netpfil/ipfw/ip_fw_dynamic.c

306 lookup_dyn_rule_locked(struct ipfw_flow_id *pkt, int i, int *match_direction,
326 		if (pkt->proto != q->id.proto || q->dyn_type == O_LIMIT_PARENT)
329 		if (IS_IP6_FLOW_ID(pkt)) {
330 			if (IN6_ARE_ADDR_EQUAL(&pkt->src_ip6, &q->id.src_ip6) &&
331 			    IN6_ARE_ADDR_EQUAL(&pkt->dst_ip6, &q->id.dst_ip6) &&
332 			    pkt->src_port == q->id.src_port &&
333 			    pkt->dst_port == q->id.dst_port) {
337 			if (IN6_ARE_ADDR_EQUAL(&pkt->src_ip6, &q->id.dst_ip6) &&
338 			    IN6_ARE_ADDR_EQUAL(&pkt->dst_ip6, &q->id.src_ip6) &&
339 			    pkt->src_port == q->id.dst_port &&
340 			    pkt->dst_port == q->id.src_port) {
345 			if (pkt->src_ip == q->id.src_ip &&
346 			    pkt->dst_ip == q->id.dst_ip &&
347 			    pkt->src_port == q->id.src_port &&
348 			    pkt->dst_port == q->id.dst_port) {
352 			if (pkt->src_ip == q->id.dst_ip &&
353 			    pkt->dst_ip == q->id.src_ip &&
354 			    pkt->src_port == q->id.dst_port &&
355 			    pkt->dst_port == q->id.src_port) {
369 	if (pkt->proto == IPPROTO_TCP) { /* update state according to flags */
371 		u_char flags = pkt->_flags & (TH_FIN | TH_SYN | TH_RST);
433 	} else if (pkt->proto == IPPROTO_UDP) {
446 ipfw_lookup_dyn_rule(struct ipfw_flow_id *pkt, int *match_direction,
452 	i = hash_packet(pkt, V_curr_dyn_buckets);
455 	q = lookup_dyn_rule_locked(pkt, i, match_direction, tcp);
608  * lookup dynamic parent rule using pkt and rule as search keys.
612 lookup_dyn_parent(struct ipfw_flow_id *pkt, int *pindex, struct ip_fw *rule)
617 	is_v6 = IS_IP6_FLOW_ID(pkt);
618 	i = hash_packet( pkt, V_curr_dyn_buckets );
624 		    pkt->proto == q->id.proto &&
625 		    pkt->src_port == q->id.src_port &&
626 		    pkt->dst_port == q->id.dst_port &&
629 			 IN6_ARE_ADDR_EQUAL(&(pkt->src_ip6),
631 			 IN6_ARE_ADDR_EQUAL(&(pkt->dst_ip6),
634 			 pkt->src_ip == q->id.src_ip &&
635 			 pkt->dst_ip == q->id.dst_ip)
639 			DEB(print_dyn_rule(pkt, q->dyn_type,
645 	return add_dyn_rule(pkt, i, O_LIMIT_PARENT, rule);