Lines Matching refs:rule
471 pf_nvdivert_to_divert(const nvlist_t *nvl, struct pfctl_rule *rule) in pf_nvdivert_to_divert() argument
473 pf_nvaddr_to_addr(nvlist_get_nvlist(nvl, "addr"), &rule->divert.addr); in pf_nvdivert_to_divert()
474 rule->divert.port = nvlist_get_number(nvl, "port"); in pf_nvdivert_to_divert()
478 pf_nvrule_to_rule(const nvlist_t *nvl, struct pfctl_rule *rule) in pf_nvrule_to_rule() argument
484 rule->nr = nvlist_get_number(nvl, "nr"); in pf_nvrule_to_rule()
486 pf_nvrule_addr_to_rule_addr(nvlist_get_nvlist(nvl, "src"), &rule->src); in pf_nvrule_to_rule()
487 pf_nvrule_addr_to_rule_addr(nvlist_get_nvlist(nvl, "dst"), &rule->dst); in pf_nvrule_to_rule()
493 rule->skip[i].nr = skip[i]; in pf_nvrule_to_rule()
498 strlcpy(rule->label[i], labels[i], PF_RULE_LABEL_SIZE); in pf_nvrule_to_rule()
499 rule->ridentifier = nvlist_get_number(nvl, "ridentifier"); in pf_nvrule_to_rule()
500 strlcpy(rule->ifname, nvlist_get_string(nvl, "ifname"), IFNAMSIZ); in pf_nvrule_to_rule()
501 strlcpy(rule->qname, nvlist_get_string(nvl, "qname"), PF_QNAME_SIZE); in pf_nvrule_to_rule()
502 strlcpy(rule->pqname, nvlist_get_string(nvl, "pqname"), PF_QNAME_SIZE); in pf_nvrule_to_rule()
503 strlcpy(rule->tagname, nvlist_get_string(nvl, "tagname"), in pf_nvrule_to_rule()
505 strlcpy(rule->match_tagname, nvlist_get_string(nvl, "match_tagname"), in pf_nvrule_to_rule()
508 strlcpy(rule->overload_tblname, nvlist_get_string(nvl, "overload_tblname"), in pf_nvrule_to_rule()
511 pf_nvpool_to_pool(nvlist_get_nvlist(nvl, "rpool"), &rule->rpool); in pf_nvrule_to_rule()
513 rule->evaluations = nvlist_get_number(nvl, "evaluations"); in pf_nvrule_to_rule()
514 pf_nvuint_64_array(nvl, "packets", 2, rule->packets, NULL); in pf_nvrule_to_rule()
515 pf_nvuint_64_array(nvl, "bytes", 2, rule->bytes, NULL); in pf_nvrule_to_rule()
517 rule->os_fingerprint = nvlist_get_number(nvl, "os_fingerprint"); in pf_nvrule_to_rule()
519 rule->rtableid = nvlist_get_number(nvl, "rtableid"); in pf_nvrule_to_rule()
520 pf_nvuint_32_array(nvl, "timeout", PFTM_MAX, rule->timeout, NULL); in pf_nvrule_to_rule()
521 rule->max_states = nvlist_get_number(nvl, "max_states"); in pf_nvrule_to_rule()
522 rule->max_src_nodes = nvlist_get_number(nvl, "max_src_nodes"); in pf_nvrule_to_rule()
523 rule->max_src_states = nvlist_get_number(nvl, "max_src_states"); in pf_nvrule_to_rule()
524 rule->max_src_conn = nvlist_get_number(nvl, "max_src_conn"); in pf_nvrule_to_rule()
525 rule->max_src_conn_rate.limit = in pf_nvrule_to_rule()
527 rule->max_src_conn_rate.seconds = in pf_nvrule_to_rule()
529 rule->qid = nvlist_get_number(nvl, "qid"); in pf_nvrule_to_rule()
530 rule->pqid = nvlist_get_number(nvl, "pqid"); in pf_nvrule_to_rule()
531 rule->prob = nvlist_get_number(nvl, "prob"); in pf_nvrule_to_rule()
532 rule->cuid = nvlist_get_number(nvl, "cuid"); in pf_nvrule_to_rule()
533 rule->cpid = nvlist_get_number(nvl, "cpid"); in pf_nvrule_to_rule()
535 rule->return_icmp = nvlist_get_number(nvl, "return_icmp"); in pf_nvrule_to_rule()
536 rule->return_icmp6 = nvlist_get_number(nvl, "return_icmp6"); in pf_nvrule_to_rule()
537 rule->max_mss = nvlist_get_number(nvl, "max_mss"); in pf_nvrule_to_rule()
538 rule->scrub_flags = nvlist_get_number(nvl, "scrub_flags"); in pf_nvrule_to_rule()
540 pf_nvrule_uid_to_rule_uid(nvlist_get_nvlist(nvl, "uid"), &rule->uid); in pf_nvrule_to_rule()
542 (struct pf_rule_uid *)&rule->gid); in pf_nvrule_to_rule()
544 rule->rule_flag = nvlist_get_number(nvl, "rule_flag"); in pf_nvrule_to_rule()
545 rule->action = nvlist_get_number(nvl, "action"); in pf_nvrule_to_rule()
546 rule->direction = nvlist_get_number(nvl, "direction"); in pf_nvrule_to_rule()
547 rule->log = nvlist_get_number(nvl, "log"); in pf_nvrule_to_rule()
548 rule->logif = nvlist_get_number(nvl, "logif"); in pf_nvrule_to_rule()
549 rule->quick = nvlist_get_number(nvl, "quick"); in pf_nvrule_to_rule()
550 rule->ifnot = nvlist_get_number(nvl, "ifnot"); in pf_nvrule_to_rule()
551 rule->match_tag_not = nvlist_get_number(nvl, "match_tag_not"); in pf_nvrule_to_rule()
552 rule->natpass = nvlist_get_number(nvl, "natpass"); in pf_nvrule_to_rule()
554 rule->keep_state = nvlist_get_number(nvl, "keep_state"); in pf_nvrule_to_rule()
555 rule->af = nvlist_get_number(nvl, "af"); in pf_nvrule_to_rule()
556 rule->proto = nvlist_get_number(nvl, "proto"); in pf_nvrule_to_rule()
557 rule->type = nvlist_get_number(nvl, "type"); in pf_nvrule_to_rule()
558 rule->code = nvlist_get_number(nvl, "code"); in pf_nvrule_to_rule()
559 rule->flags = nvlist_get_number(nvl, "flags"); in pf_nvrule_to_rule()
560 rule->flagset = nvlist_get_number(nvl, "flagset"); in pf_nvrule_to_rule()
561 rule->min_ttl = nvlist_get_number(nvl, "min_ttl"); in pf_nvrule_to_rule()
562 rule->allow_opts = nvlist_get_number(nvl, "allow_opts"); in pf_nvrule_to_rule()
563 rule->rt = nvlist_get_number(nvl, "rt"); in pf_nvrule_to_rule()
564 rule->return_ttl = nvlist_get_number(nvl, "return_ttl"); in pf_nvrule_to_rule()
565 rule->tos = nvlist_get_number(nvl, "tos"); in pf_nvrule_to_rule()
566 rule->set_tos = nvlist_get_number(nvl, "set_tos"); in pf_nvrule_to_rule()
567 rule->anchor_relative = nvlist_get_number(nvl, "anchor_relative"); in pf_nvrule_to_rule()
568 rule->anchor_wildcard = nvlist_get_number(nvl, "anchor_wildcard"); in pf_nvrule_to_rule()
570 rule->flush = nvlist_get_number(nvl, "flush"); in pf_nvrule_to_rule()
571 rule->prio = nvlist_get_number(nvl, "prio"); in pf_nvrule_to_rule()
572 pf_nvuint_8_array(nvl, "set_prio", 2, rule->set_prio, NULL); in pf_nvrule_to_rule()
574 pf_nvdivert_to_divert(nvlist_get_nvlist(nvl, "divert"), rule); in pf_nvrule_to_rule()
576 rule->states_cur = nvlist_get_number(nvl, "states_cur"); in pf_nvrule_to_rule()
577 rule->states_tot = nvlist_get_number(nvl, "states_tot"); in pf_nvrule_to_rule()
578 rule->src_nodes = nvlist_get_number(nvl, "src_nodes"); in pf_nvrule_to_rule()
710 pr.rule.action = ruleset; in pfctl_get_rules_info()
723 uint32_t ruleset, struct pfctl_rule *rule, char *anchor_call) in pfctl_get_rule() argument
725 return (pfctl_get_clear_rule(dev, nr, ticket, anchor, ruleset, rule, in pfctl_get_rule()
730 const char *anchor, uint32_t ruleset, struct pfctl_rule *rule, in pfctl_get_clear_rule() argument
751 pf_nvrule_to_rule(nvlist_get_nvlist(nvl, "rule"), rule); in pfctl_get_clear_rule()
835 ps->rule = ntohl(s->rule); in pf_state_export_to_state()