Cross Reference: /src/sys/dist/pf/net/pf.c

Lines Matching defs:rule
283 		    (((*state)->rule.ptr->rt == PF_ROUTETO &&		\
284 		      (*state)->rule.ptr->direction == PF_OUT) ||	\
285 		     ((*state)->rule.ptr->rt == PF_REPLYTO &&		\
286 		      (*state)->rule.ptr->direction == PF_IN)) &&	\
305 		s->rule.ptr->states++;			\
318 		s->rule.ptr->states--;			\
365 	if (a->rule.ptr > b->rule.ptr)
367 	if (a->rule.ptr < b->rule.ptr)
685 	if ((*state)->rule.ptr->max_src_conn &&
686 	    (*state)->rule.ptr->max_src_conn <
692 	if ((*state)->rule.ptr->max_src_conn_rate.limit &&
701 	if ((*state)->rule.ptr->overload_tbl) {
729 		pfr_insert_kentry((*state)->rule.ptr->overload_tbl,
733 		if ((*state)->rule.ptr->flush) {
742 				 * from the same rule if PF_FLUSH_GLOBAL is not
754 				    ((*state)->rule.ptr->flush &
756 				    (*state)->rule.ptr == st->rule.ptr)) {
777 pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule,
785 		if (rule->rule_flag & PFRULE_RULESRCTRACK ||
786 		    rule->rpool.opts & PF_POOL_STICKYADDR)
787 			k.rule.ptr = rule;
789 			k.rule.ptr = NULL;
794 		if (!rule->max_src_nodes ||
795 		    rule->src_nodes < rule->max_src_nodes)
804 		    rule->max_src_conn_rate.limit,
805 		    rule->max_src_conn_rate.seconds);
808 		if (rule->rule_flag & PFRULE_RULESRCTRACK ||
809 		    rule->rpool.opts & PF_POOL_STICKYADDR)
810 			(*sn)->rule.ptr = rule;
812 			(*sn)->rule.ptr = NULL;
825 		(*sn)->ruletype = rule->action;
826 		if ((*sn)->rule.ptr != NULL)
827 			(*sn)->rule.ptr->src_nodes++;
831 		if (rule->max_src_states &&
832 		    (*sn)->states >= rule->max_src_states) {
985 	timeout = state->rule.ptr->timeout[state->timeout];
988 	start = state->rule.ptr->timeout[PFTM_ADAPTIVE_START];
990 		end = state->rule.ptr->timeout[PFTM_ADAPTIVE_END];
991 		states = state->rule.ptr->states;
1023 			 if (cur->rule.ptr != NULL) {
1024 				 cur->rule.ptr->src_nodes--;
1025 				 if (cur->rule.ptr->states <= 0 &&
1026 				     cur->rule.ptr->max_src_nodes <= 0)
1027 					 pf_rm_rule(NULL, cur->rule.ptr);
1049 			timeout = s->rule.ptr->timeout[PFTM_SRC_NODE];
1058 			timeout = s->rule.ptr->timeout[PFTM_SRC_NODE];
1073 		pf_send_tcp(cur->rule.ptr, cur->state_key->af,
1101 	if (--cur->rule.ptr->states <= 0 &&
1102 	    cur->rule.ptr->src_nodes <= 0)
1103 		pf_rm_rule(NULL, cur->rule.ptr);
2265 			k.rule.ptr = r;
2267 			k.rule.ptr = NULL;
2998 	struct pf_rule *r = s->rule.ptr;
3492 		/* src node for filter rule */
3499 		/* src node for translation rule */
3530 		s->rule.ptr = r;
3863 			pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
3902 			pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr,
3916 			pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
3921 			pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr,
4221 				pf_send_tcp((*state)->rule.ptr, pd->af,
4225 				    (*state)->rule.ptr->return_ttl, 1, 0,
5829 			r = s->rule.ptr;
5859 			r = s->rule.ptr;
5883 			r = s->rule.ptr;
5907 			r = s->rule.ptr;
6250 			r = s->rule.ptr;
6280 			r = s->rule.ptr;
6313 			r = s->rule.ptr;
6328 			r = s->rule.ptr;