sbin/pfctl/parse.y

1060

filter_opts pfa_anchor

sbin/pfctl/parse.y

1396

bzero(&filter_opts, sizeof filter_opts);

sbin/pfctl/parse.y

1399

{ $$ = filter_opts; }

sbin/pfctl/parse.y

1401

bzero(&filter_opts, sizeof filter_opts);

sbin/pfctl/parse.y

1402

$$ = filter_opts;

sbin/pfctl/parse.y

1410

if (filter_opts.queues.qname) {

sbin/pfctl/parse.y

1414

filter_opts.queues = $1;

sbin/pfctl/parse.y

1417

filter_opts.ridentifier = $2;

sbin/pfctl/parse.y

1420

if (filter_opts.labelcount >= PF_RULE_MAX_LABEL_COUNT) {

sbin/pfctl/parse.y

1424

filter_opts.label[filter_opts.labelcount++] = $1;

sbin/pfctl/parse.y

1427

filter_opts.tag = $2;

sbin/pfctl/parse.y

1430

filter_opts.match_tag = $3;

sbin/pfctl/parse.y

1431

filter_opts.match_tag_not = $1;

sbin/pfctl/parse.y

1434

filter_opts.dnpipe = $2;

sbin/pfctl/parse.y

1435

filter_opts.free_flags |= PFRULE_DN_IS_PIPE;

sbin/pfctl/parse.y

1438

filter_opts.dnpipe = $2;

sbin/pfctl/parse.y

1439

filter_opts.free_flags |= PFRULE_DN_IS_QUEUE;

sbin/pfctl/parse.y

2803

filter_opts

sbin/pfctl/parse.y

3192

filter_opts : {

sbin/pfctl/parse.y

3193

bzero(&filter_opts, sizeof filter_opts);

sbin/pfctl/parse.y

3194

filter_opts.statelim.id = PF_STATELIM_ID_NONE;

sbin/pfctl/parse.y

3195

filter_opts.statelim.limiter_action = PF_LIMITER_NOMATCH;

sbin/pfctl/parse.y

3196

filter_opts.sourcelim.id = PF_SOURCELIM_ID_NONE;

sbin/pfctl/parse.y

3197

filter_opts.sourcelim.limiter_action = PF_LIMITER_NOMATCH;

sbin/pfctl/parse.y

3198

filter_opts.rtableid = -1;

sbin/pfctl/parse.y

3201

{ $$ = filter_opts; }

sbin/pfctl/parse.y

3203

bzero(&filter_opts, sizeof filter_opts);

sbin/pfctl/parse.y

3204

filter_opts.statelim.id = PF_STATELIM_ID_NONE;

sbin/pfctl/parse.y

3205

filter_opts.statelim.limiter_action = PF_LIMITER_NOMATCH;

sbin/pfctl/parse.y

3206

filter_opts.sourcelim.id = PF_SOURCELIM_ID_NONE;

sbin/pfctl/parse.y

3207

filter_opts.sourcelim.limiter_action = PF_LIMITER_NOMATCH;

sbin/pfctl/parse.y

3208

filter_opts.rtableid = -1;

sbin/pfctl/parse.y

3209

$$ = filter_opts;

sbin/pfctl/parse.y

3218

if (filter_opts.uid)

sbin/pfctl/parse.y

3219

$2->tail->next = filter_opts.uid;

sbin/pfctl/parse.y

3220

filter_opts.uid = $2;

sbin/pfctl/parse.y

3223

if (filter_opts.gid)

sbin/pfctl/parse.y

3224

$2->tail->next = filter_opts.gid;

sbin/pfctl/parse.y

3225

filter_opts.gid = $2;

sbin/pfctl/parse.y

3228

if (filter_opts.marker & FOM_FLAGS) {

sbin/pfctl/parse.y

3232

filter_opts.marker |= FOM_FLAGS;

sbin/pfctl/parse.y

3233

filter_opts.flags.b1 |= $1.b1;

sbin/pfctl/parse.y

3234

filter_opts.flags.b2 |= $1.b2;

sbin/pfctl/parse.y

3235

filter_opts.flags.w |= $1.w;

sbin/pfctl/parse.y

3236

filter_opts.flags.w2 |= $1.w2;

sbin/pfctl/parse.y

3239

if (filter_opts.marker & FOM_ICMP) {

sbin/pfctl/parse.y

3243

filter_opts.marker |= FOM_ICMP;

sbin/pfctl/parse.y

3244

filter_opts.icmpspec = $1;

sbin/pfctl/parse.y

3247

if (filter_opts.marker & FOM_PRIO) {

sbin/pfctl/parse.y

3255

filter_opts.marker |= FOM_PRIO;

sbin/pfctl/parse.y

3256

filter_opts.prio = $2;

sbin/pfctl/parse.y

3259

if (filter_opts.marker & FOM_TOS) {

sbin/pfctl/parse.y

3263

filter_opts.marker |= FOM_TOS;

sbin/pfctl/parse.y

3264

filter_opts.tos = $2;

sbin/pfctl/parse.y

3267

if (filter_opts.marker & FOM_KEEP) {

sbin/pfctl/parse.y

3271

filter_opts.marker |= FOM_KEEP;

sbin/pfctl/parse.y

3272

filter_opts.keep.action = $1.action;

sbin/pfctl/parse.y

3273

filter_opts.keep.options = $1.options;

sbin/pfctl/parse.y

3276

filter_opts.ridentifier = $2;

sbin/pfctl/parse.y

3279

filter_opts.fragment = 1;

sbin/pfctl/parse.y

3282

filter_opts.allowopts = 1;

sbin/pfctl/parse.y

3285

if (filter_opts.labelcount >= PF_RULE_MAX_LABEL_COUNT) {

sbin/pfctl/parse.y

3289

filter_opts.label[filter_opts.labelcount++] = $1;

sbin/pfctl/parse.y

3292

if (filter_opts.queues.qname) {

sbin/pfctl/parse.y

3296

filter_opts.queues = $1;

sbin/pfctl/parse.y

3299

filter_opts.dnpipe = $2;

sbin/pfctl/parse.y

3300

filter_opts.free_flags |= PFRULE_DN_IS_PIPE;

sbin/pfctl/parse.y

3303

filter_opts.dnpipe = $3;

sbin/pfctl/parse.y

3304

filter_opts.free_flags |= PFRULE_DN_IS_PIPE;

sbin/pfctl/parse.y

3307

filter_opts.dnrpipe = $5;

sbin/pfctl/parse.y

3308

filter_opts.dnpipe = $3;

sbin/pfctl/parse.y

3309

filter_opts.free_flags |= PFRULE_DN_IS_PIPE;

sbin/pfctl/parse.y

3312

filter_opts.dnpipe = $2;

sbin/pfctl/parse.y

3313

filter_opts.free_flags |= PFRULE_DN_IS_QUEUE;

sbin/pfctl/parse.y

3316

filter_opts.dnrpipe = $5;

sbin/pfctl/parse.y

3317

filter_opts.dnpipe = $3;

sbin/pfctl/parse.y

3318

filter_opts.free_flags |= PFRULE_DN_IS_QUEUE;

sbin/pfctl/parse.y

332

} filter_opts;

sbin/pfctl/parse.y

3321

filter_opts.dnpipe = $3;

sbin/pfctl/parse.y

3322

filter_opts.free_flags |= PFRULE_DN_IS_QUEUE;

sbin/pfctl/parse.y

3325

filter_opts.tag = $2;

sbin/pfctl/parse.y

3328

filter_opts.match_tag = $3;

sbin/pfctl/parse.y

3329

filter_opts.match_tag_not = $1;

sbin/pfctl/parse.y

3332

if (filter_opts.rcv) {

sbin/pfctl/parse.y

3336

filter_opts.rcv = $3;

sbin/pfctl/parse.y

3337

filter_opts.rcv->not = $1;

sbin/pfctl/parse.y

3347

filter_opts.prob = (u_int32_t)p;

sbin/pfctl/parse.y

3348

if (filter_opts.prob == 0)

sbin/pfctl/parse.y

3349

filter_opts.prob = 1;

sbin/pfctl/parse.y

3352

if (filter_opts.statelim.id != PF_STATELIM_ID_NONE) {

sbin/pfctl/parse.y

3356

filter_opts.statelim = $1;

sbin/pfctl/parse.y

3359

if (filter_opts.sourcelim.id != PF_SOURCELIM_ID_NONE) {

sbin/pfctl/parse.y

3363

filter_opts.sourcelim = $1;

sbin/pfctl/parse.y

3370

filter_opts.rtableid = $2;

sbin/pfctl/parse.y

3374

filter_opts.divert.port = $2.a;

sbin/pfctl/parse.y

3375

if (!filter_opts.divert.port) {

sbin/pfctl/parse.y

3383

if ((filter_opts.divert.addr = host($2, pf->opts)) == NULL) {

sbin/pfctl/parse.y

3393

filter_opts.divert.port = $4.a;

sbin/pfctl/parse.y

3394

if (!filter_opts.divert.port) {

sbin/pfctl/parse.y

3404

filter_opts.divert.port = 1; /* some random value */

sbin/pfctl/parse.y

3408

filter_opts.nodf = $3.nodf;

sbin/pfctl/parse.y

3409

filter_opts.minttl = $3.minttl;

sbin/pfctl/parse.y

3417

filter_opts.settos = $3.settos;

sbin/pfctl/parse.y

3419

filter_opts.randomid = $3.randomid;

sbin/pfctl/parse.y

3420

filter_opts.max_mss = $3.maxmss;

sbin/pfctl/parse.y

3422

filter_opts.marker |= FOM_SCRUB_TCP;

sbin/pfctl/parse.y

3423

filter_opts.marker |= $3.marker;

sbin/pfctl/parse.y

3426

if (filter_opts.nat) {

sbin/pfctl/parse.y

3430

filter_opts.nat = $2;

sbin/pfctl/parse.y

3433

if (filter_opts.rdr) {

sbin/pfctl/parse.y

3437

filter_opts.rdr = $2;

sbin/pfctl/parse.y

3440

if (filter_opts.nat) {

sbin/pfctl/parse.y

3444

filter_opts.nat = $2;

sbin/pfctl/parse.y

3445

filter_opts.nat->binat = 1;

sbin/pfctl/parse.y

3446

filter_opts.nat->pool_opts.staticport = 1;

sbin/pfctl/parse.y

3449

if (filter_opts.nat) {

sbin/pfctl/parse.y

3458

filter_opts.nat = $4;

sbin/pfctl/parse.y

3459

filter_opts.nat->af = $2;

sbin/pfctl/parse.y

3460

remove_invalid_hosts(&($4->host), &(filter_opts.nat->af));

sbin/pfctl/parse.y

3466

filter_opts.marker |= FOM_AFTO;

sbin/pfctl/parse.y

3469

if (filter_opts.nat) {

sbin/pfctl/parse.y

3477

filter_opts.nat = $4;

sbin/pfctl/parse.y

3478

filter_opts.nat->af = $2;

sbin/pfctl/parse.y

3479

filter_opts.rdr = $6;

sbin/pfctl/parse.y

3480

filter_opts.rdr->af = $2;

sbin/pfctl/parse.y

3481

remove_invalid_hosts(&($4->host), &(filter_opts.nat->af));

sbin/pfctl/parse.y

3482

remove_invalid_hosts(&($6->host), &(filter_opts.rdr->af));

sbin/pfctl/parse.y

3488

filter_opts.marker |= FOM_AFTO;

sbin/pfctl/parse.y

3496

if (filter_opts.pktrate.limit) {

sbin/pfctl/parse.y

3500

filter_opts.pktrate.limit = $2;

sbin/pfctl/parse.y

3501

filter_opts.pktrate.seconds = $4;

sbin/pfctl/parse.y

3508

filter_opts.max_pkt_size = $2;

sbin/pfctl/parse.y

3511

filter_opts.marker |= FOM_ONCE;

sbin/pfctl/parse.y

3516

filter_sets : SET '(' filter_sets_l ')' { $$ = filter_opts; }

sbin/pfctl/parse.y

3517

| SET filter_set { $$ = filter_opts; }

sbin/pfctl/parse.y

3525

if (filter_opts.marker & FOM_SETPRIO) {

sbin/pfctl/parse.y

3529

filter_opts.marker |= FOM_SETPRIO;

sbin/pfctl/parse.y

3530

filter_opts.set_prio[0] = $1.b1;

sbin/pfctl/parse.y

3531

filter_opts.set_prio[1] = $1.b2;

sbin/pfctl/parse.y

3534

if (filter_opts.marker & FOM_SETTOS) {

sbin/pfctl/parse.y

3538

filter_opts.marker |= FOM_SETTOS;

sbin/pfctl/parse.y

3539

filter_opts.settos = $2;

sbin/pfctl/parse.y

486

int filteropts_to_rule(struct pfctl_rule *, struct filter_opts *);

sbin/pfctl/parse.y

562

struct filter_opts filter_opts;

sbin/pfctl/parse.y

657

%type <v.filter_opts> filter_opts filter_opt filter_opts_l etherfilter_opts etherfilter_opt etherfilter_opts_l

sbin/pfctl/parse.y

658

%type <v.filter_opts> filter_sets filter_set filter_sets_l

sbin/pfctl/parse.y

8222

filteropts_to_rule(struct pfctl_rule *r, struct filter_opts *opts)