PF_PASS
$$ = PF_PASS;
agentx_varbind_counter64(vb, s.pcounters[IPV4][IN][PF_PASS]);
agentx_varbind_counter64(vb, s.pcounters[IPV4][OUT][PF_PASS]);
agentx_varbind_counter64(vb, s.pcounters[IPV6][IN][PF_PASS]);
agentx_varbind_counter64(vb, s.pcounters[IPV6][OUT][PF_PASS]);
if (hdr->action != PF_PASS)
pr.rule.action = PF_PASS;
pr.rule.action = PF_PASS;
action : PASS { $$.b1 = PF_PASS; $$.b2 = $$.w = 0; }
if (r->allow_opts && r->action != PF_PASS) {
if (r->action != PF_PASS && r->keep_state) {
if ((r->action != PF_PASS && r->action != PF_DROP) || r->anchor) {
if (opts->statelim.id != PF_STATELIM_ID_NONE && r->action != PF_PASS) {
if (opts->sourcelim.id != PF_SOURCELIM_ID_NONE && r->action != PF_PASS) {
pr.rule.action = PF_PASS;
pr.rule.action = PF_PASS;
pr.rule.action = PF_PASS;
(unsigned long long)s->pcounters[0][0][PF_PASS],
(unsigned long long)s->pcounters[1][0][PF_PASS]);
(unsigned long long)s->pcounters[0][1][PF_PASS],
(unsigned long long)s->pcounters[1][1][PF_PASS]);
} else if ((r->action == PF_PASS || r->action == PF_MATCH) &&
if (!r->keep_state && r->action == PF_PASS && !anchor_call[0])
pf_test(af, dir, encif, &m) != PF_PASS) {
if (pf_test(AF_INET, dir, ifp, &m) != PF_PASS)
if (pf_test(AF_INET6, dir, ifp, &m) != PF_PASS)
st->direction, NULL, pd->pd_m, NULL) != PF_PASS)
if (pf_test(fam->af, dir, ifp0, &m) != PF_PASS) {
if (pf_test(fam->af, dir, ifp0, &m) != PF_PASS) {
if (r->action == PF_PASS && pd->badopts != 0 && ! r->allow_opts) {
if (action != PF_PASS)
if (action != PF_PASS)
action = PF_PASS;
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
action = PF_PASS;
if ((action = pf_synproxy(pd, stp, reason)) != PF_PASS)
if (pf_walk_header(&pd2, &h2, reason) != PF_PASS)
if (pf_walk_header6(&pd2, &h2_6, reason) != PF_PASS)
return (PF_PASS);
if (pf_test(AF_INET, PF_OUT, ifp, &m0) != PF_PASS)
if (pf_test(AF_INET6, PF_OUT, ifp, &m0) != PF_PASS)
return (PF_PASS);
pd->off + hlen, reason) != PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
!= PF_PASS)
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
if (pf_walk_header(pd, h, reason) != PF_PASS)
if (pf_walk_header6(pd, h, reason) != PF_PASS)
return (PF_PASS);
[action != PF_PASS] += pd->tot_len;
[action != PF_PASS]++;
if (action == PF_PASS || action == PF_AFRT || r->action == PF_DROP) {
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
return (PF_PASS);
if (action != PF_PASS) {
return PF_PASS;
if (action != PF_PASS) {
if (action != PF_PASS) {
if (action != PF_PASS)
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS || action == PF_AFRT) {
if (action == PF_PASS && pd.badopts != 0 &&
if (action == PF_PASS && qid)
if (pd.dir == PF_IN && action == PF_PASS &&
if (action == PF_PASS && r->divert.type == PF_DIVERT_PACKET)
action = PF_PASS;
action = PF_PASS;
action = PF_PASS;
if (pf_status.reass && action == PF_PASS && pd.m && fwdir == PF_FWD &&
pf_default_rule.action = PF_PASS;
return (PF_PASS);
return (PF_PASS); /* no reassembly */
if (pf_reassemble(&pd->m, pd->dir, reason) != PF_PASS) {
return (PF_PASS); /* packet has been reassembled, no error */
return (PF_PASS);
return (PF_PASS); /* no reassembly */
pd->extoff, pd->dir, reason) != PF_PASS) {
return (PF_PASS); /* packet has been reassembled, no error */
return (PF_PASS);
return (PF_PASS);
return (PF_PASS); /* drop because *m0 is NULL, no error */
return (PF_PASS);
return (PF_PASS); /* drop because *m0 is NULL, no error */
return (PF_PASS);
case PF_PASS:
if (pf_test(AF_INET, PF_IN, ifp, mp) != PF_PASS)
ifp, &m) != PF_PASS) {
pf_test(AF_INET, fwd ? PF_FWD : PF_OUT, encif, &m) != PF_PASS) {
if (pf_test(af, PF_IN, ifp, mp) != PF_PASS) {
if (pf_test(AF_INET6, PF_FWD, ifp, &m) != PF_PASS) {
if (pf_test(AF_INET6, PF_IN, ifp, mp) != PF_PASS)
pf_test(AF_INET6, fwd ? PF_FWD : PF_OUT, encif, &m) != PF_PASS) {
if (pf_test(AF_INET6, PF_OUT, ifp, &m) != PF_PASS) {
ADD_LINE_V(s->ifname, "Packets In Passed IPv4", s->pcounters[0][0][PF_PASS]);
ADD_LINE_V(s->ifname, "Packets In Passed IPv6", s->pcounters[1][0][PF_PASS]);
ADD_LINE_V(s->ifname, "Packets Out Passed IPv4", s->pcounters[0][1][PF_PASS]);
ADD_LINE_V(s->ifname, "Packets Out Passed IPv6", s->pcounters[1][1][PF_PASS]);
if (pr->action == PF_PASS &&
pfr.rule.action = PF_PASS;
rio.rule.action = PF_PASS;
case PF_PASS:
pfr.rule.action = PF_PASS;