pf_if.c revision 1.5.2.2
1 1.5.2.2 skrll /* $NetBSD: pf_if.c,v 1.5.2.2 2004/08/03 10:52:23 skrll Exp $ */ 2 1.5.2.2 skrll /* $OpenBSD: pf_if.c,v 1.11 2004/03/15 11:38:23 cedric Exp $ */ 3 1.5.2.2 skrll 4 1.5.2.2 skrll /* 5 1.5.2.2 skrll * Copyright (c) 2001 Daniel Hartmeier 6 1.5.2.2 skrll * Copyright (c) 2003 Cedric Berger 7 1.5.2.2 skrll * All rights reserved. 8 1.5.2.2 skrll * 9 1.5.2.2 skrll * Redistribution and use in source and binary forms, with or without 10 1.5.2.2 skrll * modification, are permitted provided that the following conditions 11 1.5.2.2 skrll * are met: 12 1.5.2.2 skrll * 13 1.5.2.2 skrll * - Redistributions of source code must retain the above copyright 14 1.5.2.2 skrll * notice, this list of conditions and the following disclaimer. 15 1.5.2.2 skrll * - Redistributions in binary form must reproduce the above 16 1.5.2.2 skrll * copyright notice, this list of conditions and the following 17 1.5.2.2 skrll * disclaimer in the documentation and/or other materials provided 18 1.5.2.2 skrll * with the distribution. 19 1.5.2.2 skrll * 20 1.5.2.2 skrll * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 21 1.5.2.2 skrll * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 22 1.5.2.2 skrll * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 23 1.5.2.2 skrll * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 24 1.5.2.2 skrll * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 25 1.5.2.2 skrll * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 26 1.5.2.2 skrll * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 27 1.5.2.2 skrll * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 28 1.5.2.2 skrll * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 1.5.2.2 skrll * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN 30 1.5.2.2 skrll * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 31 1.5.2.2 skrll * POSSIBILITY OF SUCH DAMAGE. 32 1.5.2.2 skrll */ 33 1.5.2.2 skrll 34 1.5.2.2 skrll #ifdef _KERNEL_OPT 35 1.5.2.2 skrll #include "opt_inet.h" 36 1.5.2.2 skrll #endif 37 1.5.2.2 skrll 38 1.5.2.2 skrll #include <sys/param.h> 39 1.5.2.2 skrll #include <sys/systm.h> 40 1.5.2.2 skrll #include <sys/mbuf.h> 41 1.5.2.2 skrll #include <sys/filio.h> 42 1.5.2.2 skrll #include <sys/socket.h> 43 1.5.2.2 skrll #include <sys/socketvar.h> 44 1.5.2.2 skrll #include <sys/kernel.h> 45 1.5.2.2 skrll #include <sys/device.h> 46 1.5.2.2 skrll #include <sys/time.h> 47 1.5.2.2 skrll 48 1.5.2.2 skrll #include <net/if.h> 49 1.5.2.2 skrll #include <net/if_types.h> 50 1.5.2.2 skrll 51 1.5.2.2 skrll #include <netinet/in.h> 52 1.5.2.2 skrll #include <netinet/in_var.h> 53 1.5.2.2 skrll #include <netinet/in_systm.h> 54 1.5.2.2 skrll #include <netinet/ip.h> 55 1.5.2.2 skrll #include <netinet/ip_var.h> 56 1.5.2.2 skrll 57 1.5.2.2 skrll #include <net/pfvar.h> 58 1.5.2.2 skrll 59 1.5.2.2 skrll #ifdef INET6 60 1.5.2.2 skrll #include <netinet/ip6.h> 61 1.5.2.2 skrll #endif /* INET6 */ 62 1.5.2.2 skrll 63 1.5.2.2 skrll #define ACCEPT_FLAGS(oklist) \ 64 1.5.2.2 skrll do { \ 65 1.5.2.2 skrll if ((flags & ~(oklist)) & \ 66 1.5.2.2 skrll PFI_FLAG_ALLMASK) \ 67 1.5.2.2 skrll return (EINVAL); \ 68 1.5.2.2 skrll } while (0) 69 1.5.2.2 skrll 70 1.5.2.2 skrll #define senderr(e) do { rv = (e); goto _bad; } while (0) 71 1.5.2.2 skrll 72 1.5.2.2 skrll struct pfi_kif **pfi_index2kif; 73 1.5.2.2 skrll struct pfi_kif *pfi_self; 74 1.5.2.2 skrll int pfi_indexlim; 75 1.5.2.2 skrll struct pfi_ifhead pfi_ifs; 76 1.5.2.2 skrll struct pfi_statehead pfi_statehead; 77 1.5.2.2 skrll int pfi_ifcnt; 78 1.5.2.2 skrll struct pool pfi_addr_pl; 79 1.5.2.2 skrll long pfi_update = 1; 80 1.5.2.2 skrll struct pfr_addr *pfi_buffer; 81 1.5.2.2 skrll int pfi_buffer_cnt; 82 1.5.2.2 skrll int pfi_buffer_max; 83 1.5.2.2 skrll char pfi_reserved_anchor[PF_ANCHOR_NAME_SIZE] = 84 1.5.2.2 skrll PF_RESERVED_ANCHOR; 85 1.5.2.2 skrll char pfi_interface_ruleset[PF_RULESET_NAME_SIZE] = 86 1.5.2.2 skrll PF_INTERFACE_RULESET; 87 1.5.2.2 skrll 88 1.5.2.2 skrll void pfi_dynaddr_update(void *); 89 1.5.2.2 skrll void pfi_kifaddr_update(void *); 90 1.5.2.2 skrll #ifdef __NetBSD__ 91 1.5.2.2 skrll void pfi_kifaddr_update_if(struct ifnet *); 92 1.5.2.2 skrll #endif 93 1.5.2.2 skrll void pfi_table_update(struct pfr_ktable *, struct pfi_kif *, 94 1.5.2.2 skrll int, int); 95 1.5.2.2 skrll void pfi_instance_add(struct ifnet *, int, int); 96 1.5.2.2 skrll void pfi_address_add(struct sockaddr *, int, int); 97 1.5.2.2 skrll int pfi_if_compare(struct pfi_kif *, struct pfi_kif *); 98 1.5.2.2 skrll struct pfi_kif *pfi_if_create(const char *, struct pfi_kif *, int); 99 1.5.2.2 skrll void pfi_copy_group(char *, const char *, int); 100 1.5.2.2 skrll void pfi_dynamic_drivers(void); 101 1.5.2.2 skrll void pfi_newgroup(const char *, int); 102 1.5.2.2 skrll int pfi_skip_if(const char *, struct pfi_kif *, int); 103 1.5.2.2 skrll int pfi_unmask(void *); 104 1.5.2.2 skrll void pfi_dohooks(struct pfi_kif *); 105 1.5.2.2 skrll 106 1.5.2.2 skrll RB_PROTOTYPE(pfi_ifhead, pfi_kif, pfik_tree, pfi_if_compare); 107 1.5.2.2 skrll RB_GENERATE(pfi_ifhead, pfi_kif, pfik_tree, pfi_if_compare); 108 1.5.2.2 skrll 109 1.5.2.2 skrll #define PFI_DYNAMIC_BUSES { "pcmcia", "cardbus", "uhub" } 110 1.5.2.2 skrll #define PFI_BUFFER_MAX 0x10000 111 1.5.2.2 skrll #define PFI_MTYPE M_IFADDR 112 1.5.2.2 skrll 113 1.5.2.2 skrll #ifdef __NetBSD__ 114 1.5.2.2 skrll static void *hook_establish(struct hook_desc_head *, int, void (*)(void *), 115 1.5.2.2 skrll void *); 116 1.5.2.2 skrll static void hook_disestablish(struct hook_desc_head *, void *); 117 1.5.2.2 skrll static void dohooks(struct hook_desc_head *, int); 118 1.5.2.2 skrll 119 1.5.2.2 skrll #define HOOK_REMOVE 0x01 120 1.5.2.2 skrll #define HOOK_FREE 0x02 121 1.5.2.2 skrll #endif 122 1.5.2.2 skrll 123 1.5.2.2 skrll void 124 1.5.2.2 skrll pfi_initialize(void) 125 1.5.2.2 skrll { 126 1.5.2.2 skrll if (pfi_self != NULL) /* already initialized */ 127 1.5.2.2 skrll return; 128 1.5.2.2 skrll 129 1.5.2.2 skrll TAILQ_INIT(&pfi_statehead); 130 1.5.2.2 skrll pool_init(&pfi_addr_pl, sizeof(struct pfi_dynaddr), 0, 0, 0, 131 1.5.2.2 skrll "pfiaddrpl", &pool_allocator_nointr); 132 1.5.2.2 skrll pfi_buffer_max = 64; 133 1.5.2.2 skrll pfi_buffer = malloc(pfi_buffer_max * sizeof(*pfi_buffer), 134 1.5.2.2 skrll PFI_MTYPE, M_WAITOK); 135 1.5.2.2 skrll pfi_self = pfi_if_create("self", NULL, PFI_IFLAG_GROUP); 136 1.5.2.2 skrll pfi_dynamic_drivers(); 137 1.5.2.2 skrll } 138 1.5.2.2 skrll 139 1.5.2.2 skrll #ifdef _LKM 140 1.5.2.2 skrll void 141 1.5.2.2 skrll pfi_destroy(void) 142 1.5.2.2 skrll { 143 1.5.2.2 skrll struct pfi_kif *p; 144 1.5.2.2 skrll 145 1.5.2.2 skrll while ((p = TAILQ_FIRST(&pfi_statehead)) != NULL) { 146 1.5.2.2 skrll TAILQ_REMOVE(&pfi_statehead, p, pfik_w_states); 147 1.5.2.2 skrll free(p, PFI_MTYPE); 148 1.5.2.2 skrll } 149 1.5.2.2 skrll pool_destroy(&pfi_addr_pl); 150 1.5.2.2 skrll 151 1.5.2.2 skrll pfi_self = NULL; 152 1.5.2.2 skrll } 153 1.5.2.2 skrll #endif 154 1.5.2.2 skrll 155 1.5.2.2 skrll void 156 1.5.2.2 skrll pfi_attach_clone(struct if_clone *ifc) 157 1.5.2.2 skrll { 158 1.5.2.2 skrll pfi_initialize(); 159 1.5.2.2 skrll pfi_newgroup(ifc->ifc_name, PFI_IFLAG_CLONABLE); 160 1.5.2.2 skrll } 161 1.5.2.2 skrll 162 1.5.2.2 skrll void 163 1.5.2.2 skrll pfi_attach_ifnet(struct ifnet *ifp) 164 1.5.2.2 skrll { 165 1.5.2.2 skrll struct pfi_kif *p, *q, key; 166 1.5.2.2 skrll int s; 167 1.5.2.2 skrll 168 1.5.2.2 skrll pfi_initialize(); 169 1.5.2.2 skrll s = splsoftnet(); 170 1.5.2.2 skrll pfi_update++; 171 1.5.2.2 skrll if (ifp->if_index >= pfi_indexlim) { 172 1.5.2.2 skrll /* 173 1.5.2.2 skrll * grow pfi_index2kif, similar to ifindex2ifnet code in if.c 174 1.5.2.2 skrll */ 175 1.5.2.2 skrll size_t m, n, oldlim; 176 1.5.2.2 skrll struct pfi_kif **mp, **np; 177 1.5.2.2 skrll 178 1.5.2.2 skrll oldlim = pfi_indexlim; 179 1.5.2.2 skrll if (pfi_indexlim == 0) 180 1.5.2.2 skrll pfi_indexlim = 64; 181 1.5.2.2 skrll while (ifp->if_index >= pfi_indexlim) 182 1.5.2.2 skrll pfi_indexlim <<= 1; 183 1.5.2.2 skrll 184 1.5.2.2 skrll m = oldlim * sizeof(struct pfi_kif *); 185 1.5.2.2 skrll mp = pfi_index2kif; 186 1.5.2.2 skrll n = pfi_indexlim * sizeof(struct pfi_kif *); 187 1.5.2.2 skrll np = malloc(n, PFI_MTYPE, M_DONTWAIT); 188 1.5.2.2 skrll if (np == NULL) 189 1.5.2.2 skrll panic("pfi_attach_ifnet: " 190 1.5.2.2 skrll "cannot allocate translation table"); 191 1.5.2.2 skrll bzero(np, n); 192 1.5.2.2 skrll if (mp != NULL) 193 1.5.2.2 skrll bcopy(mp, np, m); 194 1.5.2.2 skrll pfi_index2kif = np; 195 1.5.2.2 skrll if (mp != NULL) 196 1.5.2.2 skrll free(mp, PFI_MTYPE); 197 1.5.2.2 skrll } 198 1.5.2.2 skrll 199 1.5.2.2 skrll strlcpy(key.pfik_name, ifp->if_xname, sizeof(key.pfik_name)); 200 1.5.2.2 skrll p = RB_FIND(pfi_ifhead, &pfi_ifs, &key); 201 1.5.2.2 skrll if (p == NULL) { 202 1.5.2.2 skrll /* add group */ 203 1.5.2.2 skrll pfi_copy_group(key.pfik_name, ifp->if_xname, 204 1.5.2.2 skrll sizeof(key.pfik_name)); 205 1.5.2.2 skrll q = RB_FIND(pfi_ifhead, &pfi_ifs, &key); 206 1.5.2.2 skrll if (q == NULL) 207 1.5.2.2 skrll q = pfi_if_create(key.pfik_name, pfi_self, PFI_IFLAG_GROUP); 208 1.5.2.2 skrll if (q == NULL) 209 1.5.2.2 skrll panic("pfi_attach_ifnet: " 210 1.5.2.2 skrll "cannot allocate '%s' group", key.pfik_name); 211 1.5.2.2 skrll 212 1.5.2.2 skrll /* add interface */ 213 1.5.2.2 skrll p = pfi_if_create(ifp->if_xname, q, PFI_IFLAG_INSTANCE); 214 1.5.2.2 skrll if (p == NULL) 215 1.5.2.2 skrll panic("pfi_attach_ifnet: " 216 1.5.2.2 skrll "cannot allocate '%s' interface", ifp->if_xname); 217 1.5.2.2 skrll } else 218 1.5.2.2 skrll q = p->pfik_parent; 219 1.5.2.2 skrll p->pfik_ifp = ifp; 220 1.5.2.2 skrll p->pfik_flags |= PFI_IFLAG_ATTACHED; 221 1.5.2.2 skrll #ifdef __OpenBSD__ 222 1.5.2.2 skrll p->pfik_ah_cookie = 223 1.5.2.2 skrll hook_establish(ifp->if_addrhooks, 1, pfi_kifaddr_update, p); 224 1.5.2.2 skrll #else 225 1.5.2.2 skrll p->pfik_ah_cookie = 226 1.5.2.2 skrll hook_establish(p->pfik_ifaddrhooks, 1, pfi_kifaddr_update, p); 227 1.5.2.2 skrll #endif 228 1.5.2.2 skrll pfi_index2kif[ifp->if_index] = p; 229 1.5.2.2 skrll pfi_dohooks(p); 230 1.5.2.2 skrll splx(s); 231 1.5.2.2 skrll } 232 1.5.2.2 skrll 233 1.5.2.2 skrll void 234 1.5.2.2 skrll pfi_detach_ifnet(struct ifnet *ifp) 235 1.5.2.2 skrll { 236 1.5.2.2 skrll struct pfi_kif *p, *q, key; 237 1.5.2.2 skrll int s; 238 1.5.2.2 skrll 239 1.5.2.2 skrll strlcpy(key.pfik_name, ifp->if_xname, sizeof(key.pfik_name)); 240 1.5.2.2 skrll 241 1.5.2.2 skrll s = splsoftnet(); 242 1.5.2.2 skrll pfi_update++; 243 1.5.2.2 skrll p = RB_FIND(pfi_ifhead, &pfi_ifs, &key); 244 1.5.2.2 skrll if (p == NULL) { 245 1.5.2.2 skrll printf("pfi_detach_ifnet: cannot find %s", ifp->if_xname); 246 1.5.2.2 skrll splx(s); 247 1.5.2.2 skrll return; 248 1.5.2.2 skrll } 249 1.5.2.2 skrll #ifdef __OpenBSD__ 250 1.5.2.2 skrll hook_disestablish(p->pfik_ifp->if_addrhooks, p->pfik_ah_cookie); 251 1.5.2.2 skrll #else 252 1.5.2.2 skrll hook_disestablish(p->pfik_ifaddrhooks, p->pfik_ah_cookie); 253 1.5.2.2 skrll #endif 254 1.5.2.2 skrll q = p->pfik_parent; 255 1.5.2.2 skrll p->pfik_ifp = NULL; 256 1.5.2.2 skrll p->pfik_flags &= ~PFI_IFLAG_ATTACHED; 257 1.5.2.2 skrll pfi_index2kif[ifp->if_index] = NULL; 258 1.5.2.2 skrll pfi_dohooks(p); 259 1.5.2.2 skrll pfi_maybe_destroy(p); 260 1.5.2.2 skrll splx(s); 261 1.5.2.2 skrll } 262 1.5.2.2 skrll 263 1.5.2.2 skrll struct pfi_kif * 264 1.5.2.2 skrll pfi_lookup_create(const char *name) 265 1.5.2.2 skrll { 266 1.5.2.2 skrll struct pfi_kif *p, *q, key; 267 1.5.2.2 skrll int s; 268 1.5.2.2 skrll 269 1.5.2.2 skrll s = splsoftnet(); 270 1.5.2.2 skrll p = pfi_lookup_if(name); 271 1.5.2.2 skrll if (p == NULL) { 272 1.5.2.2 skrll pfi_copy_group(key.pfik_name, name, sizeof(key.pfik_name)); 273 1.5.2.2 skrll q = pfi_lookup_if(key.pfik_name); 274 1.5.2.2 skrll if (q != NULL) 275 1.5.2.2 skrll p = pfi_if_create(name, q, PFI_IFLAG_INSTANCE); 276 1.5.2.2 skrll } 277 1.5.2.2 skrll splx(s); 278 1.5.2.2 skrll return (p); 279 1.5.2.2 skrll } 280 1.5.2.2 skrll 281 1.5.2.2 skrll struct pfi_kif * 282 1.5.2.2 skrll pfi_attach_rule(const char *name) 283 1.5.2.2 skrll { 284 1.5.2.2 skrll struct pfi_kif *p; 285 1.5.2.2 skrll 286 1.5.2.2 skrll p = pfi_lookup_create(name); 287 1.5.2.2 skrll if (p != NULL) 288 1.5.2.2 skrll p->pfik_rules++; 289 1.5.2.2 skrll return (p); 290 1.5.2.2 skrll } 291 1.5.2.2 skrll 292 1.5.2.2 skrll void 293 1.5.2.2 skrll pfi_detach_rule(struct pfi_kif *p) 294 1.5.2.2 skrll { 295 1.5.2.2 skrll if (p == NULL) 296 1.5.2.2 skrll return; 297 1.5.2.2 skrll if (p->pfik_rules > 0) 298 1.5.2.2 skrll p->pfik_rules--; 299 1.5.2.2 skrll else 300 1.5.2.2 skrll printf("pfi_detach_rule: reference count at 0\n"); 301 1.5.2.2 skrll pfi_maybe_destroy(p); 302 1.5.2.2 skrll } 303 1.5.2.2 skrll 304 1.5.2.2 skrll void 305 1.5.2.2 skrll pfi_attach_state(struct pfi_kif *p) 306 1.5.2.2 skrll { 307 1.5.2.2 skrll if (!p->pfik_states++) 308 1.5.2.2 skrll TAILQ_INSERT_TAIL(&pfi_statehead, p, pfik_w_states); 309 1.5.2.2 skrll } 310 1.5.2.2 skrll 311 1.5.2.2 skrll void 312 1.5.2.2 skrll pfi_detach_state(struct pfi_kif *p) 313 1.5.2.2 skrll { 314 1.5.2.2 skrll if (p == NULL) 315 1.5.2.2 skrll return; 316 1.5.2.2 skrll if (p->pfik_states <= 0) { 317 1.5.2.2 skrll printf("pfi_detach_state: reference count <= 0\n"); 318 1.5.2.2 skrll return; 319 1.5.2.2 skrll } 320 1.5.2.2 skrll if (!--p->pfik_states) 321 1.5.2.2 skrll TAILQ_REMOVE(&pfi_statehead, p, pfik_w_states); 322 1.5.2.2 skrll pfi_maybe_destroy(p); 323 1.5.2.2 skrll } 324 1.5.2.2 skrll 325 1.5.2.2 skrll int 326 1.5.2.2 skrll pfi_dynaddr_setup(struct pf_addr_wrap *aw, sa_family_t af) 327 1.5.2.2 skrll { 328 1.5.2.2 skrll struct pfi_dynaddr *dyn; 329 1.5.2.2 skrll char tblname[PF_TABLE_NAME_SIZE]; 330 1.5.2.2 skrll struct pf_ruleset *ruleset = NULL; 331 1.5.2.2 skrll int s, rv = 0; 332 1.5.2.2 skrll 333 1.5.2.2 skrll if (aw->type != PF_ADDR_DYNIFTL) 334 1.5.2.2 skrll return (0); 335 1.5.2.2 skrll dyn = pool_get(&pfi_addr_pl, PR_NOWAIT); 336 1.5.2.2 skrll if (dyn == NULL) 337 1.5.2.2 skrll return (1); 338 1.5.2.2 skrll bzero(dyn, sizeof(*dyn)); 339 1.5.2.2 skrll 340 1.5.2.2 skrll s = splsoftnet(); 341 1.5.2.2 skrll dyn->pfid_kif = pfi_attach_rule(aw->v.ifname); 342 1.5.2.2 skrll if (dyn->pfid_kif == NULL) 343 1.5.2.2 skrll senderr(1); 344 1.5.2.2 skrll 345 1.5.2.2 skrll dyn->pfid_net = pfi_unmask(&aw->v.a.mask); 346 1.5.2.2 skrll if (af == AF_INET && dyn->pfid_net == 32) 347 1.5.2.2 skrll dyn->pfid_net = 128; 348 1.5.2.2 skrll strlcpy(tblname, aw->v.ifname, sizeof(tblname)); 349 1.5.2.2 skrll if (aw->iflags & PFI_AFLAG_NETWORK) 350 1.5.2.2 skrll strlcat(tblname, ":network", sizeof(tblname)); 351 1.5.2.2 skrll if (aw->iflags & PFI_AFLAG_BROADCAST) 352 1.5.2.2 skrll strlcat(tblname, ":broadcast", sizeof(tblname)); 353 1.5.2.2 skrll if (aw->iflags & PFI_AFLAG_PEER) 354 1.5.2.2 skrll strlcat(tblname, ":peer", sizeof(tblname)); 355 1.5.2.2 skrll if (aw->iflags & PFI_AFLAG_NOALIAS) 356 1.5.2.2 skrll strlcat(tblname, ":0", sizeof(tblname)); 357 1.5.2.2 skrll if (dyn->pfid_net != 128) 358 1.5.2.2 skrll snprintf(tblname + strlen(tblname), 359 1.5.2.2 skrll sizeof(tblname) - strlen(tblname), "/%d", dyn->pfid_net); 360 1.5.2.2 skrll ruleset = pf_find_or_create_ruleset(pfi_reserved_anchor, 361 1.5.2.2 skrll pfi_interface_ruleset); 362 1.5.2.2 skrll if (ruleset == NULL) 363 1.5.2.2 skrll senderr(1); 364 1.5.2.2 skrll 365 1.5.2.2 skrll dyn->pfid_kt = pfr_attach_table(ruleset, tblname); 366 1.5.2.2 skrll if (dyn->pfid_kt == NULL) 367 1.5.2.2 skrll senderr(1); 368 1.5.2.2 skrll 369 1.5.2.2 skrll dyn->pfid_kt->pfrkt_flags |= PFR_TFLAG_ACTIVE; 370 1.5.2.2 skrll dyn->pfid_iflags = aw->iflags; 371 1.5.2.2 skrll dyn->pfid_af = af; 372 1.5.2.2 skrll dyn->pfid_hook_cookie = hook_establish(dyn->pfid_kif->pfik_ah_head, 1, 373 1.5.2.2 skrll pfi_dynaddr_update, dyn); 374 1.5.2.2 skrll if (dyn->pfid_hook_cookie == NULL) 375 1.5.2.2 skrll senderr(1); 376 1.5.2.2 skrll 377 1.5.2.2 skrll aw->p.dyn = dyn; 378 1.5.2.2 skrll pfi_dynaddr_update(aw->p.dyn); 379 1.5.2.2 skrll splx(s); 380 1.5.2.2 skrll return (0); 381 1.5.2.2 skrll 382 1.5.2.2 skrll _bad: 383 1.5.2.2 skrll if (dyn->pfid_kt != NULL) 384 1.5.2.2 skrll pfr_detach_table(dyn->pfid_kt); 385 1.5.2.2 skrll if (ruleset != NULL) 386 1.5.2.2 skrll pf_remove_if_empty_ruleset(ruleset); 387 1.5.2.2 skrll if (dyn->pfid_kif != NULL) 388 1.5.2.2 skrll pfi_detach_rule(dyn->pfid_kif); 389 1.5.2.2 skrll pool_put(&pfi_addr_pl, dyn); 390 1.5.2.2 skrll splx(s); 391 1.5.2.2 skrll return (rv); 392 1.5.2.2 skrll } 393 1.5.2.2 skrll 394 1.5.2.2 skrll void 395 1.5.2.2 skrll pfi_dynaddr_update(void *p) 396 1.5.2.2 skrll { 397 1.5.2.2 skrll struct pfi_dynaddr *dyn = (struct pfi_dynaddr *)p; 398 1.5.2.2 skrll struct pfi_kif *kif = dyn->pfid_kif; 399 1.5.2.2 skrll struct pfr_ktable *kt = dyn->pfid_kt; 400 1.5.2.2 skrll 401 1.5.2.2 skrll if (dyn == NULL || kif == NULL || kt == NULL) 402 1.5.2.2 skrll panic("pfi_dynaddr_update"); 403 1.5.2.2 skrll if (kt->pfrkt_larg != pfi_update) { 404 1.5.2.2 skrll /* this table needs to be brought up-to-date */ 405 1.5.2.2 skrll pfi_table_update(kt, kif, dyn->pfid_net, dyn->pfid_iflags); 406 1.5.2.2 skrll kt->pfrkt_larg = pfi_update; 407 1.5.2.2 skrll } 408 1.5.2.2 skrll pfr_dynaddr_update(kt, dyn); 409 1.5.2.2 skrll } 410 1.5.2.2 skrll 411 1.5.2.2 skrll void 412 1.5.2.2 skrll pfi_table_update(struct pfr_ktable *kt, struct pfi_kif *kif, int net, int flags) 413 1.5.2.2 skrll { 414 1.5.2.2 skrll int e, size2 = 0; 415 1.5.2.2 skrll struct pfi_kif *p; 416 1.5.2.2 skrll struct pfr_table t; 417 1.5.2.2 skrll 418 1.5.2.2 skrll if ((kif->pfik_flags & PFI_IFLAG_INSTANCE) && kif->pfik_ifp == NULL) { 419 1.5.2.2 skrll pfr_clr_addrs(&kt->pfrkt_t, NULL, 0); 420 1.5.2.2 skrll return; 421 1.5.2.2 skrll } 422 1.5.2.2 skrll pfi_buffer_cnt = 0; 423 1.5.2.2 skrll if ((kif->pfik_flags & PFI_IFLAG_INSTANCE)) 424 1.5.2.2 skrll pfi_instance_add(kif->pfik_ifp, net, flags); 425 1.5.2.2 skrll else if (strcmp(kif->pfik_name, "self")) { 426 1.5.2.2 skrll TAILQ_FOREACH(p, &kif->pfik_grouphead, pfik_instances) 427 1.5.2.2 skrll pfi_instance_add(p->pfik_ifp, net, flags); 428 1.5.2.2 skrll } else { 429 1.5.2.2 skrll RB_FOREACH(p, pfi_ifhead, &pfi_ifs) 430 1.5.2.2 skrll if (p->pfik_flags & PFI_IFLAG_INSTANCE) 431 1.5.2.2 skrll pfi_instance_add(p->pfik_ifp, net, flags); 432 1.5.2.2 skrll } 433 1.5.2.2 skrll t = kt->pfrkt_t; 434 1.5.2.2 skrll t.pfrt_flags = 0; 435 1.5.2.2 skrll if ((e = pfr_set_addrs(&t, pfi_buffer, pfi_buffer_cnt, &size2, 436 1.5.2.2 skrll NULL, NULL, NULL, 0))) 437 1.5.2.2 skrll printf("pfi_table_update: cannot set %d new addresses " 438 1.5.2.2 skrll "into table %s: %d\n", pfi_buffer_cnt, kt->pfrkt_name, e); 439 1.5.2.2 skrll } 440 1.5.2.2 skrll 441 1.5.2.2 skrll void 442 1.5.2.2 skrll pfi_instance_add(struct ifnet *ifp, int net, int flags) 443 1.5.2.2 skrll { 444 1.5.2.2 skrll struct ifaddr *ia; 445 1.5.2.2 skrll int got4 = 0, got6 = 0; 446 1.5.2.2 skrll int net2, af; 447 1.5.2.2 skrll 448 1.5.2.2 skrll if (ifp == NULL) 449 1.5.2.2 skrll return; 450 1.5.2.2 skrll TAILQ_FOREACH(ia, &ifp->if_addrlist, ifa_list) { 451 1.5.2.2 skrll if (ia->ifa_addr == NULL) 452 1.5.2.2 skrll continue; 453 1.5.2.2 skrll af = ia->ifa_addr->sa_family; 454 1.5.2.2 skrll if (af != AF_INET && af != AF_INET6) 455 1.5.2.2 skrll continue; 456 1.5.2.2 skrll if ((flags & PFI_AFLAG_BROADCAST) && af == AF_INET6) 457 1.5.2.2 skrll continue; 458 1.5.2.2 skrll if ((flags & PFI_AFLAG_BROADCAST) && 459 1.5.2.2 skrll !(ifp->if_flags & IFF_BROADCAST)) 460 1.5.2.2 skrll continue; 461 1.5.2.2 skrll if ((flags & PFI_AFLAG_PEER) && 462 1.5.2.2 skrll !(ifp->if_flags & IFF_POINTOPOINT)) 463 1.5.2.2 skrll continue; 464 1.5.2.2 skrll if ((flags & PFI_AFLAG_NETWORK) && af == AF_INET6 && 465 1.5.2.2 skrll IN6_IS_ADDR_LINKLOCAL( 466 1.5.2.2 skrll &((struct sockaddr_in6 *)ia->ifa_addr)->sin6_addr)) 467 1.5.2.2 skrll continue; 468 1.5.2.2 skrll if (flags & PFI_AFLAG_NOALIAS) { 469 1.5.2.2 skrll if (af == AF_INET && got4) 470 1.5.2.2 skrll continue; 471 1.5.2.2 skrll if (af == AF_INET6 && got6) 472 1.5.2.2 skrll continue; 473 1.5.2.2 skrll } 474 1.5.2.2 skrll if (af == AF_INET) 475 1.5.2.2 skrll got4 = 1; 476 1.5.2.2 skrll else 477 1.5.2.2 skrll got6 = 1; 478 1.5.2.2 skrll net2 = net; 479 1.5.2.2 skrll if (net2 == 128 && (flags & PFI_AFLAG_NETWORK)) { 480 1.5.2.2 skrll if (af == AF_INET) { 481 1.5.2.2 skrll net2 = pfi_unmask(&((struct sockaddr_in *) 482 1.5.2.2 skrll ia->ifa_netmask)->sin_addr); 483 1.5.2.2 skrll } else { 484 1.5.2.2 skrll net2 = pfi_unmask(&((struct sockaddr_in6 *) 485 1.5.2.2 skrll ia->ifa_netmask)->sin6_addr); 486 1.5.2.2 skrll } 487 1.5.2.2 skrll } 488 1.5.2.2 skrll if (af == AF_INET && net2 > 32) 489 1.5.2.2 skrll net2 = 32; 490 1.5.2.2 skrll if (flags & PFI_AFLAG_BROADCAST) 491 1.5.2.2 skrll pfi_address_add(ia->ifa_broadaddr, af, net2); 492 1.5.2.2 skrll else if (flags & PFI_AFLAG_PEER) 493 1.5.2.2 skrll pfi_address_add(ia->ifa_dstaddr, af, net2); 494 1.5.2.2 skrll else 495 1.5.2.2 skrll pfi_address_add(ia->ifa_addr, af, net2); 496 1.5.2.2 skrll } 497 1.5.2.2 skrll } 498 1.5.2.2 skrll 499 1.5.2.2 skrll void 500 1.5.2.2 skrll pfi_address_add(struct sockaddr *sa, int af, int net) 501 1.5.2.2 skrll { 502 1.5.2.2 skrll struct pfr_addr *p; 503 1.5.2.2 skrll int i; 504 1.5.2.2 skrll 505 1.5.2.2 skrll if (pfi_buffer_cnt >= pfi_buffer_max) { 506 1.5.2.2 skrll int new_max = pfi_buffer_max * 2; 507 1.5.2.2 skrll 508 1.5.2.2 skrll if (new_max > PFI_BUFFER_MAX) { 509 1.5.2.2 skrll printf("pfi_address_add: address buffer full (%d/%d)\n", 510 1.5.2.2 skrll pfi_buffer_cnt, PFI_BUFFER_MAX); 511 1.5.2.2 skrll return; 512 1.5.2.2 skrll } 513 1.5.2.2 skrll p = malloc(new_max * sizeof(*pfi_buffer), PFI_MTYPE, 514 1.5.2.2 skrll M_DONTWAIT); 515 1.5.2.2 skrll if (p == NULL) { 516 1.5.2.2 skrll printf("pfi_address_add: no memory to grow buffer " 517 1.5.2.2 skrll "(%d/%d)\n", pfi_buffer_cnt, PFI_BUFFER_MAX); 518 1.5.2.2 skrll return; 519 1.5.2.2 skrll } 520 1.5.2.2 skrll memcpy(pfi_buffer, p, pfi_buffer_cnt * sizeof(*pfi_buffer)); 521 1.5.2.2 skrll /* no need to zero buffer */ 522 1.5.2.2 skrll free(pfi_buffer, PFI_MTYPE); 523 1.5.2.2 skrll pfi_buffer = p; 524 1.5.2.2 skrll pfi_buffer_max = new_max; 525 1.5.2.2 skrll } 526 1.5.2.2 skrll if (af == AF_INET && net > 32) 527 1.5.2.2 skrll net = 128; 528 1.5.2.2 skrll p = pfi_buffer + pfi_buffer_cnt++; 529 1.5.2.2 skrll bzero(p, sizeof(*p)); 530 1.5.2.2 skrll p->pfra_af = af; 531 1.5.2.2 skrll p->pfra_net = net; 532 1.5.2.2 skrll if (af == AF_INET) 533 1.5.2.2 skrll p->pfra_ip4addr = ((struct sockaddr_in *)sa)->sin_addr; 534 1.5.2.2 skrll if (af == AF_INET6) { 535 1.5.2.2 skrll p->pfra_ip6addr = ((struct sockaddr_in6 *)sa)->sin6_addr; 536 1.5.2.2 skrll if (IN6_IS_ADDR_LINKLOCAL(&p->pfra_ip6addr)) 537 1.5.2.2 skrll p->pfra_ip6addr.s6_addr16[1] = 0; 538 1.5.2.2 skrll } 539 1.5.2.2 skrll /* mask network address bits */ 540 1.5.2.2 skrll if (net < 128) 541 1.5.2.2 skrll ((caddr_t)p)[p->pfra_net/8] &= ~(0xFF >> (p->pfra_net%8)); 542 1.5.2.2 skrll for (i = (p->pfra_net+7)/8; i < sizeof(p->pfra_u); i++) 543 1.5.2.2 skrll ((caddr_t)p)[i] = 0; 544 1.5.2.2 skrll } 545 1.5.2.2 skrll 546 1.5.2.2 skrll void 547 1.5.2.2 skrll pfi_dynaddr_remove(struct pf_addr_wrap *aw) 548 1.5.2.2 skrll { 549 1.5.2.2 skrll int s; 550 1.5.2.2 skrll 551 1.5.2.2 skrll if (aw->type != PF_ADDR_DYNIFTL || aw->p.dyn == NULL || 552 1.5.2.2 skrll aw->p.dyn->pfid_kif == NULL || aw->p.dyn->pfid_kt == NULL) 553 1.5.2.2 skrll return; 554 1.5.2.2 skrll 555 1.5.2.2 skrll s = splsoftnet(); 556 1.5.2.2 skrll hook_disestablish(aw->p.dyn->pfid_kif->pfik_ah_head, 557 1.5.2.2 skrll aw->p.dyn->pfid_hook_cookie); 558 1.5.2.2 skrll pfi_detach_rule(aw->p.dyn->pfid_kif); 559 1.5.2.2 skrll aw->p.dyn->pfid_kif = NULL; 560 1.5.2.2 skrll pfr_detach_table(aw->p.dyn->pfid_kt); 561 1.5.2.2 skrll aw->p.dyn->pfid_kt = NULL; 562 1.5.2.2 skrll pool_put(&pfi_addr_pl, aw->p.dyn); 563 1.5.2.2 skrll aw->p.dyn = NULL; 564 1.5.2.2 skrll splx(s); 565 1.5.2.2 skrll } 566 1.5.2.2 skrll 567 1.5.2.2 skrll void 568 1.5.2.2 skrll pfi_dynaddr_copyout(struct pf_addr_wrap *aw) 569 1.5.2.2 skrll { 570 1.5.2.2 skrll if (aw->type != PF_ADDR_DYNIFTL || aw->p.dyn == NULL || 571 1.5.2.2 skrll aw->p.dyn->pfid_kif == NULL) 572 1.5.2.2 skrll return; 573 1.5.2.2 skrll aw->p.dyncnt = aw->p.dyn->pfid_acnt4 + aw->p.dyn->pfid_acnt6; 574 1.5.2.2 skrll } 575 1.5.2.2 skrll 576 1.5.2.2 skrll void 577 1.5.2.2 skrll pfi_kifaddr_update(void *v) 578 1.5.2.2 skrll { 579 1.5.2.2 skrll int s; 580 1.5.2.2 skrll 581 1.5.2.2 skrll s = splsoftnet(); 582 1.5.2.2 skrll pfi_update++; 583 1.5.2.2 skrll pfi_dohooks(v); 584 1.5.2.2 skrll splx(s); 585 1.5.2.2 skrll } 586 1.5.2.2 skrll 587 1.5.2.2 skrll #ifdef __NetBSD__ 588 1.5.2.2 skrll void 589 1.5.2.2 skrll pfi_kifaddr_update_if(struct ifnet *ifp) 590 1.5.2.2 skrll { 591 1.5.2.2 skrll struct pfi_kif *p; 592 1.5.2.2 skrll 593 1.5.2.2 skrll p = pfi_lookup_if(ifp->if_xname); 594 1.5.2.2 skrll if (p == NULL) 595 1.5.2.2 skrll panic("can't find interface"); 596 1.5.2.2 skrll pfi_kifaddr_update(p); 597 1.5.2.2 skrll } 598 1.5.2.2 skrll #endif 599 1.5.2.2 skrll 600 1.5.2.2 skrll int 601 1.5.2.2 skrll pfi_if_compare(struct pfi_kif *p, struct pfi_kif *q) 602 1.5.2.2 skrll { 603 1.5.2.2 skrll return (strncmp(p->pfik_name, q->pfik_name, IFNAMSIZ)); 604 1.5.2.2 skrll } 605 1.5.2.2 skrll 606 1.5.2.2 skrll struct pfi_kif * 607 1.5.2.2 skrll pfi_if_create(const char *name, struct pfi_kif *q, int flags) 608 1.5.2.2 skrll { 609 1.5.2.2 skrll struct pfi_kif *p; 610 1.5.2.2 skrll 611 1.5.2.2 skrll p = malloc(sizeof(*p), PFI_MTYPE, M_DONTWAIT); 612 1.5.2.2 skrll if (p == NULL) 613 1.5.2.2 skrll return (NULL); 614 1.5.2.2 skrll bzero(p, sizeof(*p)); 615 1.5.2.2 skrll p->pfik_ah_head = malloc(sizeof(*p->pfik_ah_head), PFI_MTYPE, 616 1.5.2.2 skrll M_DONTWAIT); 617 1.5.2.2 skrll if (p->pfik_ah_head == NULL) { 618 1.5.2.2 skrll free(p, PFI_MTYPE); 619 1.5.2.2 skrll return (NULL); 620 1.5.2.2 skrll } 621 1.5.2.2 skrll bzero(p->pfik_ah_head, sizeof(*p->pfik_ah_head)); 622 1.5.2.2 skrll #ifdef __NetBSD__ 623 1.5.2.2 skrll p->pfik_ifaddrhooks = malloc(sizeof(*p->pfik_ifaddrhooks), PFI_MTYPE, 624 1.5.2.2 skrll M_DONTWAIT); 625 1.5.2.2 skrll if (p->pfik_ifaddrhooks == NULL) { 626 1.5.2.2 skrll free(p->pfik_ah_head, PFI_MTYPE); 627 1.5.2.2 skrll free(p, PFI_MTYPE); 628 1.5.2.2 skrll return (NULL); 629 1.5.2.2 skrll } 630 1.5.2.2 skrll bzero(p->pfik_ifaddrhooks, sizeof(*p->pfik_ifaddrhooks)); 631 1.5.2.2 skrll #endif 632 1.5.2.2 skrll TAILQ_INIT(p->pfik_ah_head); 633 1.5.2.2 skrll TAILQ_INIT(&p->pfik_grouphead); 634 1.5.2.2 skrll #ifdef __NetBSD__ 635 1.5.2.2 skrll TAILQ_INIT(p->pfik_ifaddrhooks); 636 1.5.2.2 skrll #endif 637 1.5.2.2 skrll strlcpy(p->pfik_name, name, sizeof(p->pfik_name)); 638 1.5.2.2 skrll RB_INIT(&p->pfik_lan_ext); 639 1.5.2.2 skrll RB_INIT(&p->pfik_ext_gwy); 640 1.5.2.2 skrll p->pfik_flags = flags; 641 1.5.2.2 skrll p->pfik_parent = q; 642 1.5.2.2 skrll p->pfik_tzero = time.tv_sec; 643 1.5.2.2 skrll 644 1.5.2.2 skrll RB_INSERT(pfi_ifhead, &pfi_ifs, p); 645 1.5.2.2 skrll if (q != NULL) { 646 1.5.2.2 skrll q->pfik_addcnt++; 647 1.5.2.2 skrll TAILQ_INSERT_TAIL(&q->pfik_grouphead, p, pfik_instances); 648 1.5.2.2 skrll } 649 1.5.2.2 skrll pfi_ifcnt++; 650 1.5.2.2 skrll return (p); 651 1.5.2.2 skrll } 652 1.5.2.2 skrll 653 1.5.2.2 skrll int 654 1.5.2.2 skrll pfi_maybe_destroy(struct pfi_kif *p) 655 1.5.2.2 skrll { 656 1.5.2.2 skrll int i, j, k, s; 657 1.5.2.2 skrll struct pfi_kif *q = p->pfik_parent; 658 1.5.2.2 skrll 659 1.5.2.2 skrll if ((p->pfik_flags & (PFI_IFLAG_ATTACHED | PFI_IFLAG_GROUP)) || 660 1.5.2.2 skrll p->pfik_rules > 0 || p->pfik_states > 0) 661 1.5.2.2 skrll return (0); 662 1.5.2.2 skrll 663 1.5.2.2 skrll s = splsoftnet(); 664 1.5.2.2 skrll if (q != NULL) { 665 1.5.2.2 skrll for (i = 0; i < 2; i++) 666 1.5.2.2 skrll for (j = 0; j < 2; j++) 667 1.5.2.2 skrll for (k = 0; k < 2; k++) { 668 1.5.2.2 skrll q->pfik_bytes[i][j][k] += 669 1.5.2.2 skrll p->pfik_bytes[i][j][k]; 670 1.5.2.2 skrll q->pfik_packets[i][j][k] += 671 1.5.2.2 skrll p->pfik_packets[i][j][k]; 672 1.5.2.2 skrll } 673 1.5.2.2 skrll q->pfik_delcnt++; 674 1.5.2.2 skrll TAILQ_REMOVE(&q->pfik_grouphead, p, pfik_instances); 675 1.5.2.2 skrll } 676 1.5.2.2 skrll pfi_ifcnt--; 677 1.5.2.2 skrll RB_REMOVE(pfi_ifhead, &pfi_ifs, p); 678 1.5.2.2 skrll splx(s); 679 1.5.2.2 skrll 680 1.5.2.2 skrll free(p->pfik_ah_head, PFI_MTYPE); 681 1.5.2.2 skrll free(p, PFI_MTYPE); 682 1.5.2.2 skrll return (1); 683 1.5.2.2 skrll } 684 1.5.2.2 skrll 685 1.5.2.2 skrll void 686 1.5.2.2 skrll pfi_copy_group(char *p, const char *q, int m) 687 1.5.2.2 skrll { 688 1.5.2.2 skrll while (m > 1 && *q && !(*q >= '0' && *q <= '9')) { 689 1.5.2.2 skrll *p++ = *q++; 690 1.5.2.2 skrll m--; 691 1.5.2.2 skrll } 692 1.5.2.2 skrll if (m > 0) 693 1.5.2.2 skrll *p++ = '\0'; 694 1.5.2.2 skrll } 695 1.5.2.2 skrll 696 1.5.2.2 skrll void 697 1.5.2.2 skrll pfi_dynamic_drivers(void) 698 1.5.2.2 skrll { 699 1.5.2.2 skrll #ifdef __OpenBSD__ 700 1.5.2.2 skrll char *buses[] = PFI_DYNAMIC_BUSES; 701 1.5.2.2 skrll int nbuses = sizeof(buses)/sizeof(buses[0]); 702 1.5.2.2 skrll int enabled[sizeof(buses)/sizeof(buses[0])]; 703 1.5.2.2 skrll struct device *dev; 704 1.5.2.2 skrll struct cfdata *cf; 705 1.5.2.2 skrll struct cfdriver *drv; 706 1.5.2.2 skrll short *p; 707 1.5.2.2 skrll int i; 708 1.5.2.2 skrll 709 1.5.2.2 skrll bzero(enabled, sizeof(enabled)); 710 1.5.2.2 skrll TAILQ_FOREACH(dev, &alldevs, dv_list) { 711 1.5.2.2 skrll if (!(dev->dv_flags & DVF_ACTIVE)) 712 1.5.2.2 skrll continue; 713 1.5.2.2 skrll for (i = 0; i < nbuses; i++) 714 1.5.2.2 skrll if (!enabled[i] && !strcmp(buses[i], 715 1.5.2.2 skrll dev->dv_cfdata->cf_driver->cd_name)) 716 1.5.2.2 skrll enabled[i] = 1; 717 1.5.2.2 skrll } 718 1.5.2.2 skrll for (cf = cfdata; cf->cf_driver; cf++) { 719 1.5.2.2 skrll if (cf->cf_driver->cd_class != DV_IFNET) 720 1.5.2.2 skrll continue; 721 1.5.2.2 skrll for (p = cf->cf_parents; p && *p >= 0; p++) { 722 1.5.2.2 skrll if ((drv = cfdata[*p].cf_driver) == NULL) 723 1.5.2.2 skrll continue; 724 1.5.2.2 skrll for (i = 0; i < nbuses; i++) 725 1.5.2.2 skrll if (enabled[i] && 726 1.5.2.2 skrll !strcmp(drv->cd_name, buses[i])) 727 1.5.2.2 skrll break; 728 1.5.2.2 skrll if (i < nbuses) { 729 1.5.2.2 skrll pfi_newgroup(cf->cf_driver->cd_name, 730 1.5.2.2 skrll PFI_IFLAG_DYNAMIC); 731 1.5.2.2 skrll break; 732 1.5.2.2 skrll } 733 1.5.2.2 skrll } 734 1.5.2.2 skrll } 735 1.5.2.2 skrll #else 736 1.5.2.2 skrll struct if_clone *ifc; 737 1.5.2.2 skrll extern LIST_HEAD(if_cloners, if_clone) if_cloners; 738 1.5.2.2 skrll 739 1.5.2.2 skrll LIST_FOREACH(ifc, &if_cloners, ifc_list) 740 1.5.2.2 skrll pfi_newgroup(ifc->ifc_name, PFI_IFLAG_DYNAMIC); 741 1.5.2.2 skrll #endif 742 1.5.2.2 skrll } 743 1.5.2.2 skrll 744 1.5.2.2 skrll void 745 1.5.2.2 skrll pfi_newgroup(const char *name, int flags) 746 1.5.2.2 skrll { 747 1.5.2.2 skrll struct pfi_kif *p; 748 1.5.2.2 skrll 749 1.5.2.2 skrll p = pfi_lookup_if(name); 750 1.5.2.2 skrll if (p == NULL) 751 1.5.2.2 skrll p = pfi_if_create(name, pfi_self, PFI_IFLAG_GROUP); 752 1.5.2.2 skrll if (p == NULL) { 753 1.5.2.2 skrll printf("pfi_newgroup: cannot allocate '%s' group", name); 754 1.5.2.2 skrll return; 755 1.5.2.2 skrll } 756 1.5.2.2 skrll p->pfik_flags |= flags; 757 1.5.2.2 skrll } 758 1.5.2.2 skrll 759 1.5.2.2 skrll void 760 1.5.2.2 skrll pfi_fill_oldstatus(struct pf_status *pfs) 761 1.5.2.2 skrll { 762 1.5.2.2 skrll struct pfi_kif *p, key; 763 1.5.2.2 skrll int i, j, k, s; 764 1.5.2.2 skrll 765 1.5.2.2 skrll strlcpy(key.pfik_name, pfs->ifname, sizeof(key.pfik_name)); 766 1.5.2.2 skrll s = splsoftnet(); 767 1.5.2.2 skrll p = RB_FIND(pfi_ifhead, &pfi_ifs, &key); 768 1.5.2.2 skrll if (p == NULL) { 769 1.5.2.2 skrll splx(s); 770 1.5.2.2 skrll return; 771 1.5.2.2 skrll } 772 1.5.2.2 skrll bzero(pfs->pcounters, sizeof(pfs->pcounters)); 773 1.5.2.2 skrll bzero(pfs->bcounters, sizeof(pfs->bcounters)); 774 1.5.2.2 skrll for (i = 0; i < 2; i++) 775 1.5.2.2 skrll for (j = 0; j < 2; j++) 776 1.5.2.2 skrll for (k = 0; k < 2; k++) { 777 1.5.2.2 skrll pfs->pcounters[i][j][k] = 778 1.5.2.2 skrll p->pfik_packets[i][j][k]; 779 1.5.2.2 skrll pfs->bcounters[i][j] += 780 1.5.2.2 skrll p->pfik_bytes[i][j][k]; 781 1.5.2.2 skrll } 782 1.5.2.2 skrll splx(s); 783 1.5.2.2 skrll } 784 1.5.2.2 skrll 785 1.5.2.2 skrll int 786 1.5.2.2 skrll pfi_clr_istats(const char *name, int *nzero, int flags) 787 1.5.2.2 skrll { 788 1.5.2.2 skrll struct pfi_kif *p; 789 1.5.2.2 skrll int n = 0, s; 790 1.5.2.2 skrll long tzero = time.tv_sec; 791 1.5.2.2 skrll 792 1.5.2.2 skrll s = splsoftnet(); 793 1.5.2.2 skrll ACCEPT_FLAGS(PFI_FLAG_GROUP|PFI_FLAG_INSTANCE); 794 1.5.2.2 skrll RB_FOREACH(p, pfi_ifhead, &pfi_ifs) { 795 1.5.2.2 skrll if (pfi_skip_if(name, p, flags)) 796 1.5.2.2 skrll continue; 797 1.5.2.2 skrll bzero(p->pfik_packets, sizeof(p->pfik_packets)); 798 1.5.2.2 skrll bzero(p->pfik_bytes, sizeof(p->pfik_bytes)); 799 1.5.2.2 skrll p->pfik_tzero = tzero; 800 1.5.2.2 skrll n++; 801 1.5.2.2 skrll } 802 1.5.2.2 skrll splx(s); 803 1.5.2.2 skrll if (nzero != NULL) 804 1.5.2.2 skrll *nzero = n; 805 1.5.2.2 skrll return (0); 806 1.5.2.2 skrll } 807 1.5.2.2 skrll 808 1.5.2.2 skrll int 809 1.5.2.2 skrll pfi_get_ifaces(const char *name, struct pfi_if *buf, int *size, int flags) 810 1.5.2.2 skrll { 811 1.5.2.2 skrll struct pfi_kif *p; 812 1.5.2.2 skrll int s, n = 0; 813 1.5.2.2 skrll 814 1.5.2.2 skrll ACCEPT_FLAGS(PFI_FLAG_GROUP|PFI_FLAG_INSTANCE); 815 1.5.2.2 skrll s = splsoftnet(); 816 1.5.2.2 skrll RB_FOREACH(p, pfi_ifhead, &pfi_ifs) { 817 1.5.2.2 skrll if (pfi_skip_if(name, p, flags)) 818 1.5.2.2 skrll continue; 819 1.5.2.2 skrll if (*size > n++) { 820 1.5.2.2 skrll if (!p->pfik_tzero) 821 1.5.2.2 skrll p->pfik_tzero = boottime.tv_sec; 822 1.5.2.2 skrll if (copyout(p, buf++, sizeof(*buf))) { 823 1.5.2.2 skrll splx(s); 824 1.5.2.2 skrll return (EFAULT); 825 1.5.2.2 skrll } 826 1.5.2.2 skrll } 827 1.5.2.2 skrll } 828 1.5.2.2 skrll splx(s); 829 1.5.2.2 skrll *size = n; 830 1.5.2.2 skrll return (0); 831 1.5.2.2 skrll } 832 1.5.2.2 skrll 833 1.5.2.2 skrll struct pfi_kif * 834 1.5.2.2 skrll pfi_lookup_if(const char *name) 835 1.5.2.2 skrll { 836 1.5.2.2 skrll struct pfi_kif *p, key; 837 1.5.2.2 skrll 838 1.5.2.2 skrll strlcpy(key.pfik_name, name, sizeof(key.pfik_name)); 839 1.5.2.2 skrll p = RB_FIND(pfi_ifhead, &pfi_ifs, &key); 840 1.5.2.2 skrll return (p); 841 1.5.2.2 skrll } 842 1.5.2.2 skrll 843 1.5.2.2 skrll int 844 1.5.2.2 skrll pfi_skip_if(const char *filter, struct pfi_kif *p, int f) 845 1.5.2.2 skrll { 846 1.5.2.2 skrll int n; 847 1.5.2.2 skrll 848 1.5.2.2 skrll if ((p->pfik_flags & PFI_IFLAG_GROUP) && !(f & PFI_FLAG_GROUP)) 849 1.5.2.2 skrll return (1); 850 1.5.2.2 skrll if ((p->pfik_flags & PFI_IFLAG_INSTANCE) && !(f & PFI_FLAG_INSTANCE)) 851 1.5.2.2 skrll return (1); 852 1.5.2.2 skrll if (filter == NULL || !*filter) 853 1.5.2.2 skrll return (0); 854 1.5.2.2 skrll if (!strcmp(p->pfik_name, filter)) 855 1.5.2.2 skrll return (0); /* exact match */ 856 1.5.2.2 skrll n = strlen(filter); 857 1.5.2.2 skrll if (n < 1 || n >= IFNAMSIZ) 858 1.5.2.2 skrll return (1); /* sanity check */ 859 1.5.2.2 skrll if (filter[n-1] >= '0' && filter[n-1] <= '9') 860 1.5.2.2 skrll return (1); /* only do exact match in that case */ 861 1.5.2.2 skrll if (strncmp(p->pfik_name, filter, n)) 862 1.5.2.2 skrll return (1); /* prefix doesn't match */ 863 1.5.2.2 skrll return (p->pfik_name[n] < '0' || p->pfik_name[n] > '9'); 864 1.5.2.2 skrll } 865 1.5.2.2 skrll 866 1.5.2.2 skrll /* from pf_print_state.c */ 867 1.5.2.2 skrll int 868 1.5.2.2 skrll pfi_unmask(void *addr) 869 1.5.2.2 skrll { 870 1.5.2.2 skrll struct pf_addr *m = addr; 871 1.5.2.2 skrll int i = 31, j = 0, b = 0; 872 1.5.2.2 skrll u_int32_t tmp; 873 1.5.2.2 skrll 874 1.5.2.2 skrll while (j < 4 && m->addr32[j] == 0xffffffff) { 875 1.5.2.2 skrll b += 32; 876 1.5.2.2 skrll j++; 877 1.5.2.2 skrll } 878 1.5.2.2 skrll if (j < 4) { 879 1.5.2.2 skrll tmp = ntohl(m->addr32[j]); 880 1.5.2.2 skrll for (i = 31; tmp & (1 << i); --i) 881 1.5.2.2 skrll b++; 882 1.5.2.2 skrll } 883 1.5.2.2 skrll return (b); 884 1.5.2.2 skrll } 885 1.5.2.2 skrll 886 1.5.2.2 skrll void 887 1.5.2.2 skrll pfi_dohooks(struct pfi_kif *p) 888 1.5.2.2 skrll { 889 1.5.2.2 skrll for (; p != NULL; p = p->pfik_parent) 890 1.5.2.2 skrll dohooks(p->pfik_ah_head, 0); 891 1.5.2.2 skrll } 892 1.5.2.2 skrll 893 1.5.2.2 skrll int 894 1.5.2.2 skrll pfi_match_addr(struct pfi_dynaddr *dyn, struct pf_addr *a, sa_family_t af) 895 1.5.2.2 skrll { 896 1.5.2.2 skrll if (af == AF_INET) { 897 1.5.2.2 skrll switch (dyn->pfid_acnt4) { 898 1.5.2.2 skrll case 0: 899 1.5.2.2 skrll return (0); 900 1.5.2.2 skrll case 1: 901 1.5.2.2 skrll return (PF_MATCHA(0, &dyn->pfid_addr4, 902 1.5.2.2 skrll &dyn->pfid_mask4, a, AF_INET)); 903 1.5.2.2 skrll default: 904 1.5.2.2 skrll return (pfr_match_addr(dyn->pfid_kt, a, AF_INET)); 905 1.5.2.2 skrll } 906 1.5.2.2 skrll } else { 907 1.5.2.2 skrll switch (dyn->pfid_acnt6) { 908 1.5.2.2 skrll case 0: 909 1.5.2.2 skrll return (0); 910 1.5.2.2 skrll case 1: 911 1.5.2.2 skrll return (PF_MATCHA(0, &dyn->pfid_addr6, 912 1.5.2.2 skrll &dyn->pfid_mask6, a, AF_INET6)); 913 1.5.2.2 skrll default: 914 1.5.2.2 skrll return (pfr_match_addr(dyn->pfid_kt, a, AF_INET6)); 915 1.5.2.2 skrll } 916 1.5.2.2 skrll } 917 1.5.2.2 skrll } 918 1.5.2.2 skrll 919 1.5.2.2 skrll /* from openbsd/sys/kern/kern_subr.c */ 920 1.5.2.2 skrll #ifdef __NetBSD__ 921 1.5.2.2 skrll static void * 922 1.5.2.2 skrll hook_establish(struct hook_desc_head *head, int tail, void (*fn)(void *), 923 1.5.2.2 skrll void *arg) 924 1.5.2.2 skrll { 925 1.5.2.2 skrll struct hook_desc *hdp; 926 1.5.2.2 skrll 927 1.5.2.2 skrll hdp = (struct hook_desc *)malloc(sizeof (*hdp), M_DEVBUF, M_NOWAIT); 928 1.5.2.2 skrll if (hdp == NULL) 929 1.5.2.2 skrll return (NULL); 930 1.5.2.2 skrll 931 1.5.2.2 skrll hdp->hd_fn = fn; 932 1.5.2.2 skrll hdp->hd_arg = arg; 933 1.5.2.2 skrll if (tail) 934 1.5.2.2 skrll TAILQ_INSERT_TAIL(head, hdp, hd_list); 935 1.5.2.2 skrll else 936 1.5.2.2 skrll TAILQ_INSERT_HEAD(head, hdp, hd_list); 937 1.5.2.2 skrll 938 1.5.2.2 skrll return (hdp); 939 1.5.2.2 skrll } 940 1.5.2.2 skrll 941 1.5.2.2 skrll static void 942 1.5.2.2 skrll hook_disestablish(struct hook_desc_head *head, void *vhook) 943 1.5.2.2 skrll { 944 1.5.2.2 skrll struct hook_desc *hdp; 945 1.5.2.2 skrll 946 1.5.2.2 skrll #ifdef DIAGNOSTIC 947 1.5.2.2 skrll for (hdp = TAILQ_FIRST(head); hdp != NULL; 948 1.5.2.2 skrll hdp = TAILQ_NEXT(hdp, hd_list)) 949 1.5.2.2 skrll if (hdp == vhook) 950 1.5.2.2 skrll break; 951 1.5.2.2 skrll if (hdp == NULL) 952 1.5.2.2 skrll panic("hook_disestablish: hook not established"); 953 1.5.2.2 skrll #endif 954 1.5.2.2 skrll hdp = vhook; 955 1.5.2.2 skrll TAILQ_REMOVE(head, hdp, hd_list); 956 1.5.2.2 skrll free(hdp, M_DEVBUF); 957 1.5.2.2 skrll } 958 1.5.2.2 skrll 959 1.5.2.2 skrll static void 960 1.5.2.2 skrll dohooks(struct hook_desc_head *head, int flags) 961 1.5.2.2 skrll { 962 1.5.2.2 skrll struct hook_desc *hdp; 963 1.5.2.2 skrll 964 1.5.2.2 skrll if ((flags & HOOK_REMOVE) == 0) { 965 1.5.2.2 skrll TAILQ_FOREACH(hdp, head, hd_list) { 966 1.5.2.2 skrll (*hdp->hd_fn)(hdp->hd_arg); 967 1.5.2.2 skrll } 968 1.5.2.2 skrll } else { 969 1.5.2.2 skrll while ((hdp = TAILQ_FIRST(head)) != NULL) { 970 1.5.2.2 skrll TAILQ_REMOVE(head, hdp, hd_list); 971 1.5.2.2 skrll (*hdp->hd_fn)(hdp->hd_arg); 972 1.5.2.2 skrll if ((flags & HOOK_FREE) != 0) 973 1.5.2.2 skrll free(hdp, M_DEVBUF); 974 1.5.2.2 skrll } 975 1.5.2.2 skrll } 976 1.5.2.2 skrll } 977 1.5.2.2 skrll #endif 978
Indexes created Mon Oct 13 16:09:52 GMT 2025