Lines Matching refs:rule
409 (((*state)->rule.ptr->rt == PF_ROUTETO && in pf_state_lookup_aux()
410 (*state)->rule.ptr->direction == PF_OUT) || in pf_state_lookup_aux()
411 ((*state)->rule.ptr->rt == PF_REPLYTO && in pf_state_lookup_aux()
412 (*state)->rule.ptr->direction == PF_IN)) && in pf_state_lookup_aux()
476 s->rule.ptr->states++; \
477 VERIFY(s->rule.ptr->states != 0); \
498 VERIFY(s->rule.ptr->states > 0); \
499 s->rule.ptr->states--; \
801 if (a->rule.ptr > b->rule.ptr) { in pf_src_compare()
804 if (a->rule.ptr < b->rule.ptr) { in pf_src_compare()
1258 if ((*state)->rule.ptr->max_src_conn && in pf_src_connlimit()
1259 (*state)->rule.ptr->max_src_conn < in pf_src_connlimit()
1265 if ((*state)->rule.ptr->max_src_conn_rate.limit && in pf_src_connlimit()
1275 if ((*state)->rule.ptr->overload_tbl) { in pf_src_connlimit()
1301 pfr_insert_kentry((*state)->rule.ptr->overload_tbl, in pf_src_connlimit()
1305 if ((*state)->rule.ptr->flush) { in pf_src_connlimit()
1326 ((*state)->rule.ptr->flush & in pf_src_connlimit()
1328 (*state)->rule.ptr == st->rule.ptr)) { in pf_src_connlimit()
1351 pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule, in pf_insert_src_node() argument
1359 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1360 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1361 k.rule.ptr = rule; in pf_insert_src_node()
1363 k.rule.ptr = NULL; in pf_insert_src_node()
1369 if (!rule->max_src_nodes || in pf_insert_src_node()
1370 rule->src_nodes < rule->max_src_nodes) { in pf_insert_src_node()
1381 rule->max_src_conn_rate.limit, in pf_insert_src_node()
1382 rule->max_src_conn_rate.seconds); in pf_insert_src_node()
1385 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1386 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1387 (*sn)->rule.ptr = rule; in pf_insert_src_node()
1389 (*sn)->rule.ptr = NULL; in pf_insert_src_node()
1404 (*sn)->ruletype = rule->action; in pf_insert_src_node()
1405 if ((*sn)->rule.ptr != NULL) { in pf_insert_src_node()
1406 (*sn)->rule.ptr->src_nodes++; in pf_insert_src_node()
1411 if (rule->max_src_states && in pf_insert_src_node()
1412 (*sn)->states >= rule->max_src_states) { in pf_insert_src_node()
1643 t = state->rule.ptr->timeout[state->timeout]; in pf_state_expires()
1647 start = state->rule.ptr->timeout[PFTM_ADAPTIVE_START]; in pf_state_expires()
1649 end = state->rule.ptr->timeout[PFTM_ADAPTIVE_END]; in pf_state_expires()
1650 states = state->rule.ptr->states; in pf_state_expires()
1678 if (cur->rule.ptr != NULL) { in pf_purge_expired_src_nodes()
1679 cur->rule.ptr->src_nodes--; in pf_purge_expired_src_nodes()
1680 if (cur->rule.ptr->states <= 0 && in pf_purge_expired_src_nodes()
1681 cur->rule.ptr->max_src_nodes <= 0) { in pf_purge_expired_src_nodes()
1682 pf_rm_rule(NULL, cur->rule.ptr); in pf_purge_expired_src_nodes()
1707 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1717 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1733 pf_send_tcp(cur->rule.ptr, cur->state_key->af_lan, in pf_unlink_state()
1767 VERIFY(cur->rule.ptr->states > 0); in pf_free_state()
1768 if (--cur->rule.ptr->states <= 0 && in pf_free_state()
1769 cur->rule.ptr->src_nodes <= 0) { in pf_free_state()
1770 pf_rm_rule(NULL, cur->rule.ptr); in pf_free_state()
3325 k.rule.ptr = r; in pf_map_addr()
3327 k.rule.ptr = NULL; in pf_map_addr()
4384 struct pf_rule *r = s->rule.ptr; in pf_set_rt_ifp()
5865 s->rule.ptr = r; in pf_test_rule()
6921 if (pf_insert_state(BOUND_IFACE(s->rule.ptr, kif), gs)) { in pf_pptp_handler()
7081 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7122 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7136 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7141 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7506 pf_send_tcp((*state)->rule.ptr, pd->af, in pf_test_state_tcp()
7510 (*state)->rule.ptr->return_ttl, 1, 0, in pf_test_state_tcp()
9875 r = s->rule.ptr; in pf_test()
9926 r = s->rule.ptr; in pf_test()
9967 r = s->rule.ptr; in pf_test()
10003 r = s->rule.ptr; in pf_test()
10047 r = s->rule.ptr; in pf_test()
10082 r = s->rule.ptr; in pf_test()
10532 r = s->rule.ptr; in pf_test6()
10583 r = s->rule.ptr; in pf_test6()
10623 r = s->rule.ptr; in pf_test6()
10659 r = s->rule.ptr; in pf_test6()
10703 r = s->rule.ptr; in pf_test6()
10738 r = s->rule.ptr; in pf_test6()
11148 struct pf_rule *rule = NULL; in pf_check_compatible_rules() local
11165 TAILQ_FOREACH(rule, pf_main_ruleset.rules[i].active.ptr, entries) { in pf_check_compatible_rules()
11166 if (rule->anchor == NULL) { in pf_check_compatible_rules()