Symbol: rule
crypto/dist/ipsec-tools/src/libipsec/policy_parse.y
275
| rules rule {
crypto/dist/ipsec-tools/src/libipsec/policy_parse.y
286
rule
dist/pf/libexec/tftp-proxy/filter.c
107
pfr.rule.rpool.proxy_port[0] = nat_range_low;
dist/pf/libexec/tftp-proxy/filter.c
108
pfr.rule.rpool.proxy_port[1] = nat_range_high;
dist/pf/libexec/tftp-proxy/filter.c
140
pfr.rule.rpool.proxy_port[0] = rdr_port;
dist/pf/libexec/tftp-proxy/filter.c
268
pfr.rule.af = src->sa_family;
dist/pf/libexec/tftp-proxy/filter.c
269
pfr.rule.proto = proto;
dist/pf/libexec/tftp-proxy/filter.c
270
pfr.rule.src.addr.type = PF_ADDR_ADDRMASK;
dist/pf/libexec/tftp-proxy/filter.c
271
pfr.rule.dst.addr.type = PF_ADDR_ADDRMASK;
dist/pf/libexec/tftp-proxy/filter.c
273
memcpy(&pfr.rule.src.addr.v.a.addr.v4,
dist/pf/libexec/tftp-proxy/filter.c
275
memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 4);
dist/pf/libexec/tftp-proxy/filter.c
276
memcpy(&pfr.rule.dst.addr.v.a.addr.v4,
dist/pf/libexec/tftp-proxy/filter.c
278
memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 4);
dist/pf/libexec/tftp-proxy/filter.c
280
memcpy(&pfr.rule.src.addr.v.a.addr.v6,
dist/pf/libexec/tftp-proxy/filter.c
282
memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 16);
dist/pf/libexec/tftp-proxy/filter.c
283
memcpy(&pfr.rule.dst.addr.v.a.addr.v6,
dist/pf/libexec/tftp-proxy/filter.c
285
memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 16);
dist/pf/libexec/tftp-proxy/filter.c
287
pfr.rule.dst.port_op = PF_OP_EQ;
dist/pf/libexec/tftp-proxy/filter.c
288
pfr.rule.dst.port[0] = htons(d_port);
dist/pf/libexec/tftp-proxy/filter.c
297
pfr.rule.action = PF_PASS;
dist/pf/libexec/tftp-proxy/filter.c
298
pfr.rule.quick = 1;
dist/pf/libexec/tftp-proxy/filter.c
299
pfr.rule.log = rule_log;
dist/pf/libexec/tftp-proxy/filter.c
300
pfr.rule.keep_state = 1;
dist/pf/libexec/tftp-proxy/filter.c
301
pfr.rule.flags = (proto == IPPROTO_TCP ? TH_SYN : 0);
dist/pf/libexec/tftp-proxy/filter.c
302
pfr.rule.flagset = (proto == IPPROTO_TCP ?
dist/pf/libexec/tftp-proxy/filter.c
304
pfr.rule.max_states = 1;
dist/pf/libexec/tftp-proxy/filter.c
306
strlcpy(pfr.rule.qname, qname, sizeof pfr.rule.qname);
dist/pf/libexec/tftp-proxy/filter.c
312
pfr.rule.action = PF_NAT;
dist/pf/libexec/tftp-proxy/filter.c
318
pfr.rule.action = PF_RDR;
dist/pf/libexec/tftp-proxy/filter.c
74
pfr.rule.direction = dir;
dist/pf/sbin/pfctl/pf_print_state.c
288
if (s->rule != -1)
dist/pf/sbin/pfctl/pf_print_state.c
289
printf(", rule %u", s->rule);
dist/pf/sbin/pfctl/pfctl.c
1134
struct pf_rule *rule;
dist/pf/sbin/pfctl/pfctl.c
1154
sizeof(rule->anchor->path)) >= sizeof(rule->anchor->path))
dist/pf/sbin/pfctl/pfctl.c
1163
sizeof(rule->anchor->name)) >= sizeof(rule->anchor->name))
dist/pf/sbin/pfctl/pfctl.c
1167
if ((rule = calloc(1, sizeof(*rule))) == NULL)
dist/pf/sbin/pfctl/pfctl.c
1169
bcopy(r, rule, sizeof(*rule));
dist/pf/sbin/pfctl/pfctl.c
1170
TAILQ_INIT(&rule->rpool.list);
dist/pf/sbin/pfctl/pfctl.c
1171
pfctl_move_pool(&r->rpool, &rule->rpool);
dist/pf/sbin/pfctl/pfctl.c
1173
TAILQ_INSERT_TAIL(rs->rules[rs_num].active.ptr, rule, entries);
dist/pf/sbin/pfctl/pfctl.c
1300
memcpy(&pr.rule, r, sizeof(pr.rule));
dist/pf/sbin/pfctl/pfctl.c
711
pfctl_print_rule_counters(struct pf_rule *rule, int opts)
dist/pf/sbin/pfctl/pfctl.c
720
if (rule->skip[i].nr == rule->nr + 1)
dist/pf/sbin/pfctl/pfctl.c
723
if (rule->skip[i].nr == -1)
dist/pf/sbin/pfctl/pfctl.c
726
printf("%u ", rule->skip[i].nr);
dist/pf/sbin/pfctl/pfctl.c
731
rule->qname, rule->qid, rule->pqname, rule->pqid);
dist/pf/sbin/pfctl/pfctl.c
736
(unsigned long long)rule->evaluations,
dist/pf/sbin/pfctl/pfctl.c
737
(unsigned long long)(rule->packets[0] +
dist/pf/sbin/pfctl/pfctl.c
738
rule->packets[1]),
dist/pf/sbin/pfctl/pfctl.c
739
(unsigned long long)(rule->bytes[0] +
dist/pf/sbin/pfctl/pfctl.c
740
rule->bytes[1]), rule->states);
dist/pf/sbin/pfctl/pfctl.c
743
(unsigned)rule->cuid, (unsigned)rule->cpid);
dist/pf/sbin/pfctl/pfctl.c
775
pr.rule.action = PF_PASS;
dist/pf/sbin/pfctl/pfctl.c
782
pr.rule.action = PF_SCRUB;
dist/pf/sbin/pfctl/pfctl.c
804
if (pfctl_get_pool(dev, &pr.rule.rpool,
dist/pf/sbin/pfctl/pfctl.c
810
if (pr.rule.label[0]) {
dist/pf/sbin/pfctl/pfctl.c
811
printf("%s ", pr.rule.label);
dist/pf/sbin/pfctl/pfctl.c
813
(unsigned long long)pr.rule.evaluations,
dist/pf/sbin/pfctl/pfctl.c
814
(unsigned long long)(pr.rule.packets[0] +
dist/pf/sbin/pfctl/pfctl.c
815
pr.rule.packets[1]),
dist/pf/sbin/pfctl/pfctl.c
816
(unsigned long long)(pr.rule.bytes[0] +
dist/pf/sbin/pfctl/pfctl.c
817
pr.rule.bytes[1]),
dist/pf/sbin/pfctl/pfctl.c
818
(unsigned long long)pr.rule.packets[0],
dist/pf/sbin/pfctl/pfctl.c
819
(unsigned long long)pr.rule.bytes[0],
dist/pf/sbin/pfctl/pfctl.c
820
(unsigned long long)pr.rule.packets[1],
dist/pf/sbin/pfctl/pfctl.c
821
(unsigned long long)pr.rule.bytes[1]);
dist/pf/sbin/pfctl/pfctl.c
825
if (pr.rule.label[0] && (opts & PF_OPT_SHOWALL))
dist/pf/sbin/pfctl/pfctl.c
827
print_rule(&pr.rule, pr.anchor_call, rule_numbers);
dist/pf/sbin/pfctl/pfctl.c
829
pfctl_print_rule_counters(&pr.rule, opts);
dist/pf/sbin/pfctl/pfctl.c
834
pfctl_clear_pool(&pr.rule.rpool);
dist/pf/sbin/pfctl/pfctl.c
836
pr.rule.action = PF_PASS;
dist/pf/sbin/pfctl/pfctl.c
849
if (pfctl_get_pool(dev, &pr.rule.rpool,
dist/pf/sbin/pfctl/pfctl.c
855
if (pr.rule.label[0]) {
dist/pf/sbin/pfctl/pfctl.c
856
printf("%s ", pr.rule.label);
dist/pf/sbin/pfctl/pfctl.c
858
(unsigned long long)pr.rule.evaluations,
dist/pf/sbin/pfctl/pfctl.c
859
(unsigned long long)(pr.rule.packets[0] +
dist/pf/sbin/pfctl/pfctl.c
860
pr.rule.packets[1]),
dist/pf/sbin/pfctl/pfctl.c
861
(unsigned long long)(pr.rule.bytes[0] +
dist/pf/sbin/pfctl/pfctl.c
862
pr.rule.bytes[1]),
dist/pf/sbin/pfctl/pfctl.c
863
(unsigned long long)pr.rule.packets[0],
dist/pf/sbin/pfctl/pfctl.c
864
(unsigned long long)pr.rule.bytes[0],
dist/pf/sbin/pfctl/pfctl.c
865
(unsigned long long)pr.rule.packets[1],
dist/pf/sbin/pfctl/pfctl.c
866
(unsigned long long)pr.rule.bytes[1]);
dist/pf/sbin/pfctl/pfctl.c
871
if (pr.rule.label[0] && (opts & PF_OPT_SHOWALL))
dist/pf/sbin/pfctl/pfctl.c
887
print_rule(&pr.rule, p, rule_numbers);
dist/pf/sbin/pfctl/pfctl.c
892
pfctl_print_rule_counters(&pr.rule, opts);
dist/pf/sbin/pfctl/pfctl.c
903
pfctl_clear_pool(&pr.rule.rpool);
dist/pf/sbin/pfctl/pfctl.c
924
pr.rule.action = nattype[i];
dist/pf/sbin/pfctl/pfctl.c
936
if (pfctl_get_pool(dev, &pr.rule.rpool, nr,
dist/pf/sbin/pfctl/pfctl.c
943
print_rule(&pr.rule, pr.anchor_call,
dist/pf/sbin/pfctl/pfctl.c
946
pfctl_print_rule_counters(&pr.rule, opts);
dist/pf/sbin/pfctl/pfctl.c
947
pfctl_clear_pool(&pr.rule.rpool);
dist/pf/sbin/pfctl/pfctl_optimize.c
888
pr.rule.action = PF_PASS;
dist/pf/sbin/pfctl/pfctl_optimize.c
908
memcpy(&por->por_rule, &pr.rule, sizeof(por->por_rule));
dist/pf/sbin/pfctl/pfctl_parser.c
686
if (sn->rule.nr != -1)
dist/pf/sbin/pfctl/pfctl_parser.c
687
printf(", nat rule %u", sn->rule.nr);
dist/pf/sbin/pfctl/pfctl_parser.c
690
if (sn->rule.nr != -1)
dist/pf/sbin/pfctl/pfctl_parser.c
691
printf(", rdr rule %u", sn->rule.nr);
dist/pf/sbin/pfctl/pfctl_parser.c
694
if (sn->rule.nr != -1)
dist/pf/sbin/pfctl/pfctl_parser.c
695
printf(", filter rule %u", sn->rule.nr);
dist/pf/usr.sbin/ftp-proxy/filter.c
131
pfr.rule.rpool.proxy_port[0] = nat_range_low;
dist/pf/usr.sbin/ftp-proxy/filter.c
132
pfr.rule.rpool.proxy_port[1] = nat_range_high;
dist/pf/usr.sbin/ftp-proxy/filter.c
165
pfr.rule.rpool.proxy_port[0] = rdr_port;
dist/pf/usr.sbin/ftp-proxy/filter.c
290
pfr.rule.af = src->sa_family;
dist/pf/usr.sbin/ftp-proxy/filter.c
291
pfr.rule.proto = IPPROTO_TCP;
dist/pf/usr.sbin/ftp-proxy/filter.c
292
pfr.rule.src.addr.type = PF_ADDR_ADDRMASK;
dist/pf/usr.sbin/ftp-proxy/filter.c
293
pfr.rule.dst.addr.type = PF_ADDR_ADDRMASK;
dist/pf/usr.sbin/ftp-proxy/filter.c
295
memcpy(&pfr.rule.src.addr.v.a.addr.v4,
dist/pf/usr.sbin/ftp-proxy/filter.c
297
memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 4);
dist/pf/usr.sbin/ftp-proxy/filter.c
298
memcpy(&pfr.rule.dst.addr.v.a.addr.v4,
dist/pf/usr.sbin/ftp-proxy/filter.c
300
memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 4);
dist/pf/usr.sbin/ftp-proxy/filter.c
302
memcpy(&pfr.rule.src.addr.v.a.addr.v6,
dist/pf/usr.sbin/ftp-proxy/filter.c
304
memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 16);
dist/pf/usr.sbin/ftp-proxy/filter.c
305
memcpy(&pfr.rule.dst.addr.v.a.addr.v6,
dist/pf/usr.sbin/ftp-proxy/filter.c
307
memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 16);
dist/pf/usr.sbin/ftp-proxy/filter.c
309
pfr.rule.dst.port_op = PF_OP_EQ;
dist/pf/usr.sbin/ftp-proxy/filter.c
310
pfr.rule.dst.port[0] = htons(d_port);
dist/pf/usr.sbin/ftp-proxy/filter.c
312
strlcpy(pfr.rule.tagname, tagname, sizeof pfr.rule.tagname);
dist/pf/usr.sbin/ftp-proxy/filter.c
321
pfr.rule.action = PF_PASS;
dist/pf/usr.sbin/ftp-proxy/filter.c
322
pfr.rule.quick = 1;
dist/pf/usr.sbin/ftp-proxy/filter.c
323
pfr.rule.log = rule_log;
dist/pf/usr.sbin/ftp-proxy/filter.c
324
pfr.rule.keep_state = 1;
dist/pf/usr.sbin/ftp-proxy/filter.c
325
pfr.rule.flags = TH_SYN;
dist/pf/usr.sbin/ftp-proxy/filter.c
326
pfr.rule.flagset = (TH_SYN|TH_ACK);
dist/pf/usr.sbin/ftp-proxy/filter.c
327
pfr.rule.max_states = 1;
dist/pf/usr.sbin/ftp-proxy/filter.c
329
strlcpy(pfr.rule.qname, qname, sizeof pfr.rule.qname);
dist/pf/usr.sbin/ftp-proxy/filter.c
335
pfr.rule.action = PF_NAT;
dist/pf/usr.sbin/ftp-proxy/filter.c
341
pfr.rule.action = PF_RDR;
dist/pf/usr.sbin/ftp-proxy/filter.c
97
pfr.rule.direction = dir;
games/atc/input.c
116
RULE *rule;
games/atc/input.c
122
int rule;
games/atc/input.c
127
#define T_RULE stack[level].rule
games/atc/input.c
255
st[T_STATE].rule[ruleno].str, tval);
games/atc/input.c
258
newstate = st[T_STATE].rule[ruleno].to_state;
games/atc/input.c
292
if (st[T_STATE].rule[i].token == c ||
games/atc/input.c
293
st[T_STATE].rule[i].token == tval) {
games/atc/input.c
310
func = st[stack[i].state].rule[stack[i].rule].func;
lib/libc/time/localtime.c
1608
getrule(const char *strp, register struct rule *const rulep)
lib/libc/time/localtime.c
1659
transtime(const int year, register const struct rule *const rulep,
lib/libc/time/localtime.c
1795
struct rule start, end;
lib/libc/time/zic.c
1909
struct rule const *r1 = cp1, *r2 = cp2;
lib/libc/time/zic.c
1917
register struct rule * rp;
lib/libc/time/zic.c
2173
struct rule r;
lib/libc/time/zic.c
2458
rulesub(struct rule *rp, const char *loyearp, const char *hiyearp,
lib/libc/time/zic.c
255
struct rule * z_rules;
lib/libc/time/zic.c
258
struct rule z_untilrule;
lib/libc/time/zic.c
308
static zic_t rpytime(const struct rule * rp, zic_t wantedy);
lib/libc/time/zic.c
309
static bool rulesub(struct rule * rp,
lib/libc/time/zic.c
3237
stringrule(char *result, int resultlen, struct rule *const rp, zic_t save, const zic_t stdoff)
lib/libc/time/zic.c
3305
rule_cmp(struct rule const *a, struct rule const *b)
lib/libc/time/zic.c
3329
register struct rule * rp;
lib/libc/time/zic.c
3330
register struct rule * stdrp;
lib/libc/time/zic.c
3331
register struct rule * dstrp;
lib/libc/time/zic.c
3336
struct rule stdr, dstr;
lib/libc/time/zic.c
3339
struct rule *lastrp[2] = { NULL, NULL };
lib/libc/time/zic.c
3353
struct rule **last;
lib/libc/time/zic.c
3506
struct rule *rp = &zp->z_rules[j];
lib/libc/time/zic.c
3598
struct rule *rp = &zp->z_rules[j];
lib/libc/time/zic.c
3614
struct rule *rp;
lib/libc/time/zic.c
3638
struct rule *r = &zp->z_rules[j];
lib/libc/time/zic.c
3794
struct rule xr;
lib/libc/time/zic.c
4167
rpytime(const struct rule *rp, zic_t wantedy)
lib/libc/time/zic.c
457
static struct rule * rules;
sbin/cgdconfig/cgdparse.y
60
%type <params> entry rules rule
sbin/cgdconfig/cgdparse.y
83
| rules rule { $$ = params_combine($$, $2); }
sbin/cgdconfig/cgdparse.y
85
rule: ALGORITHM stringlit EOL { $$ = params_algorithm($2); }
sys/dist/pf/net/if_pfsync.c
1229
if ((r = st->rule.ptr) == NULL)
sys/dist/pf/net/if_pfsync.c
1230
sp->rule = htonl(-1);
sys/dist/pf/net/if_pfsync.c
1232
sp->rule = htonl(r->nr);
sys/dist/pf/net/if_pfsync.c
276
if (sp->rule != htonl(-1) && sp->anchor == htonl(-1) && chksum_flag &&
sys/dist/pf/net/if_pfsync.c
277
ntohl(sp->rule) <
sys/dist/pf/net/if_pfsync.c
280
PF_RULESET_FILTER].active.ptr_array[ntohl(sp->rule)];
sys/dist/pf/net/if_pfsync.c
309
st->rule.ptr = r;
sys/dist/pf/net/if_pfsync.h
260
if ((st->rule.ptr->rule_flag & PFRULE_NOSYNC) || \
sys/dist/pf/net/pf.c
1023
if (cur->rule.ptr != NULL) {
sys/dist/pf/net/pf.c
1024
cur->rule.ptr->src_nodes--;
sys/dist/pf/net/pf.c
1025
if (cur->rule.ptr->states <= 0 &&
sys/dist/pf/net/pf.c
1026
cur->rule.ptr->max_src_nodes <= 0)
sys/dist/pf/net/pf.c
1027
pf_rm_rule(NULL, cur->rule.ptr);
sys/dist/pf/net/pf.c
1049
timeout = s->rule.ptr->timeout[PFTM_SRC_NODE];
sys/dist/pf/net/pf.c
1058
timeout = s->rule.ptr->timeout[PFTM_SRC_NODE];
sys/dist/pf/net/pf.c
1073
pf_send_tcp(cur->rule.ptr, cur->state_key->af,
sys/dist/pf/net/pf.c
1101
if (--cur->rule.ptr->states <= 0 &&
sys/dist/pf/net/pf.c
1102
cur->rule.ptr->src_nodes <= 0)
sys/dist/pf/net/pf.c
1103
pf_rm_rule(NULL, cur->rule.ptr);
sys/dist/pf/net/pf.c
2265
k.rule.ptr = r;
sys/dist/pf/net/pf.c
2267
k.rule.ptr = NULL;
sys/dist/pf/net/pf.c
283
(((*state)->rule.ptr->rt == PF_ROUTETO && \
sys/dist/pf/net/pf.c
284
(*state)->rule.ptr->direction == PF_OUT) || \
sys/dist/pf/net/pf.c
285
((*state)->rule.ptr->rt == PF_REPLYTO && \
sys/dist/pf/net/pf.c
286
(*state)->rule.ptr->direction == PF_IN)) && \
sys/dist/pf/net/pf.c
2998
struct pf_rule *r = s->rule.ptr;
sys/dist/pf/net/pf.c
305
s->rule.ptr->states++; \
sys/dist/pf/net/pf.c
318
s->rule.ptr->states--; \
sys/dist/pf/net/pf.c
3530
s->rule.ptr = r;
sys/dist/pf/net/pf.c
365
if (a->rule.ptr > b->rule.ptr)
sys/dist/pf/net/pf.c
367
if (a->rule.ptr < b->rule.ptr)
sys/dist/pf/net/pf.c
3863
pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
sys/dist/pf/net/pf.c
3902
pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr,
sys/dist/pf/net/pf.c
3916
pf_send_tcp((*state)->rule.ptr, pd->af, pd->dst,
sys/dist/pf/net/pf.c
3921
pf_send_tcp((*state)->rule.ptr, pd->af, &psrc->addr,
sys/dist/pf/net/pf.c
4221
pf_send_tcp((*state)->rule.ptr, pd->af,
sys/dist/pf/net/pf.c
4225
(*state)->rule.ptr->return_ttl, 1, 0,
sys/dist/pf/net/pf.c
5829
r = s->rule.ptr;
sys/dist/pf/net/pf.c
5859
r = s->rule.ptr;
sys/dist/pf/net/pf.c
5883
r = s->rule.ptr;
sys/dist/pf/net/pf.c
5907
r = s->rule.ptr;
sys/dist/pf/net/pf.c
6250
r = s->rule.ptr;
sys/dist/pf/net/pf.c
6280
r = s->rule.ptr;
sys/dist/pf/net/pf.c
6313
r = s->rule.ptr;
sys/dist/pf/net/pf.c
6328
r = s->rule.ptr;
sys/dist/pf/net/pf.c
685
if ((*state)->rule.ptr->max_src_conn &&
sys/dist/pf/net/pf.c
686
(*state)->rule.ptr->max_src_conn <
sys/dist/pf/net/pf.c
692
if ((*state)->rule.ptr->max_src_conn_rate.limit &&
sys/dist/pf/net/pf.c
701
if ((*state)->rule.ptr->overload_tbl) {
sys/dist/pf/net/pf.c
729
pfr_insert_kentry((*state)->rule.ptr->overload_tbl,
sys/dist/pf/net/pf.c
733
if ((*state)->rule.ptr->flush) {
sys/dist/pf/net/pf.c
754
((*state)->rule.ptr->flush &
sys/dist/pf/net/pf.c
756
(*state)->rule.ptr == st->rule.ptr)) {
sys/dist/pf/net/pf.c
777
pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule,
sys/dist/pf/net/pf.c
785
if (rule->rule_flag & PFRULE_RULESRCTRACK ||
sys/dist/pf/net/pf.c
786
rule->rpool.opts & PF_POOL_STICKYADDR)
sys/dist/pf/net/pf.c
787
k.rule.ptr = rule;
sys/dist/pf/net/pf.c
789
k.rule.ptr = NULL;
sys/dist/pf/net/pf.c
794
if (!rule->max_src_nodes ||
sys/dist/pf/net/pf.c
795
rule->src_nodes < rule->max_src_nodes)
sys/dist/pf/net/pf.c
804
rule->max_src_conn_rate.limit,
sys/dist/pf/net/pf.c
805
rule->max_src_conn_rate.seconds);
sys/dist/pf/net/pf.c
808
if (rule->rule_flag & PFRULE_RULESRCTRACK ||
sys/dist/pf/net/pf.c
809
rule->rpool.opts & PF_POOL_STICKYADDR)
sys/dist/pf/net/pf.c
810
(*sn)->rule.ptr = rule;
sys/dist/pf/net/pf.c
812
(*sn)->rule.ptr = NULL;
sys/dist/pf/net/pf.c
825
(*sn)->ruletype = rule->action;
sys/dist/pf/net/pf.c
826
if ((*sn)->rule.ptr != NULL)
sys/dist/pf/net/pf.c
827
(*sn)->rule.ptr->src_nodes++;
sys/dist/pf/net/pf.c
831
if (rule->max_src_states &&
sys/dist/pf/net/pf.c
832
(*sn)->states >= rule->max_src_states) {
sys/dist/pf/net/pf.c
985
timeout = state->rule.ptr->timeout[state->timeout];
sys/dist/pf/net/pf.c
988
start = state->rule.ptr->timeout[PFTM_ADAPTIVE_START];
sys/dist/pf/net/pf.c
990
end = state->rule.ptr->timeout[PFTM_ADAPTIVE_END];
sys/dist/pf/net/pf.c
991
states = state->rule.ptr->states;
sys/dist/pf/net/pf_ioctl.c
1000
PF_MD5_UPD_STR(rule, label);
sys/dist/pf/net/pf_ioctl.c
1001
PF_MD5_UPD_STR(rule, ifname);
sys/dist/pf/net/pf_ioctl.c
1002
PF_MD5_UPD_STR(rule, match_tagname);
sys/dist/pf/net/pf_ioctl.c
1003
PF_MD5_UPD_HTONS(rule, match_tag, x); /* dup? */
sys/dist/pf/net/pf_ioctl.c
1004
PF_MD5_UPD_HTONL(rule, os_fingerprint, y);
sys/dist/pf/net/pf_ioctl.c
1005
PF_MD5_UPD_HTONL(rule, prob, y);
sys/dist/pf/net/pf_ioctl.c
1006
PF_MD5_UPD_HTONL(rule, uid.uid[0], y);
sys/dist/pf/net/pf_ioctl.c
1007
PF_MD5_UPD_HTONL(rule, uid.uid[1], y);
sys/dist/pf/net/pf_ioctl.c
1008
PF_MD5_UPD(rule, uid.op);
sys/dist/pf/net/pf_ioctl.c
1009
PF_MD5_UPD_HTONL(rule, gid.gid[0], y);
sys/dist/pf/net/pf_ioctl.c
1010
PF_MD5_UPD_HTONL(rule, gid.gid[1], y);
sys/dist/pf/net/pf_ioctl.c
1011
PF_MD5_UPD(rule, gid.op);
sys/dist/pf/net/pf_ioctl.c
1012
PF_MD5_UPD_HTONL(rule, rule_flag, y);
sys/dist/pf/net/pf_ioctl.c
1013
PF_MD5_UPD(rule, action);
sys/dist/pf/net/pf_ioctl.c
1014
PF_MD5_UPD(rule, direction);
sys/dist/pf/net/pf_ioctl.c
1015
PF_MD5_UPD(rule, af);
sys/dist/pf/net/pf_ioctl.c
1016
PF_MD5_UPD(rule, quick);
sys/dist/pf/net/pf_ioctl.c
1017
PF_MD5_UPD(rule, ifnot);
sys/dist/pf/net/pf_ioctl.c
1018
PF_MD5_UPD(rule, match_tag_not);
sys/dist/pf/net/pf_ioctl.c
1019
PF_MD5_UPD(rule, natpass);
sys/dist/pf/net/pf_ioctl.c
1020
PF_MD5_UPD(rule, keep_state);
sys/dist/pf/net/pf_ioctl.c
1021
PF_MD5_UPD(rule, proto);
sys/dist/pf/net/pf_ioctl.c
1022
PF_MD5_UPD(rule, type);
sys/dist/pf/net/pf_ioctl.c
1023
PF_MD5_UPD(rule, code);
sys/dist/pf/net/pf_ioctl.c
1024
PF_MD5_UPD(rule, flags);
sys/dist/pf/net/pf_ioctl.c
1025
PF_MD5_UPD(rule, flagset);
sys/dist/pf/net/pf_ioctl.c
1026
PF_MD5_UPD(rule, allow_opts);
sys/dist/pf/net/pf_ioctl.c
1027
PF_MD5_UPD(rule, rt);
sys/dist/pf/net/pf_ioctl.c
1028
PF_MD5_UPD(rule, tos);
sys/dist/pf/net/pf_ioctl.c
1035
struct pf_rule *rule, **old_array;
sys/dist/pf/net/pf_ioctl.c
1076
while ((rule = TAILQ_FIRST(old_rules)) != NULL)
sys/dist/pf/net/pf_ioctl.c
1077
pf_rm_rule(old_rules, rule);
sys/dist/pf/net/pf_ioctl.c
1113
sp->rule = s->rule.ptr->nr;
sys/dist/pf/net/pf_ioctl.c
1160
s->rule.ptr = &pf_default_rule;
sys/dist/pf/net/pf_ioctl.c
1161
s->rule.ptr->states++;
sys/dist/pf/net/pf_ioctl.c
1216
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
1240
TAILQ_FOREACH(rule, rs->rules[rs_cnt].inactive.ptr,
sys/dist/pf/net/pf_ioctl.c
1242
pf_hash_rule(&ctx, rule);
sys/dist/pf/net/pf_ioctl.c
1243
(rs->rules[rs_cnt].inactive.ptr_array)[rule->nr] = rule;
sys/dist/pf/net/pf_ioctl.c
1410
struct pf_rule *rule, *tail;
sys/dist/pf/net/pf_ioctl.c
1419
rs_num = pf_get_ruleset_number(pr->rule.action);
sys/dist/pf/net/pf_ioctl.c
1424
if (pr->rule.return_icmp >> 8 > ICMP_MAXTYPE) {
sys/dist/pf/net/pf_ioctl.c
1436
rule = pool_get(&pf_rule_pl, PR_NOWAIT);
sys/dist/pf/net/pf_ioctl.c
1437
if (rule == NULL) {
sys/dist/pf/net/pf_ioctl.c
1441
bcopy(&pr->rule, rule, sizeof(struct pf_rule));
sys/dist/pf/net/pf_ioctl.c
1443
rule->cuid = kauth_cred_getuid(l->l_cred);
sys/dist/pf/net/pf_ioctl.c
1444
rule->cpid = l->l_proc->p_pid;
sys/dist/pf/net/pf_ioctl.c
1446
rule->cuid = p->p_cred->p_ruid;
sys/dist/pf/net/pf_ioctl.c
1447
rule->cpid = p->p_pid;
sys/dist/pf/net/pf_ioctl.c
1449
rule->anchor = NULL;
sys/dist/pf/net/pf_ioctl.c
1450
rule->kif = NULL;
sys/dist/pf/net/pf_ioctl.c
1451
TAILQ_INIT(&rule->rpool.list);
sys/dist/pf/net/pf_ioctl.c
1453
rule->states = 0;
sys/dist/pf/net/pf_ioctl.c
1454
rule->src_nodes = 0;
sys/dist/pf/net/pf_ioctl.c
1455
rule->entries.tqe_prev = NULL;
sys/dist/pf/net/pf_ioctl.c
1457
if (rule->af == AF_INET) {
sys/dist/pf/net/pf_ioctl.c
1458
pool_put(&pf_rule_pl, rule);
sys/dist/pf/net/pf_ioctl.c
1464
if (rule->af == AF_INET6) {
sys/dist/pf/net/pf_ioctl.c
1465
pool_put(&pf_rule_pl, rule);
sys/dist/pf/net/pf_ioctl.c
1473
rule->nr = tail->nr + 1;
sys/dist/pf/net/pf_ioctl.c
1475
rule->nr = 0;
sys/dist/pf/net/pf_ioctl.c
1476
if (rule->ifname[0]) {
sys/dist/pf/net/pf_ioctl.c
1477
rule->kif = pfi_kif_get(rule->ifname);
sys/dist/pf/net/pf_ioctl.c
1478
if (rule->kif == NULL) {
sys/dist/pf/net/pf_ioctl.c
1479
pool_put(&pf_rule_pl, rule);
sys/dist/pf/net/pf_ioctl.c
1483
pfi_kif_ref(rule->kif, PFI_KIF_REF_RULE);
sys/dist/pf/net/pf_ioctl.c
1487
if (rule->rtableid > 0 && !rtable_exists(rule->rtableid))
sys/dist/pf/net/pf_ioctl.c
1493
if (rule->qname[0] != 0) {
sys/dist/pf/net/pf_ioctl.c
1494
if ((rule->qid = pf_qname2qid(rule->qname)) == 0)
sys/dist/pf/net/pf_ioctl.c
1496
else if (rule->pqname[0] != 0) {
sys/dist/pf/net/pf_ioctl.c
1497
if ((rule->pqid =
sys/dist/pf/net/pf_ioctl.c
1498
pf_qname2qid(rule->pqname)) == 0)
sys/dist/pf/net/pf_ioctl.c
1501
rule->pqid = rule->qid;
sys/dist/pf/net/pf_ioctl.c
1504
if (rule->tagname[0])
sys/dist/pf/net/pf_ioctl.c
1505
if ((rule->tag = pf_tagname2tag(rule->tagname)) == 0)
sys/dist/pf/net/pf_ioctl.c
1507
if (rule->match_tagname[0])
sys/dist/pf/net/pf_ioctl.c
1508
if ((rule->match_tag =
sys/dist/pf/net/pf_ioctl.c
1509
pf_tagname2tag(rule->match_tagname)) == 0)
sys/dist/pf/net/pf_ioctl.c
1511
if (rule->rt && !rule->direction)
sys/dist/pf/net/pf_ioctl.c
1514
if (!rule->log)
sys/dist/pf/net/pf_ioctl.c
1515
rule->logif = 0;
sys/dist/pf/net/pf_ioctl.c
1516
if (rule->logif >= PFLOGIFS_MAX)
sys/dist/pf/net/pf_ioctl.c
1519
if (pf_rtlabel_add(&rule->src.addr) ||
sys/dist/pf/net/pf_ioctl.c
1520
pf_rtlabel_add(&rule->dst.addr))
sys/dist/pf/net/pf_ioctl.c
1522
if (pfi_dynaddr_setup(&rule->src.addr, rule->af))
sys/dist/pf/net/pf_ioctl.c
1524
if (pfi_dynaddr_setup(&rule->dst.addr, rule->af))
sys/dist/pf/net/pf_ioctl.c
1526
if (pf_tbladdr_setup(ruleset, &rule->src.addr))
sys/dist/pf/net/pf_ioctl.c
1528
if (pf_tbladdr_setup(ruleset, &rule->dst.addr))
sys/dist/pf/net/pf_ioctl.c
1530
if (pf_anchor_setup(rule, ruleset, pr->anchor_call))
sys/dist/pf/net/pf_ioctl.c
1536
rule->overload_tbl = NULL;
sys/dist/pf/net/pf_ioctl.c
1537
if (rule->overload_tblname[0]) {
sys/dist/pf/net/pf_ioctl.c
1538
if ((rule->overload_tbl = pfr_attach_table(ruleset,
sys/dist/pf/net/pf_ioctl.c
1539
rule->overload_tblname)) == NULL)
sys/dist/pf/net/pf_ioctl.c
1542
rule->overload_tbl->pfrkt_flags |=
sys/dist/pf/net/pf_ioctl.c
1546
pf_mv_pool(&pf_pabuf, &rule->rpool.list);
sys/dist/pf/net/pf_ioctl.c
1547
if (((((rule->action == PF_NAT) || (rule->action == PF_RDR) ||
sys/dist/pf/net/pf_ioctl.c
1548
(rule->action == PF_BINAT)) && rule->anchor == NULL) ||
sys/dist/pf/net/pf_ioctl.c
1549
(rule->rt > PF_FASTROUTE)) &&
sys/dist/pf/net/pf_ioctl.c
1550
(TAILQ_FIRST(&rule->rpool.list) == NULL))
sys/dist/pf/net/pf_ioctl.c
1554
pf_rm_rule(NULL, rule);
sys/dist/pf/net/pf_ioctl.c
1557
rule->rpool.cur = TAILQ_FIRST(&rule->rpool.list);
sys/dist/pf/net/pf_ioctl.c
1558
rule->evaluations = rule->packets[0] = rule->packets[1] =
sys/dist/pf/net/pf_ioctl.c
1559
rule->bytes[0] = rule->bytes[1] = 0;
sys/dist/pf/net/pf_ioctl.c
1561
rule, entries);
sys/dist/pf/net/pf_ioctl.c
1578
rs_num = pf_get_ruleset_number(pr->rule.action);
sys/dist/pf/net/pf_ioctl.c
1596
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
1605
rs_num = pf_get_ruleset_number(pr->rule.action);
sys/dist/pf/net/pf_ioctl.c
1614
rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
sys/dist/pf/net/pf_ioctl.c
1615
while ((rule != NULL) && (rule->nr != pr->nr))
sys/dist/pf/net/pf_ioctl.c
1616
rule = TAILQ_NEXT(rule, entries);
sys/dist/pf/net/pf_ioctl.c
1617
if (rule == NULL) {
sys/dist/pf/net/pf_ioctl.c
1621
bcopy(rule, &pr->rule, sizeof(struct pf_rule));
sys/dist/pf/net/pf_ioctl.c
1622
if (pf_anchor_copyout(ruleset, rule, pr)) {
sys/dist/pf/net/pf_ioctl.c
1626
pfi_dynaddr_copyout(&pr->rule.src.addr);
sys/dist/pf/net/pf_ioctl.c
1627
pfi_dynaddr_copyout(&pr->rule.dst.addr);
sys/dist/pf/net/pf_ioctl.c
1628
pf_tbladdr_copyout(&pr->rule.src.addr);
sys/dist/pf/net/pf_ioctl.c
1629
pf_tbladdr_copyout(&pr->rule.dst.addr);
sys/dist/pf/net/pf_ioctl.c
1630
pf_rtlabel_copyout(&pr->rule.src.addr);
sys/dist/pf/net/pf_ioctl.c
1631
pf_rtlabel_copyout(&pr->rule.dst.addr);
sys/dist/pf/net/pf_ioctl.c
1633
if (rule->skip[i].ptr == NULL)
sys/dist/pf/net/pf_ioctl.c
1634
pr->rule.skip[i].nr = -1;
sys/dist/pf/net/pf_ioctl.c
1636
pr->rule.skip[i].nr =
sys/dist/pf/net/pf_ioctl.c
1637
rule->skip[i].ptr->nr;
sys/dist/pf/net/pf_ioctl.c
1640
rule->evaluations = 0;
sys/dist/pf/net/pf_ioctl.c
1641
rule->packets[0] = rule->packets[1] = 0;
sys/dist/pf/net/pf_ioctl.c
1642
rule->bytes[0] = rule->bytes[1] = 0;
sys/dist/pf/net/pf_ioctl.c
1671
rs_num = pf_get_ruleset_number(pcr->rule.action);
sys/dist/pf/net/pf_ioctl.c
1686
if (pcr->rule.return_icmp >> 8 > ICMP_MAXTYPE) {
sys/dist/pf/net/pf_ioctl.c
1698
bcopy(&pcr->rule, newrule, sizeof(struct pf_rule));
sys/dist/pf/net/pf_ioctl.c
2215
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
2217
TAILQ_FOREACH(rule,
sys/dist/pf/net/pf_ioctl.c
2219
rule->evaluations = 0;
sys/dist/pf/net/pf_ioctl.c
2220
rule->packets[0] = rule->packets[1] = 0;
sys/dist/pf/net/pf_ioctl.c
2221
rule->bytes[0] = rule->bytes[1] = 0;
sys/dist/pf/net/pf_ioctl.c
3137
if (n->rule.ptr != NULL)
sys/dist/pf/net/pf_ioctl.c
3138
pstore->rule.nr = n->rule.ptr->nr;
sys/dist/pf/net/pf_ioctl.c
481
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
495
rule = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
sys/dist/pf/net/pf_ioctl.c
498
rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
sys/dist/pf/net/pf_ioctl.c
504
rule = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
sys/dist/pf/net/pf_ioctl.c
507
rule = TAILQ_FIRST(ruleset->rules[rs_num].inactive.ptr);
sys/dist/pf/net/pf_ioctl.c
510
while ((rule != NULL) && (rule->nr != rule_number))
sys/dist/pf/net/pf_ioctl.c
511
rule = TAILQ_NEXT(rule, entries);
sys/dist/pf/net/pf_ioctl.c
513
if (rule == NULL)
sys/dist/pf/net/pf_ioctl.c
516
return (&rule->rpool);
sys/dist/pf/net/pf_ioctl.c
545
pf_rm_rule(struct pf_rulequeue *rulequeue, struct pf_rule *rule)
sys/dist/pf/net/pf_ioctl.c
548
if (rule->states <= 0) {
sys/dist/pf/net/pf_ioctl.c
554
pf_tbladdr_remove(&rule->src.addr);
sys/dist/pf/net/pf_ioctl.c
555
pf_tbladdr_remove(&rule->dst.addr);
sys/dist/pf/net/pf_ioctl.c
556
if (rule->overload_tbl)
sys/dist/pf/net/pf_ioctl.c
557
pfr_detach_table(rule->overload_tbl);
sys/dist/pf/net/pf_ioctl.c
559
TAILQ_REMOVE(rulequeue, rule, entries);
sys/dist/pf/net/pf_ioctl.c
560
rule->entries.tqe_prev = NULL;
sys/dist/pf/net/pf_ioctl.c
561
rule->nr = -1;
sys/dist/pf/net/pf_ioctl.c
564
if (rule->states > 0 || rule->src_nodes > 0 ||
sys/dist/pf/net/pf_ioctl.c
565
rule->entries.tqe_prev != NULL)
sys/dist/pf/net/pf_ioctl.c
567
pf_tag_unref(rule->tag);
sys/dist/pf/net/pf_ioctl.c
568
pf_tag_unref(rule->match_tag);
sys/dist/pf/net/pf_ioctl.c
570
if (rule->pqid != rule->qid)
sys/dist/pf/net/pf_ioctl.c
571
pf_qid_unref(rule->pqid);
sys/dist/pf/net/pf_ioctl.c
572
pf_qid_unref(rule->qid);
sys/dist/pf/net/pf_ioctl.c
574
pf_rtlabel_remove(&rule->src.addr);
sys/dist/pf/net/pf_ioctl.c
575
pf_rtlabel_remove(&rule->dst.addr);
sys/dist/pf/net/pf_ioctl.c
576
pfi_dynaddr_remove(&rule->src.addr);
sys/dist/pf/net/pf_ioctl.c
577
pfi_dynaddr_remove(&rule->dst.addr);
sys/dist/pf/net/pf_ioctl.c
579
pf_tbladdr_remove(&rule->src.addr);
sys/dist/pf/net/pf_ioctl.c
580
pf_tbladdr_remove(&rule->dst.addr);
sys/dist/pf/net/pf_ioctl.c
581
if (rule->overload_tbl)
sys/dist/pf/net/pf_ioctl.c
582
pfr_detach_table(rule->overload_tbl);
sys/dist/pf/net/pf_ioctl.c
584
pfi_kif_unref(rule->kif, PFI_KIF_REF_RULE);
sys/dist/pf/net/pf_ioctl.c
585
pf_anchor_remove(rule);
sys/dist/pf/net/pf_ioctl.c
586
pf_empty_pool(&rule->rpool.list);
sys/dist/pf/net/pf_ioctl.c
587
pool_put(&pf_rule_pl, rule);
sys/dist/pf/net/pf_ioctl.c
912
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
919
while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
sys/dist/pf/net/pf_ioctl.c
920
pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
sys/dist/pf/net/pf_ioctl.c
932
struct pf_rule *rule;
sys/dist/pf/net/pf_ioctl.c
940
while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
sys/dist/pf/net/pf_ioctl.c
941
pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
sys/dist/pf/net/pf_ioctl.c
993
pf_hash_rule(MD5_CTX *ctx, struct pf_rule *rule)
sys/dist/pf/net/pf_ioctl.c
998
pf_hash_rule_addr(ctx, &rule->src);
sys/dist/pf/net/pf_ioctl.c
999
pf_hash_rule_addr(ctx, &rule->dst);
sys/dist/pf/net/pf_norm.c
1714
if ((ts_fudge = state->rule.ptr->timeout[PFTM_TS_DIFF]) == 0)
sys/dist/pf/net/pfvar.h
1354
struct pf_rule rule;
sys/dist/pf/net/pfvar.h
655
union pf_rule_ptr rule;
sys/dist/pf/net/pfvar.h
753
union pf_rule_ptr rule;
sys/dist/pf/net/pfvar.h
816
u_int32_t rule;
sys/net/npf/npf_ctl.c
418
const nvlist_t *rule = rules[i];
sys/net/npf/npf_ctl.c
422
error = npf_mk_singlerule(npf, rule, resp, nc->rule_procs, &rl);
sys/net/npf/npf_ctl.c
426
name = dnvlist_get_string(rule, "name", NULL);
sys/net/npf/npf_ruleset.c
377
nvlist_t *rule;
sys/net/npf/npf_ruleset.c
382
if ((rule = npf_rule_export(npf, rl)) == NULL) {
sys/net/npf/npf_ruleset.c
385
nvlist_append_nvlist_array(rlset_nvl, "rules", rule);
sys/net/npf/npf_ruleset.c
386
nvlist_destroy(rule);
sys/net/npf/npf_ruleset.c
449
nvlist_t *rule;
sys/net/npf/npf_ruleset.c
451
rule = npf_rule_export(npf, rl);
sys/net/npf/npf_ruleset.c
452
if (!rule) {
sys/net/npf/npf_ruleset.c
456
if (natp && (error = npf_natpolicy_export(natp, rule)) != 0) {
sys/net/npf/npf_ruleset.c
457
nvlist_destroy(rule);
sys/net/npf/npf_ruleset.c
460
nvlist_append_nvlist_array(npf_nv, key, rule);
sys/net/npf/npf_ruleset.c
461
nvlist_destroy(rule);
sys/net/npf/npf_ruleset.c
609
npf_rule_alloc(npf_t *npf, const nvlist_t *rule)
sys/net/npf/npf_ruleset.c
618
info = dnvlist_get_binary(rule, "info", &rl->r_info_len, NULL, 0);
sys/net/npf/npf_ruleset.c
626
if ((rname = dnvlist_get_string(rule, "name", NULL)) != NULL) {
sys/net/npf/npf_ruleset.c
633
rl->r_attr = dnvlist_get_number(rule, "attr", 0);
sys/net/npf/npf_ruleset.c
638
rl->r_priority = (int)dnvlist_get_number(rule, "prio", 0);
sys/net/npf/npf_ruleset.c
641
rl->r_skip_to = dnvlist_get_number(rule, "skip-to", 0);
sys/net/npf/npf_ruleset.c
645
if ((rname = dnvlist_get_string(rule, "ifname", NULL)) != NULL) {
sys/net/npf/npf_ruleset.c
655
if ((key = dnvlist_get_binary(rule, "key", &len, NULL, 0)) != NULL) {
sys/net/npf/npf_ruleset.c
678
nvlist_t *rule = nvlist_create(0);
sys/net/npf/npf_ruleset.c
682
nvlist_add_number(rule, "attr", rl->r_attr);
sys/net/npf/npf_ruleset.c
683
nvlist_add_number(rule, "prio", rl->r_priority);
sys/net/npf/npf_ruleset.c
687
nvlist_add_number(rule, "skip-to", skip_to);
sys/net/npf/npf_ruleset.c
688
nvlist_add_number(rule, "code-type", rl->r_type);
sys/net/npf/npf_ruleset.c
690
nvlist_add_binary(rule, "code", rl->r_code, rl->r_clen);
sys/net/npf/npf_ruleset.c
695
nvlist_add_string(rule, "ifname", ifname);
sys/net/npf/npf_ruleset.c
697
nvlist_add_number(rule, "id", rl->r_id);
sys/net/npf/npf_ruleset.c
700
nvlist_add_string(rule, "name", rl->r_name);
sys/net/npf/npf_ruleset.c
703
nvlist_add_binary(rule, "key", rl->r_key, NPF_RULE_MAXKEYLEN);
sys/net/npf/npf_ruleset.c
706
nvlist_add_binary(rule, "info", rl->r_info, rl->r_info_len);
sys/net/npf/npf_ruleset.c
709
npf_rid_export(rule, rl->uid, "r_user");
sys/net/npf/npf_ruleset.c
712
npf_rid_export(rule, rl->gid, "r_group");
sys/net/npf/npf_ruleset.c
716
nvlist_add_string(rule, "rproc", rname);
sys/net/npf/npf_ruleset.c
719
return rule;
usr.bin/config/files.c
160
if (rule != NULL && optx == NULL && flags == 0 &&
usr.bin/config/files.c
162
fi->fi_mkrule = rule;
usr.bin/config/files.c
187
fi->fi_mkrule = rule;
usr.bin/config/files.c
96
addfile(const char *path, struct condexpr *optx, u_char flags, const char *rule)
usr.bin/config/gram.y
200
%type <str> rule
usr.bin/config/gram.y
355
XFILE filename fopts fflags rule { addfile($2, $3, $4, $5); }
usr.bin/config/gram.y
487
rule:
usr.sbin/npf/npfctl/npf_parse.y
236
| RULE_ENTRY_TOKEN rule
usr.sbin/npf/npfctl/npf_parse.y
587
: rule
usr.sbin/npf/npfctl/npf_parse.y
597
rule
usr.sbin/npf/npftest/libnpftest/npf_l2rule_test.c
119
nvlist_t *rule = nvlist_create(0);
usr.sbin/npf/npftest/libnpftest/npf_l2rule_test.c
122
nvlist_add_number(rule, "attr",
usr.sbin/npf/npftest/libnpftest/npf_l2rule_test.c
124
rl = npf_rule_alloc(npf, rule);
usr.sbin/npf/npftest/libnpftest/npf_l2rule_test.c
125
nvlist_destroy(rule);
usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
273
nvlist_t *rule = nvlist_create(0);
usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
276
nvlist_add_number(rule, "attr",
usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
278
rl = npf_rule_alloc(npf, rule);
usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
279
nvlist_destroy(rule);