PF_PASS
$$.b1 = PF_PASS;
case PF_PASS:
if (r->allow_opts && r->action != PF_PASS && r->action != PF_MATCH) {
if (r->action != PF_PASS && r->keep_state) {
if ((r->action != PF_PASS && r->action != PF_DROP) || r->anchor) {
if (opts->statelim.id != PF_STATELIM_ID_NONE && r->action != PF_PASS) {
if (opts->sourcelim.id != PF_SOURCELIM_ID_NONE && r->action != PF_PASS) {
case PF_PASS:
ret = pfctl_get_rules_info_h(pfh, &ri, PF_PASS, path);
ret = pfctl_get_rules_info_h(pfh, &ri, PF_PASS, path);
if ((ret = pfctl_get_clear_rule_h(pfh, nr, ri.ticket, path, PF_PASS,
nr, ri.ticket, PF_PASS, path, PF_RDR) != 0)
nr, ri.ticket, PF_PASS, path, PF_NAT) != 0)
nr, ri.ticket, PF_PASS, path, PF_RT) != 0)
if ((ret = pfctl_get_rules_info_h(pf->h, &rules, PF_PASS, "")) != 0) {
if (pfctl_get_rule_h(pf->h, nr, rules.ticket, "", PF_PASS,
print_pool(&r->route, 0, 0, PF_PASS);
} else if ((r->action == PF_PASS || r->action == PF_MATCH) &&
if (!r->keep_state && r->action == PF_PASS && !anchor_call[0])
case PF_PASS:
(unsigned long long)s->pcounters[0][0][PF_PASS],
(unsigned long long)s->pcounters[1][0][PF_PASS]);
(unsigned long long)s->pcounters[0][1][PF_PASS],
(unsigned long long)s->pcounters[1][1][PF_PASS]);
case PF_PASS:
action = PF_PASS;
action = PF_PASS;
int action = PF_PASS;
[action != PF_PASS && action != PF_AFRT], pd->tot_len);
[action != PF_PASS && action != PF_AFRT], 1);
ifp, &m0, inp, &pd->act) != PF_PASS) {
action = PF_PASS;
action = PF_PASS;
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
pd->off + hlen, reason) != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
reason) != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
if (pf_normalize_ip(reason, pd) != PF_PASS) {
if (pf_walk_header(pd, h, reason) != PF_PASS) {
if (pf_walk_header6(pd, h, reason) != PF_PASS) {
PF_PASS) {
*action = PF_PASS;
if (pf_walk_header6(pd, h, reason) != PF_PASS) {
if (pf_scan_sctp(pd) != PF_PASS) {
return (PF_PASS);
int op_r_pass = (r->action == PF_PASS);
int op_pass = (action == PF_PASS || action == PF_AFRT);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
kif, default_actions) != PF_PASS) {
if (action != PF_PASS)
if (action != PF_PASS)
if (action == PF_PASS || action == PF_AFRT) {
if (action != PF_PASS)
if (action != PF_PASS || s == NULL) {
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS && pd.badopts != 0 && !pd.act.allow_opts) {
if (action == PF_PASS && pd.act.qid) {
if (dir == PF_IN && action == PF_PASS && (pd.proto == IPPROTO_TCP ||
if (action == PF_PASS && r->divert.port && !PACKET_LOOPED(&pd)) {
action = PF_PASS;
if (af == AF_INET6 && action == PF_PASS && *m0 && dir == PF_OUT &&
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
if (action == PF_PASS && bridge_to) {
int action = PF_PASS;
if (action != PF_PASS) {
if (action != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
action = PF_PASS;
if ((action = pf_synproxy(pd, *state, reason)) != PF_PASS)
if (pf_sctp_track(*state, pd, reason) != PF_PASS)
return (PF_PASS);
if (s == NULL || action != PF_PASS)
if (ret != PF_PASS)
if (ret != PF_PASS)
return (PF_PASS);
return (PF_PASS);
if (pf_walk_header(&pd2, &h2, reason) != PF_PASS)
if (pf_walk_header6(&pd2, &h2_6, reason) != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
int action = PF_PASS;
[action != PF_PASS && action != PF_AFRT], pd->tot_len);
[action != PF_PASS && action != PF_AFRT], 1);
&pd->act) != PF_PASS) {
if (rule->action == PF_PASS && (rule->rdr.opts & PF_POOL_STICKYADDR ||
V_pf_default_rule.action = V_default_to_drop ? PF_DROP : PF_PASS;
case PF_PASS:
return (PF_PASS);
action = PF_PASS;
return (PF_PASS);
if (verdict != PF_PASS)
return (PF_PASS);
return (PF_PASS);
!= PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
if (ret != PF_PASS)
if (ret != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS); /* drop because *m0 is NULL, no error */
return (PF_PASS);
return (PF_PASS); /* Drop because *m0 is NULL, no error. */
if (krule->action != PF_PASS && krule->action != PF_DROP &&
case PF_PASS:
if (pfctl_get_rules_info_h(pfh, &rules, PF_PASS, path)) {
PF_PASS, &rule, anchor_call)) {
pfs->pcounters[IPV4][IN][PF_PASS];
pfs->pcounters[IPV4][OUT][PF_PASS];
pfs->pcounters[IPV6][IN][PF_PASS];
pfs->pcounters[IPV6][OUT][PF_PASS];