->sin_addr.s_addr =
7798 error = ifnet_output(ifp, PF_INET, m0, ro->ro_rt, sintosa(dst));
7837 sintosa(dst));
7867 struct sockaddr_in6 *dst;
7902 dst = (struct sockaddr_in6 *)&ro->ro_dst;
7903 dst->sin6_family = AF_INET6;
7904 dst->sin6_len = sizeof (*dst);
7905 dst->sin6_addr = ip6->ip6_dst;
7927 PF_ACPY((struct pf_addr *)&dst->sin6_addr,
7932 PF_ACPY((struct pf_addr *)&dst->sin6_addr,
7956 if (IN6_IS_SCOPE_EMBED(&dst->sin6_addr))
7957 dst->sin6_addr.s6_addr16[1] = htons(ifp->if_index);
7959 error = nd6_output(ifp, ifp, m0, dst, NULL, NULL);
8132 pd.dst = (struct pf_addr *)&h->ip_dst;
8133 PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET);
8177 pd.dst = (struct pf_addr *)&h->ip_dst;
8178 PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET);
8490 (ntohl(pd.dst->v4.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET)
8555 pd.dst = x;
8561 pd.src : pd.dst, pd.af,
8564 if (tr->dst.addr.type == PF_ADDR_TABLE)
8565 pfr_update_stats(tr->dst.addr.p.tbl, (sk == NULL ||
8566 sk->direction == dir) ? pd.dst : pd.src, pd.af,
8568 tr->dst.neg);
8666 pd.dst = (struct pf_addr *)&h->ip6_dst;
8667 PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET6);
8721 pd.dst = (struct pf_addr *)&h->ip6_dst;
8722 PF_ACPY(&pd.baddr, dir == PF_OUT ? pd.src : pd.dst, AF_INET6);
9081 IN6_IS_ADDR_LOOPBACK(&pd.dst->v6))
9146 pd.dst = x;
9151 sk->direction == dir) ? pd.src : pd.dst, pd.af,
9154 if (tr->dst.addr.type == PF_ADDR_TABLE)
9155 pfr_update_stats(tr->dst.addr.p.tbl, (sk == NULL ||
9156 sk->direction == dir) ? pd.dst : pd.src, pd.af,
9158 tr->dst.neg);