PFIL_OUT
if (npf_nat_lookup(dev, af, addr, port, IPPROTO_TCP, PFIL_OUT) == -1) {
if (dir == PFIL_OUT) {
if (pf_test(dir == PFIL_OUT ? PF_OUT : PF_IN, ifp, mp, NULL)
if (dir == PFIL_OUT) {
if (pf_test6(dir == PFIL_OUT ? PF_OUT : PF_IN, ifp, mp, NULL)
PFIL_IN|PFIL_OUT, ph_inet);
PFIL_IN|PFIL_OUT, ph_inet6);
pfil_remove_hook(pfil4_wrapper, NULL, PFIL_IN|PFIL_OUT, ph_inet);
PFIL_IN|PFIL_OUT, ph_inet);
PFIL_IN|PFIL_OUT, ph_inet6);
pfil_add_hook((void *)bridge_ipf, NULL, PFIL_IN|PFIL_OUT,
pfil_remove_hook((void *)bridge_ipf, NULL, PFIL_IN|PFIL_OUT,
dst_ifp, PFIL_OUT) != 0) {
if ((error = pfil_run_hooks(ifp->if_pfil, &m, ifp, PFIL_OUT)) != 0)
if ((error = pfil_run_hooks(ifp->if_pfil, &m, ifp, PFIL_OUT)) != 0)
if ((error = pfil_run_hooks(ifp->if_pfil, &m0, ifp, PFIL_OUT)) != 0)
if ((error = pfil_run_hooks(ifp->if_pfil, &m, ifp, PFIL_OUT)) != 0)
error = pfil_run_hooks(ifp->if_pfil, &m, ifp, PFIL_OUT);
if (ip->ip_ttl > TR_MAX_TTL || di != PFIL_OUT) {
CTASSERT(PFIL_IN == 0x1 || PFIL_OUT == 0x2);
case PFIL_IN|PFIL_OUT:
case PFIL_OUT:
if (di != PFIL_OUT) {
CTASSERT(NPF_NATIN == PFIL_IN && NPF_NATOUT == PFIL_OUT);
KASSERT(((di & PFIL_IN) != 0) ^ ((di & PFIL_OUT) != 0));
case PFIL_OUT:
KASSERT(dir == PFIL_IN || dir == PFIL_OUT);
CTASSERT(PFIL_OUT == 2);
PFIL_IN, PFIL_OUT
#define PFIL_ALL (PFIL_IN|PFIL_OUT)
error = pfil_run_hooks(inet_pfil_hook, &m, ifp, PFIL_OUT);
PFIL_OUT)) != 0) {
error = pfil_run_hooks(inet6_pfil_hook, &m, ifp, PFIL_OUT);
.di = PFIL_OUT, .ret = RESULT_PASS
NPF_BINAT, IFNAME_EXT, PFIL_OUT,
NPF_BINAT, IFNAME_EXT, PFIL_OUT,
NPF_BINAT, IFNAME_EXT, PFIL_OUT,
NPF_BINAT, IFNAME_EXT, PFIL_OUT,
const bool forw = t->di == PFIL_OUT;
NPF_NATOUT, IFNAME_EXT, PFIL_OUT,
NPF_NATOUT, IFNAME_EXT, PFIL_OUT,
NPF_NATIN, IFNAME_EXT, PFIL_OUT,
NPF_BINAT, IFNAME_EXT, PFIL_OUT,
error = npfk_packet_handler(npf, &m, ifp, PFIL_OUT);
.ifname = IFNAME_EXT, .di = PFIL_OUT,
if (dir == PFIL_OUT) {
.ifname = IFNAME_EXT, .di = PFIL_OUT,
.ifname = IFNAME_EXT, .di = PFIL_OUT,
.ifname = IFNAME_EXT, .di = PFIL_OUT,
.ifname = IFNAME_INT, .di = PFIL_OUT,
.ifname = IFNAME_INT, .di = PFIL_OUT,
.ifname = IFNAME_INT, .di = PFIL_OUT,
error = npfk_packet_handler(npf, &m, ifp, forw ? PFIL_OUT : PFIL_IN);
.di = PFIL_OUT, .ret = RESULT_PASS