Lines Matching refs:rule
409 (((*state)->rule.ptr->rt == PF_ROUTETO && in pf_state_lookup_aux()
410 (*state)->rule.ptr->direction == PF_OUT) || in pf_state_lookup_aux()
411 ((*state)->rule.ptr->rt == PF_REPLYTO && in pf_state_lookup_aux()
412 (*state)->rule.ptr->direction == PF_IN)) && in pf_state_lookup_aux()
476 s->rule.ptr->states++; \
477 VERIFY(s->rule.ptr->states != 0); \
498 VERIFY(s->rule.ptr->states > 0); \
499 s->rule.ptr->states--; \
817 if (a->rule.ptr > b->rule.ptr) { in pf_src_compare()
820 if (a->rule.ptr < b->rule.ptr) { in pf_src_compare()
1277 if ((*state)->rule.ptr->max_src_conn && in pf_src_connlimit()
1278 (*state)->rule.ptr->max_src_conn < in pf_src_connlimit()
1284 if ((*state)->rule.ptr->max_src_conn_rate.limit && in pf_src_connlimit()
1294 if ((*state)->rule.ptr->overload_tbl) { in pf_src_connlimit()
1320 pfr_insert_kentry((*state)->rule.ptr->overload_tbl, in pf_src_connlimit()
1324 if ((*state)->rule.ptr->flush) { in pf_src_connlimit()
1345 ((*state)->rule.ptr->flush & in pf_src_connlimit()
1347 (*state)->rule.ptr == st->rule.ptr)) { in pf_src_connlimit()
1370 pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule, in pf_insert_src_node() argument
1378 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1379 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1380 k.rule.ptr = rule; in pf_insert_src_node()
1382 k.rule.ptr = NULL; in pf_insert_src_node()
1388 if (!rule->max_src_nodes || in pf_insert_src_node()
1389 rule->src_nodes < rule->max_src_nodes) { in pf_insert_src_node()
1400 rule->max_src_conn_rate.limit, in pf_insert_src_node()
1401 rule->max_src_conn_rate.seconds); in pf_insert_src_node()
1404 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1405 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1406 (*sn)->rule.ptr = rule; in pf_insert_src_node()
1408 (*sn)->rule.ptr = NULL; in pf_insert_src_node()
1423 (*sn)->ruletype = rule->action; in pf_insert_src_node()
1424 if ((*sn)->rule.ptr != NULL) { in pf_insert_src_node()
1425 (*sn)->rule.ptr->src_nodes++; in pf_insert_src_node()
1430 if (rule->max_src_states && in pf_insert_src_node()
1431 (*sn)->states >= rule->max_src_states) { in pf_insert_src_node()
1662 t = state->rule.ptr->timeout[state->timeout]; in pf_state_expires()
1666 start = state->rule.ptr->timeout[PFTM_ADAPTIVE_START]; in pf_state_expires()
1668 end = state->rule.ptr->timeout[PFTM_ADAPTIVE_END]; in pf_state_expires()
1669 states = state->rule.ptr->states; in pf_state_expires()
1697 if (cur->rule.ptr != NULL) { in pf_purge_expired_src_nodes()
1698 cur->rule.ptr->src_nodes--; in pf_purge_expired_src_nodes()
1699 if (cur->rule.ptr->states <= 0 && in pf_purge_expired_src_nodes()
1700 cur->rule.ptr->max_src_nodes <= 0) { in pf_purge_expired_src_nodes()
1701 pf_rm_rule(NULL, cur->rule.ptr); in pf_purge_expired_src_nodes()
1726 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1736 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1752 pf_send_tcp(cur->rule.ptr, cur->state_key->af_lan, in pf_unlink_state()
1786 VERIFY(cur->rule.ptr->states > 0); in pf_free_state()
1787 if (--cur->rule.ptr->states <= 0 && in pf_free_state()
1788 cur->rule.ptr->src_nodes <= 0) { in pf_free_state()
1789 pf_rm_rule(NULL, cur->rule.ptr); in pf_free_state()
3344 k.rule.ptr = r; in pf_map_addr()
3346 k.rule.ptr = NULL; in pf_map_addr()
4403 struct pf_rule *r = s->rule.ptr; in pf_set_rt_ifp()
5885 s->rule.ptr = r; in pf_test_rule()
6941 if (pf_insert_state(BOUND_IFACE(s->rule.ptr, kif), gs)) { in pf_pptp_handler()
7101 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7142 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7156 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7161 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7526 pf_send_tcp((*state)->rule.ptr, pd->af, in pf_test_state_tcp()
7530 (*state)->rule.ptr->return_ttl, 1, 0, in pf_test_state_tcp()
9894 r = s->rule.ptr; in pf_test()
9945 r = s->rule.ptr; in pf_test()
9986 r = s->rule.ptr; in pf_test()
10022 r = s->rule.ptr; in pf_test()
10066 r = s->rule.ptr; in pf_test()
10101 r = s->rule.ptr; in pf_test()
10551 r = s->rule.ptr; in pf_test6()
10602 r = s->rule.ptr; in pf_test6()
10642 r = s->rule.ptr; in pf_test6()
10678 r = s->rule.ptr; in pf_test6()
10722 r = s->rule.ptr; in pf_test6()
10757 r = s->rule.ptr; in pf_test6()
11168 struct pf_rule *rule = NULL; in pf_check_compatible_rules() local
11185 TAILQ_FOREACH(rule, pf_main_ruleset.rules[i].active.ptr, entries) { in pf_check_compatible_rules()
11186 if (rule->anchor == NULL) { in pf_check_compatible_rules()