Lines Matching refs:nat
8 * Simple ISAKMP transparent proxy for in-kernel use. For use with the NAT
132 ipf_p_ipsec_new(void *arg, fr_info_t *fin, ap_session_t *aps, nat_t *nat)
162 if (ipf_nat_outlookup(fin, 0, IPPROTO_ESP, nat->nat_nsrcip,
166 np = nat->nat_ptr;
185 * Create NAT rule against which the tunnel/transport mapping is
186 * created. This is required because the current NAT rule does not
197 ipn->in_snip = ntohl(nat->nat_nsrcaddr);
199 ipn->in_osrcip = nat->nat_osrcip;
201 ipn->in_nsrcip = nat->nat_nsrcip;
203 ipn->in_odstip = nat->nat_odstip;
205 ipn->in_ndstip = nat->nat_ndstip;
211 MUTEX_INIT(&ipn->in_lock, "IPSec proxy NAT rule");
260 * For outgoing IKE packets. refresh timeouts for NAT & state entries, if
264 ipf_p_ipsec_inout(void *arg, fr_info_t *fin, ap_session_t *aps, nat_t *nat)
273 if ((fin->fin_out == 1) && (nat->nat_dir == NAT_INBOUND))
276 if ((fin->fin_out == 0) && (nat->nat_dir == NAT_OUTBOUND))
297 * Update NAT timeout/create NAT if missing.
311 nat->nat_dir);
328 ipsec->ipsc_state->is_die = nat->nat_age;
344 * This extends the NAT matching to be based on the cookies associated with
350 ipf_p_ipsec_match(fr_info_t *fin, ap_session_t *aps, nat_t *nat)
357 nat = nat; /* LINT */
400 * Don't bother changing any of the NAT structure details,
Indexes created Wed Oct 22 13:09:56 GMT 2025