bsd/netinet/ip_fw2.c

94 #include <netinet/ip_fw.h>
150 static struct ip_fw *layer3_chain;
178     &fw_debug, 0, "Enable printing of debug ip_fw statements");
353 							((struct ip_fw *)(rule))->cmd_len * 4 - 4)
356 							((struct ip_fw *)(rule))->cmd_len * 4 - 4)
477 	struct ip_fw *rule;
501 	struct ip_fw *rule;
521 copyto32fw_insn( struct ip_fw_32 *fw32 , struct ip_fw *user_ip_fw, int cmdsize)
555 copyto64fw_insn( struct ip_fw_64 *fw64 , struct ip_fw *user_ip_fw, int cmdsize)
589 copyto32fw( struct ip_fw *user_ip_fw, struct ip_fw_32 *fw32 , __unused size_t copysize)
614 copyto64fw( struct ip_fw *user_ip_fw, struct ip_fw_64	*fw64, size_t copysize)
642 copyfrom32fw_insn( struct ip_fw_32 *fw32 , struct ip_fw *user_ip_fw, int cmdsize)
679 copyfrom64fw_insn( struct ip_fw_64 *fw64 , struct ip_fw *user_ip_fw, int cmdsize)
715 copyfrom32fw( struct ip_fw_32	*fw32, struct ip_fw *user_ip_fw, size_t copysize)
721 	user_ip_fw->next = CAST_DOWN(struct ip_fw*, fw32->next);
722 	user_ip_fw->next_rule = CAST_DOWN_EXPLICIT(struct ip_fw*, fw32->next_rule);
740 	return( sizeof(struct ip_fw) + cmdsize - 4);
744 copyfrom64fw( struct ip_fw_64 *fw64, struct ip_fw *user_ip_fw, size_t copysize)
750 	user_ip_fw->next = CAST_DOWN_EXPLICIT(struct ip_fw*, fw64->next);
751 	user_ip_fw->next_rule = CAST_DOWN_EXPLICIT(struct ip_fw*, fw64->next_rule);
770 	return( sizeof(struct ip_fw) + cmdsize - 4);
856 sooptcopyin_fw( struct sockopt *sopt, struct ip_fw *user_ip_fw, size_t *size )
1137 ipfw_log(struct ip_fw *f, u_int hlen, struct ether_header *eh,
1380 remove_dyn_rule(struct ip_fw *rule, ipfw_dyn_rule *keep_me)
1622 add_dyn_rule(struct ip_flow_id *id, u_int8_t dyn_type, struct ip_fw *rule)
1680 lookup_dyn_parent(struct ip_flow_id *pkt, struct ip_fw *rule)
1714 install_state(struct ip_fw *rule, ipfw_insn_limit *cmd,
1797 		add_dyn_rule(&args->fwa_id, O_LIMIT, (struct ip_fw *)parent);
1931  * Given an ip_fw *, lookup_next_rule will return a pointer
1944 static struct ip_fw *
1945 lookup_next_rule(struct ip_fw *me)
1947 	struct ip_fw *rule = NULL;
2035 	struct ip_fw *f = NULL;		/* matching rule */
2794 	struct ip_fw *rule;
2808 	struct ip_fw *rule;
2833 add_rule(struct ip_fw **head, struct ip_fw *input_rule)
2835 	struct ip_fw *rule, *f, *prev;
2919 static struct ip_fw *
2920 delete_rule(struct ip_fw **head, struct ip_fw *prev, struct ip_fw *rule)
2922 	struct ip_fw *n;
2946 print_chain(struct ip_fw **chain)
2948 	struct ip_fw *rule = *chain;
3005 	struct ip_fw *inactive_rule = (struct ip_fw *)param;
3006 	struct ip_fw *rule, *prev;
3012 			struct ip_fw *n = rule;
3036 mark_inactive(struct ip_fw **prev, struct ip_fw **rule)
3060 free_chain(struct ip_fw **chain, int kill_default)
3062 	struct ip_fw *prev, *rule;
3099 del_entry(struct ip_fw **chain, u_int32_t arg)
3101 	struct ip_fw *prev = NULL, *rule = *chain;
3201 clear_counters(struct ip_fw *rule, int log_only)
3222 	struct ip_fw *rule;
3263 check_ipfw_struct(struct ip_fw *rule, int size)
3478 	struct ip_fw *bp , *buf, *rule;
3565 				bp = (struct ip_fw *)((char *)bp + rulesize_64);
3573 				bp = (struct ip_fw *)((char *)bp + rulesize_32);
3664 					bp = (struct ip_fw *)((char *)bp + j);
3707 						bp = (struct ip_fw *)((char *)bp + rulesize_64);
3712 						bp = (struct ip_fw *)((char *)bp + rulesize_32);
3847 		struct ip_fw	temp_rule;
3851 		bzero(&temp_rule, sizeof(struct ip_fw));
3902 		struct ip_fw temp_rule;
3904 		bzero(&temp_rule, sizeof(struct ip_fw));
3957 struct ip_fw *ip_fw_default_rule;
4036 	struct ip_fw default_rule;