Lines Matching refs:rule

519 pf_nvdivert_to_divert(const nvlist_t *nvl, struct pfctl_rule *rule)  in pf_nvdivert_to_divert()  argument
521 pf_nvaddr_to_addr(nvlist_get_nvlist(nvl, "addr"), &rule->divert.addr); in pf_nvdivert_to_divert()
522 rule->divert.port = nvlist_get_number(nvl, "port"); in pf_nvdivert_to_divert()
526 pf_nvrule_to_rule(const nvlist_t *nvl, struct pfctl_rule *rule) in pf_nvrule_to_rule() argument
532 rule->nr = nvlist_get_number(nvl, "nr"); in pf_nvrule_to_rule()
534 pf_nvrule_addr_to_rule_addr(nvlist_get_nvlist(nvl, "src"), &rule->src); in pf_nvrule_to_rule()
535 pf_nvrule_addr_to_rule_addr(nvlist_get_nvlist(nvl, "dst"), &rule->dst); in pf_nvrule_to_rule()
541 rule->skip[i].nr = skip[i]; in pf_nvrule_to_rule()
546 strlcpy(rule->label[i], labels[i], PF_RULE_LABEL_SIZE); in pf_nvrule_to_rule()
547 rule->ridentifier = nvlist_get_number(nvl, "ridentifier"); in pf_nvrule_to_rule()
548 strlcpy(rule->ifname, nvlist_get_string(nvl, "ifname"), IFNAMSIZ); in pf_nvrule_to_rule()
549 strlcpy(rule->qname, nvlist_get_string(nvl, "qname"), PF_QNAME_SIZE); in pf_nvrule_to_rule()
550 strlcpy(rule->pqname, nvlist_get_string(nvl, "pqname"), PF_QNAME_SIZE); in pf_nvrule_to_rule()
551 strlcpy(rule->tagname, nvlist_get_string(nvl, "tagname"), in pf_nvrule_to_rule()
553 strlcpy(rule->match_tagname, nvlist_get_string(nvl, "match_tagname"), in pf_nvrule_to_rule()
556 strlcpy(rule->overload_tblname, nvlist_get_string(nvl, "overload_tblname"), in pf_nvrule_to_rule()
559 pf_nvpool_to_pool(nvlist_get_nvlist(nvl, "rpool"), &rule->rpool); in pf_nvrule_to_rule()
561 rule->evaluations = nvlist_get_number(nvl, "evaluations"); in pf_nvrule_to_rule()
562 pf_nvuint_64_array(nvl, "packets", 2, rule->packets, NULL); in pf_nvrule_to_rule()
563 pf_nvuint_64_array(nvl, "bytes", 2, rule->bytes, NULL); in pf_nvrule_to_rule()
566 rule->last_active_timestamp = nvlist_get_number(nvl, "timestamp"); in pf_nvrule_to_rule()
569 rule->os_fingerprint = nvlist_get_number(nvl, "os_fingerprint"); in pf_nvrule_to_rule()
571 rule->rtableid = nvlist_get_number(nvl, "rtableid"); in pf_nvrule_to_rule()
572 pf_nvuint_32_array(nvl, "timeout", PFTM_MAX, rule->timeout, NULL); in pf_nvrule_to_rule()
573 rule->max_states = nvlist_get_number(nvl, "max_states"); in pf_nvrule_to_rule()
574 rule->max_src_nodes = nvlist_get_number(nvl, "max_src_nodes"); in pf_nvrule_to_rule()
575 rule->max_src_states = nvlist_get_number(nvl, "max_src_states"); in pf_nvrule_to_rule()
576 rule->max_src_conn = nvlist_get_number(nvl, "max_src_conn"); in pf_nvrule_to_rule()
577 rule->max_src_conn_rate.limit = in pf_nvrule_to_rule()
579 rule->max_src_conn_rate.seconds = in pf_nvrule_to_rule()
581 rule->qid = nvlist_get_number(nvl, "qid"); in pf_nvrule_to_rule()
582 rule->pqid = nvlist_get_number(nvl, "pqid"); in pf_nvrule_to_rule()
583 rule->dnpipe = nvlist_get_number(nvl, "dnpipe"); in pf_nvrule_to_rule()
584 rule->dnrpipe = nvlist_get_number(nvl, "dnrpipe"); in pf_nvrule_to_rule()
585 rule->free_flags = nvlist_get_number(nvl, "dnflags"); in pf_nvrule_to_rule()
586 rule->prob = nvlist_get_number(nvl, "prob"); in pf_nvrule_to_rule()
587 rule->cuid = nvlist_get_number(nvl, "cuid"); in pf_nvrule_to_rule()
588 rule->cpid = nvlist_get_number(nvl, "cpid"); in pf_nvrule_to_rule()
590 rule->return_icmp = nvlist_get_number(nvl, "return_icmp"); in pf_nvrule_to_rule()
591 rule->return_icmp6 = nvlist_get_number(nvl, "return_icmp6"); in pf_nvrule_to_rule()
592 rule->max_mss = nvlist_get_number(nvl, "max_mss"); in pf_nvrule_to_rule()
593 rule->scrub_flags = nvlist_get_number(nvl, "scrub_flags"); in pf_nvrule_to_rule()
595 pf_nvrule_uid_to_rule_uid(nvlist_get_nvlist(nvl, "uid"), &rule->uid); in pf_nvrule_to_rule()
597 (struct pf_rule_uid *)&rule->gid); in pf_nvrule_to_rule()
599 rule->rule_flag = nvlist_get_number(nvl, "rule_flag"); in pf_nvrule_to_rule()
600 rule->action = nvlist_get_number(nvl, "action"); in pf_nvrule_to_rule()
601 rule->direction = nvlist_get_number(nvl, "direction"); in pf_nvrule_to_rule()
602 rule->log = nvlist_get_number(nvl, "log"); in pf_nvrule_to_rule()
603 rule->logif = nvlist_get_number(nvl, "logif"); in pf_nvrule_to_rule()
604 rule->quick = nvlist_get_number(nvl, "quick"); in pf_nvrule_to_rule()
605 rule->ifnot = nvlist_get_number(nvl, "ifnot"); in pf_nvrule_to_rule()
606 rule->match_tag_not = nvlist_get_number(nvl, "match_tag_not"); in pf_nvrule_to_rule()
607 rule->natpass = nvlist_get_number(nvl, "natpass"); in pf_nvrule_to_rule()
609 rule->keep_state = nvlist_get_number(nvl, "keep_state"); in pf_nvrule_to_rule()
610 rule->af = nvlist_get_number(nvl, "af"); in pf_nvrule_to_rule()
611 rule->proto = nvlist_get_number(nvl, "proto"); in pf_nvrule_to_rule()
612 rule->type = nvlist_get_number(nvl, "type"); in pf_nvrule_to_rule()
613 rule->code = nvlist_get_number(nvl, "code"); in pf_nvrule_to_rule()
614 rule->flags = nvlist_get_number(nvl, "flags"); in pf_nvrule_to_rule()
615 rule->flagset = nvlist_get_number(nvl, "flagset"); in pf_nvrule_to_rule()
616 rule->min_ttl = nvlist_get_number(nvl, "min_ttl"); in pf_nvrule_to_rule()
617 rule->allow_opts = nvlist_get_number(nvl, "allow_opts"); in pf_nvrule_to_rule()
618 rule->rt = nvlist_get_number(nvl, "rt"); in pf_nvrule_to_rule()
619 rule->return_ttl = nvlist_get_number(nvl, "return_ttl"); in pf_nvrule_to_rule()
620 rule->tos = nvlist_get_number(nvl, "tos"); in pf_nvrule_to_rule()
621 rule->set_tos = nvlist_get_number(nvl, "set_tos"); in pf_nvrule_to_rule()
622 rule->anchor_relative = nvlist_get_number(nvl, "anchor_relative"); in pf_nvrule_to_rule()
623 rule->anchor_wildcard = nvlist_get_number(nvl, "anchor_wildcard"); in pf_nvrule_to_rule()
625 rule->flush = nvlist_get_number(nvl, "flush"); in pf_nvrule_to_rule()
626 rule->prio = nvlist_get_number(nvl, "prio"); in pf_nvrule_to_rule()
627 pf_nvuint_8_array(nvl, "set_prio", 2, rule->set_prio, NULL); in pf_nvrule_to_rule()
629 pf_nvdivert_to_divert(nvlist_get_nvlist(nvl, "divert"), rule); in pf_nvrule_to_rule()
631 rule->states_cur = nvlist_get_number(nvl, "states_cur"); in pf_nvrule_to_rule()
632 rule->states_tot = nvlist_get_number(nvl, "states_tot"); in pf_nvrule_to_rule()
633 rule->src_nodes = nvlist_get_number(nvl, "src_nodes"); in pf_nvrule_to_rule()
674 pfctl_nveth_rule_to_eth_rule(const nvlist_t *nvl, struct pfctl_eth_rule *rule) in pfctl_nveth_rule_to_eth_rule() argument
679 rule->nr = nvlist_get_number(nvl, "nr"); in pfctl_nveth_rule_to_eth_rule()
680 rule->quick = nvlist_get_bool(nvl, "quick"); in pfctl_nveth_rule_to_eth_rule()
681 strlcpy(rule->ifname, nvlist_get_string(nvl, "ifname"), IFNAMSIZ); in pfctl_nveth_rule_to_eth_rule()
682 rule->ifnot = nvlist_get_bool(nvl, "ifnot"); in pfctl_nveth_rule_to_eth_rule()
683 rule->direction = nvlist_get_number(nvl, "direction"); in pfctl_nveth_rule_to_eth_rule()
684 rule->proto = nvlist_get_number(nvl, "proto"); in pfctl_nveth_rule_to_eth_rule()
685 strlcpy(rule->match_tagname, nvlist_get_string(nvl, "match_tagname"), in pfctl_nveth_rule_to_eth_rule()
687 rule->match_tag = nvlist_get_number(nvl, "match_tag"); in pfctl_nveth_rule_to_eth_rule()
688 rule->match_tag_not = nvlist_get_bool(nvl, "match_tag_not"); in pfctl_nveth_rule_to_eth_rule()
693 strlcpy(rule->label[i], labels[i], PF_RULE_LABEL_SIZE); in pfctl_nveth_rule_to_eth_rule()
694 rule->ridentifier = nvlist_get_number(nvl, "ridentifier"); in pfctl_nveth_rule_to_eth_rule()
697 &rule->src); in pfctl_nveth_rule_to_eth_rule()
699 &rule->dst); in pfctl_nveth_rule_to_eth_rule()
702 &rule->ipsrc); in pfctl_nveth_rule_to_eth_rule()
704 &rule->ipdst); in pfctl_nveth_rule_to_eth_rule()
706 rule->evaluations = nvlist_get_number(nvl, "evaluations"); in pfctl_nveth_rule_to_eth_rule()
707 rule->packets[0] = nvlist_get_number(nvl, "packets-in"); in pfctl_nveth_rule_to_eth_rule()
708 rule->packets[1] = nvlist_get_number(nvl, "packets-out"); in pfctl_nveth_rule_to_eth_rule()
709 rule->bytes[0] = nvlist_get_number(nvl, "bytes-in"); in pfctl_nveth_rule_to_eth_rule()
710 rule->bytes[1] = nvlist_get_number(nvl, "bytes-out"); in pfctl_nveth_rule_to_eth_rule()
713 rule->last_active_timestamp = nvlist_get_number(nvl, "timestamp"); in pfctl_nveth_rule_to_eth_rule()
716 strlcpy(rule->qname, nvlist_get_string(nvl, "qname"), PF_QNAME_SIZE); in pfctl_nveth_rule_to_eth_rule()
717 strlcpy(rule->tagname, nvlist_get_string(nvl, "tagname"), in pfctl_nveth_rule_to_eth_rule()
720 rule->dnpipe = nvlist_get_number(nvl, "dnpipe"); in pfctl_nveth_rule_to_eth_rule()
721 rule->dnflags = nvlist_get_number(nvl, "dnflags"); in pfctl_nveth_rule_to_eth_rule()
723 rule->anchor_relative = nvlist_get_number(nvl, "anchor_relative"); in pfctl_nveth_rule_to_eth_rule()
724 rule->anchor_wildcard = nvlist_get_number(nvl, "anchor_wildcard"); in pfctl_nveth_rule_to_eth_rule()
726 strlcpy(rule->bridge_to, nvlist_get_string(nvl, "bridge_to"), in pfctl_nveth_rule_to_eth_rule()
729 rule->action = nvlist_get_number(nvl, "action"); in pfctl_nveth_rule_to_eth_rule()
805 const char *path, struct pfctl_eth_rule *rule, bool clear, in pfctl_get_eth_rule() argument
821 pfctl_nveth_rule_to_eth_rule(nvl, rule); in pfctl_get_eth_rule()
1047 pr.rule.action = ruleset; in pfctl_get_rules_info()
1060 uint32_t ruleset, struct pfctl_rule *rule, char *anchor_call) in pfctl_get_rule() argument
1062 return (pfctl_get_clear_rule(dev, nr, ticket, anchor, ruleset, rule, in pfctl_get_rule()
1067 const char *anchor, uint32_t ruleset, struct pfctl_rule *rule, in pfctl_get_clear_rule() argument
1088 pf_nvrule_to_rule(nvlist_get_nvlist(nvl, "rule"), rule); in pfctl_get_clear_rule()
1173 ps->rule = ntohl(s->rule); in pf_state_export_to_state()