Lines Matching refs:rule
408 (((*state)->rule.ptr->rt == PF_ROUTETO && in pf_state_lookup_aux()
409 (*state)->rule.ptr->direction == PF_OUT) || in pf_state_lookup_aux()
410 ((*state)->rule.ptr->rt == PF_REPLYTO && in pf_state_lookup_aux()
411 (*state)->rule.ptr->direction == PF_IN)) && in pf_state_lookup_aux()
475 s->rule.ptr->states++; \
476 VERIFY(s->rule.ptr->states != 0); \
497 VERIFY(s->rule.ptr->states > 0); \
498 s->rule.ptr->states--; \
816 if (a->rule.ptr > b->rule.ptr) { in pf_src_compare()
819 if (a->rule.ptr < b->rule.ptr) { in pf_src_compare()
1244 if ((*state)->rule.ptr->max_src_conn && in pf_src_connlimit()
1245 (*state)->rule.ptr->max_src_conn < in pf_src_connlimit()
1251 if ((*state)->rule.ptr->max_src_conn_rate.limit && in pf_src_connlimit()
1261 if ((*state)->rule.ptr->overload_tbl) { in pf_src_connlimit()
1287 pfr_insert_kentry((*state)->rule.ptr->overload_tbl, in pf_src_connlimit()
1291 if ((*state)->rule.ptr->flush) { in pf_src_connlimit()
1312 ((*state)->rule.ptr->flush & in pf_src_connlimit()
1314 (*state)->rule.ptr == st->rule.ptr)) { in pf_src_connlimit()
1337 pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule, in pf_insert_src_node() argument
1345 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1346 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1347 k.rule.ptr = rule; in pf_insert_src_node()
1349 k.rule.ptr = NULL; in pf_insert_src_node()
1355 if (!rule->max_src_nodes || in pf_insert_src_node()
1356 rule->src_nodes < rule->max_src_nodes) { in pf_insert_src_node()
1367 rule->max_src_conn_rate.limit, in pf_insert_src_node()
1368 rule->max_src_conn_rate.seconds); in pf_insert_src_node()
1371 if (rule->rule_flag & PFRULE_RULESRCTRACK || in pf_insert_src_node()
1372 rule->rpool.opts & PF_POOL_STICKYADDR) { in pf_insert_src_node()
1373 (*sn)->rule.ptr = rule; in pf_insert_src_node()
1375 (*sn)->rule.ptr = NULL; in pf_insert_src_node()
1390 (*sn)->ruletype = rule->action; in pf_insert_src_node()
1391 if ((*sn)->rule.ptr != NULL) { in pf_insert_src_node()
1392 (*sn)->rule.ptr->src_nodes++; in pf_insert_src_node()
1397 if (rule->max_src_states && in pf_insert_src_node()
1398 (*sn)->states >= rule->max_src_states) { in pf_insert_src_node()
1605 t = state->rule.ptr->timeout[state->timeout]; in pf_state_expires()
1609 start = state->rule.ptr->timeout[PFTM_ADAPTIVE_START]; in pf_state_expires()
1611 end = state->rule.ptr->timeout[PFTM_ADAPTIVE_END]; in pf_state_expires()
1612 states = state->rule.ptr->states; in pf_state_expires()
1640 if (cur->rule.ptr != NULL) { in pf_purge_expired_src_nodes()
1641 cur->rule.ptr->src_nodes--; in pf_purge_expired_src_nodes()
1642 if (cur->rule.ptr->states <= 0 && in pf_purge_expired_src_nodes()
1643 cur->rule.ptr->max_src_nodes <= 0) { in pf_purge_expired_src_nodes()
1644 pf_rm_rule(NULL, cur->rule.ptr); in pf_purge_expired_src_nodes()
1669 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1679 t = s->rule.ptr->timeout[PFTM_SRC_NODE]; in pf_src_tree_remove_state()
1695 pf_send_tcp(cur->rule.ptr, cur->state_key->af_lan, in pf_unlink_state()
1729 VERIFY(cur->rule.ptr->states > 0); in pf_free_state()
1730 if (--cur->rule.ptr->states <= 0 && in pf_free_state()
1731 cur->rule.ptr->src_nodes <= 0) { in pf_free_state()
1732 pf_rm_rule(NULL, cur->rule.ptr); in pf_free_state()
3287 k.rule.ptr = r; in pf_map_addr()
3289 k.rule.ptr = NULL; in pf_map_addr()
4346 struct pf_rule *r = s->rule.ptr; in pf_set_rt_ifp()
5829 s->rule.ptr = r; in pf_test_rule()
6885 if (pf_insert_state(BOUND_IFACE(s->rule.ptr, kif), gs)) { in pf_pptp_handler()
7045 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7086 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7100 pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst, in pf_test_state_tcp()
7105 pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr, in pf_test_state_tcp()
7470 pf_send_tcp((*state)->rule.ptr, pd->af, in pf_test_state_tcp()
7474 (*state)->rule.ptr->return_ttl, 1, 0, in pf_test_state_tcp()
9840 r = s->rule.ptr; in pf_test()
9891 r = s->rule.ptr; in pf_test()
9932 r = s->rule.ptr; in pf_test()
9968 r = s->rule.ptr; in pf_test()
10012 r = s->rule.ptr; in pf_test()
10047 r = s->rule.ptr; in pf_test()
10497 r = s->rule.ptr; in pf_test6()
10548 r = s->rule.ptr; in pf_test6()
10588 r = s->rule.ptr; in pf_test6()
10624 r = s->rule.ptr; in pf_test6()
10668 r = s->rule.ptr; in pf_test6()
10703 r = s->rule.ptr; in pf_test6()
11107 struct pf_rule *rule = NULL; in pf_check_compatible_rules() local
11121 TAILQ_FOREACH(rule, pf_main_ruleset.rules[i].active.ptr, entries) { in pf_check_compatible_rules()
11122 if (rule->anchor == NULL) { in pf_check_compatible_rules()