bsd/netinet6/ip6_fw.c

182 static int	add_entry6 __P((struct ip6_fw_head *chainptr, struct ip6_fw *frwl));
184 static int	zero_entry6 __P((struct ip6_fw *frwl));
906 add_entry6(struct ip6_fw_head *chainptr, struct ip6_fw *frwl)
922 	bcopy(frwl, ftmp, sizeof(struct ip6_fw));
969 	bcopy(ftmp, frwl, sizeof(struct ip6_fw));
1000 zero_entry6(struct ip6_fw *frwl)
1012 		if (!frwl || frwl->fw_number == 0 || frwl->fw_number == fcp->rule->fw_number) {
1019 		if (frwl)
1021 			    "ip6fw: Entry %d cleared.\n", frwl->fw_number);
1031 check_ip6fw_struct(struct ip6_fw *frwl)
1034 	if ((frwl->fw_flg & ~IPV6_FW_F_MASK) != 0) {
1036 		    err_prefix, frwl->fw_flg));
1040 	if (!(frwl->fw_flg & (IPV6_FW_F_IN | IPV6_FW_F_OUT))) {
1045 	if (((frwl->fw_flg & IPV6_FW_F_IIFNAME)
1046 	      && !*frwl->fw_in_if.fu_via_if.name)
1047 	    || ((frwl->fw_flg & IPV6_FW_F_OIFNAME)
1048 	      && !*frwl->fw_out_if.fu_via_if.name)) {
1053 	if ((frwl->fw_flg & IF6_FW_F_VIAHACK) == IF6_FW_F_VIAHACK) {
1055 	} else if ((frwl->fw_flg & IPV6_FW_F_IN)
1056 	    && (frwl->fw_flg & IPV6_FW_F_OIFACE)) {
1062 	if ((frwl->fw_flg & IPV6_FW_F_SRNG) && IPV6_FW_GETNSRCP(frwl) < 2) {
1064 		    err_prefix, IPV6_FW_GETNSRCP(frwl)));
1067 	if ((frwl->fw_flg & IPV6_FW_F_DRNG) && IPV6_FW_GETNDSTP(frwl) < 2) {
1069 		    err_prefix, IPV6_FW_GETNDSTP(frwl)));
1072 	if (IPV6_FW_GETNSRCP(frwl) + IPV6_FW_GETNDSTP(frwl) > IPV6_FW_MAX_PORTS) {
1074 		    err_prefix, IPV6_FW_GETNSRCP(frwl), IPV6_FW_GETNDSTP(frwl)));
1080 	if ((frwl->fw_prot != IPPROTO_TCP) &&
1081 	    (frwl->fw_prot != IPPROTO_UDP) &&
1082 	    (IPV6_FW_GETNSRCP(frwl) || IPV6_FW_GETNDSTP(frwl))) {
1093 	if ((frwl->fw_src.s6_addr32[0] & (~frwl->fw_smsk.s6_addr32[0])) ||
1094 		(frwl->fw_src.s6_addr32[1] & (~frwl->fw_smsk.s6_addr32[1])) ||
1095 		(frwl->fw_src.s6_addr32[2] & (~frwl->fw_smsk.s6_addr32[2])) ||
1096 		(frwl->fw_src.s6_addr32[3] & (~frwl->fw_smsk.s6_addr32[3])) ||
1097 		(frwl->fw_dst.s6_addr32[0] & (~frwl->fw_dmsk.s6_addr32[0])) ||
1098 		(frwl->fw_dst.s6_addr32[1] & (~frwl->fw_dmsk.s6_addr32[1])) ||
1099 		(frwl->fw_dst.s6_addr32[2] & (~frwl->fw_dmsk.s6_addr32[2])) ||
1100 		(frwl->fw_dst.s6_addr32[3] & (~frwl->fw_dmsk.s6_addr32[3]))) {
1105 	if ((frwl->fw_flg & IPV6_FW_F_FRAG) &&
1106 		(frwl->fw_prot == IPPROTO_UDP || frwl->fw_prot == IPPROTO_TCP)) {
1107 		if (frwl->fw_nports) {
1111 		if (frwl->fw_prot == IPPROTO_TCP &&
1112 			frwl->fw_tcpf != frwl->fw_tcpnf) {
1119 	switch (frwl->fw_flg & IPV6_FW_F_COMMAND)
1122 		if (frwl->fw_reject_code >= 0x100
1123 		    && !(frwl->fw_prot == IPPROTO_TCP
1124 		      && frwl->fw_reject_code == IPV6_FW_REJECT_RST)) {
1131 		if (frwl->fw_divert_port == 0) {
1146 	return frwl;