games/atc/input.c

206

(void)snprintf(T_STR, sizeof T_STR, st[T_STATE].rule[ruleno].str, tval);

games/atc/input.c

209

newstate = st[T_STATE].rule[ruleno].to_state;

games/atc/input.c

243

if (st[T_STATE].rule[i].token == c ||

games/atc/input.c

244

st[T_STATE].rule[i].token == tval) {

games/atc/input.c

261

func = st[stack[i].state].rule[stack[i].rule].func;

games/atc/input.c

72

RULE *rule;

games/atc/input.c

78

int rule;

games/atc/input.c

83

#define T_RULE stack[level].rule

lib/libc/time/localtime.c

141

static const char * getrule(const char * strp, struct rule * rulep);

lib/libc/time/localtime.c

172

const struct rule * rulep, int_fast32_t offset);

lib/libc/time/localtime.c

747

getrule(const char *strp, struct rule *rulep)

lib/libc/time/localtime.c

801

transtime(time_t janfirst, int year, const struct rule *rulep,

lib/libc/time/localtime.c

954

struct rule start;

lib/libc/time/localtime.c

955

struct rule end;

lib/libssl/ssl_ciph.c

1064

if (rule == CIPHER_SPECIAL) {

lib/libssl/ssl_ciph.c

1091

alg_enc, alg_mac, alg_ssl, algo_strength, rule,

lib/libssl/ssl_ciph.c

708

unsigned long alg_ssl, unsigned long algo_strength, int rule,

lib/libssl/ssl_ciph.c

715

if (rule == CIPHER_DEL)

lib/libssl/ssl_ciph.c

764

if (rule == CIPHER_ADD) {

lib/libssl/ssl_ciph.c

772

else if (rule == CIPHER_ORD) {

lib/libssl/ssl_ciph.c

777

} else if (rule == CIPHER_DEL) {

lib/libssl/ssl_ciph.c

786

} else if (rule == CIPHER_KILL) {

lib/libssl/ssl_ciph.c

862

int j, multi, found, rule, retval, ok, buflen;

lib/libssl/ssl_ciph.c

878

rule = CIPHER_DEL;

lib/libssl/ssl_ciph.c

881

rule = CIPHER_ORD;

lib/libssl/ssl_ciph.c

884

rule = CIPHER_KILL;

lib/libssl/ssl_ciph.c

887

rule = CIPHER_SPECIAL;

lib/libssl/ssl_ciph.c

890

rule = CIPHER_ADD;

lib/libssl/ssl_ciph.c

928

if (rule == CIPHER_SPECIAL) {

libexec/snmpd/snmpd_metrics/mib.c

1839

if (pr.rule.label[0])

libexec/snmpd/snmpd_metrics/mib.c

1895

if (pr.rule.label[0] && ++lnr == idx) {

libexec/snmpd/snmpd_metrics/mib.c

1896

r = &pr.rule;

regress/sbin/pfctl/changerule.c

120

memcpy(&pcr.rule, TAILQ_FIRST(rs->rules.active.ptr),

regress/sbin/pfctl/changerule.c

121

sizeof(pcr.rule));

regress/sys/net/pf_trans/iocmd-limit.c

100

pr.rule.action = PF_PASS;

regress/sys/net/pf_trans/iocmd-limit.c

60

pr.rule.action = PF_PASS;

sbin/ifconfig/brconfig.c

1516

struct ifbrlreq rule;

sbin/ifconfig/brconfig.c

1523

bzero(&rule, sizeof(rule));

sbin/ifconfig/brconfig.c

1524

strlcpy(rule.ifbr_name, ifname, sizeof(rule.ifbr_name));

sbin/ifconfig/brconfig.c

1527

rule.ifbr_action = BRL_ACTION_BLOCK;

sbin/ifconfig/brconfig.c

1529

rule.ifbr_action = BRL_ACTION_PASS;

sbin/ifconfig/brconfig.c

1539

rule.ifbr_flags |= BRL_FLAG_IN;

sbin/ifconfig/brconfig.c

1541

rule.ifbr_flags |= BRL_FLAG_OUT;

sbin/ifconfig/brconfig.c

1543

rule.ifbr_flags |= BRL_FLAG_IN | BRL_FLAG_OUT;

sbin/ifconfig/brconfig.c

1545

rule.ifbr_flags |= BRL_FLAG_IN | BRL_FLAG_OUT;

sbin/ifconfig/brconfig.c

1557

strlcpy(rule.ifbr_ifsname, argv[0], sizeof(rule.ifbr_ifsname));

sbin/ifconfig/brconfig.c

1563

if (rule.ifbr_flags & BRL_FLAG_DSTVALID)

sbin/ifconfig/brconfig.c

1565

rule.ifbr_flags |= BRL_FLAG_DSTVALID;

sbin/ifconfig/brconfig.c

1566

dea = &rule.ifbr_dst;

sbin/ifconfig/brconfig.c

1569

if (rule.ifbr_flags & BRL_FLAG_SRCVALID)

sbin/ifconfig/brconfig.c

1571

rule.ifbr_flags |= BRL_FLAG_SRCVALID;

sbin/ifconfig/brconfig.c

1572

dea = &rule.ifbr_src;

sbin/ifconfig/brconfig.c

1579

if (rule.ifbr_tagname[0]) {

sbin/ifconfig/brconfig.c

1584

if (strlcpy(rule.ifbr_tagname, argv[0],

sbin/ifconfig/brconfig.c

1591

rule.ifbr_arpf.brla_flags |= BRLA_ARP;

sbin/ifconfig/brconfig.c

1593

if (bridge_arprule(&rule, &argc, &argv) == -1)

sbin/ifconfig/brconfig.c

1596

rule.ifbr_arpf.brla_flags |= BRLA_RARP;

sbin/ifconfig/brconfig.c

1598

if (bridge_arprule(&rule, &argc, &argv) == -1)

sbin/ifconfig/brconfig.c

1616

if (ioctl(sock, SIOCBRDGARL, &rule) == -1) {

sbin/ifconfig/brconfig.c

1628

bridge_arprule(struct ifbrlreq *rule, int *argc, char ***argv)

sbin/ifconfig/brconfig.c

1635

if (rule->ifbr_arpf.brla_flags & BRLA_ARP)

sbin/ifconfig/brconfig.c

1636

rule->ifbr_arpf.brla_op = ARPOP_REQUEST;

sbin/ifconfig/brconfig.c

1637

else if (rule->ifbr_arpf.brla_flags & BRLA_RARP)

sbin/ifconfig/brconfig.c

1638

rule->ifbr_arpf.brla_op = ARPOP_REVREQUEST;

sbin/ifconfig/brconfig.c

1642

if (rule->ifbr_arpf.brla_flags & BRLA_ARP)

sbin/ifconfig/brconfig.c

1643

rule->ifbr_arpf.brla_op = ARPOP_REPLY;

sbin/ifconfig/brconfig.c

1644

else if (rule->ifbr_arpf.brla_flags & BRLA_RARP)

sbin/ifconfig/brconfig.c

1645

rule->ifbr_arpf.brla_op = ARPOP_REVREPLY;

sbin/ifconfig/brconfig.c

1649

rule->ifbr_arpf.brla_flags |= BRLA_SHA;

sbin/ifconfig/brconfig.c

1650

dea = &rule->ifbr_arpf.brla_sha;

sbin/ifconfig/brconfig.c

1652

rule->ifbr_arpf.brla_flags |= BRLA_THA;

sbin/ifconfig/brconfig.c

1653

dea = &rule->ifbr_arpf.brla_tha;

sbin/ifconfig/brconfig.c

1655

rule->ifbr_arpf.brla_flags |= BRLA_SPA;

sbin/ifconfig/brconfig.c

1656

dia = &rule->ifbr_arpf.brla_spa;

sbin/ifconfig/brconfig.c

1658

rule->ifbr_arpf.brla_flags |= BRLA_TPA;

sbin/ifconfig/brconfig.c

1659

dia = &rule->ifbr_arpf.brla_tpa;

sbin/ipsecctl/ipsecctl.c

625

struct ipsec_rule *rule, *last = NULL;

sbin/ipsecctl/ipsecctl.c

635

rule = calloc(1, sizeof(struct ipsec_rule));

sbin/ipsecctl/ipsecctl.c

636

if (rule == NULL)

sbin/ipsecctl/ipsecctl.c

638

rule->nr = ipsec->rule_nr++;

sbin/ipsecctl/ipsecctl.c

639

rule->type |= RULE_FLOW;

sbin/ipsecctl/ipsecctl.c

640

TAILQ_INIT(&rule->collapsed_rules);

sbin/ipsecctl/ipsecctl.c

642

if (pfkey_parse(msg, rule))

sbin/ipsecctl/ipsecctl.c

653

(ipsecctl_merge_rules(last, rule) == 0))

sbin/ipsecctl/ipsecctl.c

656

ipsecctl_add_rule(ipsec, rule);

sbin/ipsecctl/ipsecctl.c

657

last = rule;

sbin/ipsecctl/parse.y

2257

copyrule(struct ipsec_rule *rule)

sbin/ipsecctl/parse.y

2264

r->src = copyhost(rule->src);

sbin/ipsecctl/parse.y

2265

r->dst = copyhost(rule->dst);

sbin/ipsecctl/parse.y

2266

r->local = copyhost(rule->local);

sbin/ipsecctl/parse.y

2267

r->peer = copyhost(rule->peer);

sbin/ipsecctl/parse.y

2268

r->auth = copyipsecauth(rule->auth);

sbin/ipsecctl/parse.y

2269

r->ikeauth = copyikeauth(rule->ikeauth);

sbin/ipsecctl/parse.y

2270

r->xfs = copytransforms(rule->xfs);

sbin/ipsecctl/parse.y

2271

r->p1xfs = copytransforms(rule->p1xfs);

sbin/ipsecctl/parse.y

2272

r->p2xfs = copytransforms(rule->p2xfs);

sbin/ipsecctl/parse.y

2273

r->p1life = copylife(rule->p1life);

sbin/ipsecctl/parse.y

2274

r->p2life = copylife(rule->p2life);

sbin/ipsecctl/parse.y

2275

r->authkey = copykey(rule->authkey);

sbin/ipsecctl/parse.y

2276

r->enckey = copykey(rule->enckey);

sbin/ipsecctl/parse.y

2277

r->tag = copytag(rule->tag);

sbin/ipsecctl/parse.y

2279

r->flags = rule->flags;

sbin/ipsecctl/parse.y

2280

r->p1ie = rule->p1ie;

sbin/ipsecctl/parse.y

2281

r->p2ie = rule->p2ie;

sbin/ipsecctl/parse.y

2282

r->type = rule->type;

sbin/ipsecctl/parse.y

2283

r->satype = rule->satype;

sbin/ipsecctl/parse.y

2284

r->proto = rule->proto;

sbin/ipsecctl/parse.y

2285

r->tmode = rule->tmode;

sbin/ipsecctl/parse.y

2286

r->direction = rule->direction;

sbin/ipsecctl/parse.y

2287

r->flowtype = rule->flowtype;

sbin/ipsecctl/parse.y

2288

r->sport = rule->sport;

sbin/ipsecctl/parse.y

2289

r->dport = rule->dport;

sbin/ipsecctl/parse.y

2290

r->ikemode = rule->ikemode;

sbin/ipsecctl/parse.y

2291

r->spi = rule->spi;

sbin/ipsecctl/parse.y

2292

r->udpencap = rule->udpencap;

sbin/ipsecctl/parse.y

2293

r->udpdport = rule->udpdport;

sbin/ipsecctl/parse.y

2294

r->nr = rule->nr;

sbin/ipsecctl/parse.y

2295

r->iface = rule->iface;

sbin/ipsecctl/parse.y

2512

reverse_sa(struct ipsec_rule *rule, u_int32_t spi, struct ipsec_key *authkey,

sbin/ipsecctl/parse.y

2517

if (validate_sa(spi, rule->satype, rule->xfs, authkey, enckey,

sbin/ipsecctl/parse.y

2518

rule->tmode) == 0)

sbin/ipsecctl/parse.y

2526

reverse->satype = rule->satype;

sbin/ipsecctl/parse.y

2527

reverse->tmode = rule->tmode;

sbin/ipsecctl/parse.y

2528

reverse->src = copyhost(rule->dst);

sbin/ipsecctl/parse.y

2529

reverse->dst = copyhost(rule->src);

sbin/ipsecctl/parse.y

2531

reverse->udpencap = rule->udpencap;

sbin/ipsecctl/parse.y

2532

reverse->udpdport = rule->udpdport;

sbin/ipsecctl/parse.y

2533

reverse->xfs = copytransforms(rule->xfs);

sbin/ipsecctl/parse.y

2738

expand_rule(struct ipsec_rule *rule, struct ipsec_hosts *peers,

sbin/ipsecctl/parse.y

2746

if (validate_af(rule->src, rule->dst)) {

sbin/ipsecctl/parse.y

2750

expand_any(rule->src);

sbin/ipsecctl/parse.y

2751

expand_any(rule->dst);

sbin/ipsecctl/parse.y

2752

for (src = rule->src; src; src = src->next) {

sbin/ipsecctl/parse.y

2753

for (dst = rule->dst; dst; dst = dst->next) {

sbin/ipsecctl/parse.y

2756

r = copyrule(rule);

sbin/ipsecctl/parse.y

2802

ipsecctl_free_rule(rule);

sbin/ipsecctl/parse.y

2814

reverse_rule(struct ipsec_rule *rule)

sbin/ipsecctl/parse.y

2825

if (rule->direction == (u_int8_t)IPSEC_OUT)

sbin/ipsecctl/parse.y

2830

reverse->flowtype = rule->flowtype;

sbin/ipsecctl/parse.y

2831

reverse->src = copyhost(rule->dst);

sbin/ipsecctl/parse.y

2832

reverse->dst = copyhost(rule->src);

sbin/ipsecctl/parse.y

2833

reverse->sport = rule->dport;

sbin/ipsecctl/parse.y

2834

reverse->dport = rule->sport;

sbin/ipsecctl/parse.y

2835

if (rule->local)

sbin/ipsecctl/parse.y

2836

reverse->local = copyhost(rule->local);

sbin/ipsecctl/parse.y

2837

if (rule->peer)

sbin/ipsecctl/parse.y

2838

reverse->peer = copyhost(rule->peer);

sbin/ipsecctl/parse.y

2839

reverse->satype = rule->satype;

sbin/ipsecctl/parse.y

2840

reverse->proto = rule->proto;

sbin/ipsecctl/parse.y

2842

if (rule->auth) {

sbin/ipsecctl/parse.y

2846

if (rule->auth->dstid && (reverse->auth->dstid =

sbin/ipsecctl/parse.y

2847

strdup(rule->auth->dstid)) == NULL)

sbin/ipsecctl/parse.y

2849

if (rule->auth->srcid && (reverse->auth->srcid =

sbin/ipsecctl/parse.y

2850

strdup(rule->auth->srcid)) == NULL)

sbin/ipsecctl/parse.y

2852

reverse->auth->srcid_type = rule->auth->srcid_type;

sbin/ipsecctl/parse.y

2853

reverse->auth->dstid_type = rule->auth->dstid_type;

sbin/ipsecctl/parse.y

2854

reverse->auth->type = rule->auth->type;

sbin/ipsecctl/pfkey.c

1004

&rule->src->address.v6,

sbin/ipsecctl/pfkey.c

1006

rule->sport =

sbin/ipsecctl/pfkey.c

1018

if (rule->dst == NULL) {

sbin/ipsecctl/pfkey.c

1019

rule->dst = calloc(1,

sbin/ipsecctl/pfkey.c

1021

if (rule->dst == NULL)

sbin/ipsecctl/pfkey.c

1025

rule->dst->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

1029

&rule->dst->address.v4,

sbin/ipsecctl/pfkey.c

1031

rule->dport =

sbin/ipsecctl/pfkey.c

1036

&rule->dst->address.v6,

sbin/ipsecctl/pfkey.c

1038

rule->dport =

sbin/ipsecctl/pfkey.c

1051

if (rule->src == NULL) {

sbin/ipsecctl/pfkey.c

1052

rule->src = calloc(1,

sbin/ipsecctl/pfkey.c

1054

if (rule->src == NULL)

sbin/ipsecctl/pfkey.c

1058

rule->src->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

1062

bcopy(&sa_in->sin_addr, &rule->src->mask.v4,

sbin/ipsecctl/pfkey.c

1067

bcopy(&sa_in6->sin6_addr, &rule->src->mask.v6,

sbin/ipsecctl/pfkey.c

1080

if (rule->dst == NULL) {

sbin/ipsecctl/pfkey.c

1081

rule->dst = calloc(1,

sbin/ipsecctl/pfkey.c

1083

if (rule->dst == NULL)

sbin/ipsecctl/pfkey.c

1087

rule->dst->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

1091

bcopy(&sa_in->sin_addr, &rule->dst->mask.v4,

sbin/ipsecctl/pfkey.c

1096

bcopy(&sa_in6->sin6_addr, &rule->dst->mask.v6,

sbin/ipsecctl/pfkey.c

811

pfkey_parse(struct sadb_msg *msg, struct ipsec_rule *rule)

sbin/ipsecctl/pfkey.c

824

rule->satype = IPSEC_ESP;

sbin/ipsecctl/pfkey.c

827

rule->satype = IPSEC_AH;

sbin/ipsecctl/pfkey.c

830

rule->satype = IPSEC_IPCOMP;

sbin/ipsecctl/pfkey.c

833

rule->satype = IPSEC_IPIP;

sbin/ipsecctl/pfkey.c

849

rule->local = calloc(1, sizeof(struct ipsec_addr_wrap));

sbin/ipsecctl/pfkey.c

850

if (rule->local == NULL)

sbin/ipsecctl/pfkey.c

853

rule->local->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

857

&rule->local->address.v4,

sbin/ipsecctl/pfkey.c

859

set_ipmask(rule->local, 32);

sbin/ipsecctl/pfkey.c

863

&rule->local->address.v6,

sbin/ipsecctl/pfkey.c

865

set_ipmask(rule->local, 128);

sbin/ipsecctl/pfkey.c

877

rule->peer = calloc(1, sizeof(struct ipsec_addr_wrap));

sbin/ipsecctl/pfkey.c

878

if (rule->peer == NULL)

sbin/ipsecctl/pfkey.c

881

rule->peer->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

885

&rule->peer->address.v4,

sbin/ipsecctl/pfkey.c

887

set_ipmask(rule->peer, 32);

sbin/ipsecctl/pfkey.c

891

&rule->peer->address.v6,

sbin/ipsecctl/pfkey.c

893

set_ipmask(rule->peer, 128);

sbin/ipsecctl/pfkey.c

905

if (rule->auth == NULL) {

sbin/ipsecctl/pfkey.c

906

rule->auth = calloc(1, sizeof(struct

sbin/ipsecctl/pfkey.c

908

if (rule->auth == NULL)

sbin/ipsecctl/pfkey.c

912

rule->auth->srcid = calloc(1, len);

sbin/ipsecctl/pfkey.c

913

if (rule->auth->srcid == NULL)

sbin/ipsecctl/pfkey.c

916

strlcpy(rule->auth->srcid, (char *)(sident + 1), len);

sbin/ipsecctl/pfkey.c

924

if (rule->auth == NULL) {

sbin/ipsecctl/pfkey.c

925

rule->auth = calloc(1, sizeof(struct

sbin/ipsecctl/pfkey.c

927

if (rule->auth == NULL)

sbin/ipsecctl/pfkey.c

931

rule->auth->dstid = calloc(1, len);

sbin/ipsecctl/pfkey.c

932

if (rule->auth->dstid == NULL)

sbin/ipsecctl/pfkey.c

935

strlcpy(rule->auth->dstid, (char *)(sident + 1), len);

sbin/ipsecctl/pfkey.c

941

rule->proto = sproto->sadb_protocol_proto;

sbin/ipsecctl/pfkey.c

949

rule->direction = IPSEC_IN;

sbin/ipsecctl/pfkey.c

952

rule->direction = IPSEC_OUT;

sbin/ipsecctl/pfkey.c

959

rule->flowtype = TYPE_USE;

sbin/ipsecctl/pfkey.c

962

rule->flowtype = TYPE_ACQUIRE;

sbin/ipsecctl/pfkey.c

965

rule->flowtype = TYPE_REQUIRE;

sbin/ipsecctl/pfkey.c

968

rule->flowtype = TYPE_DENY;

sbin/ipsecctl/pfkey.c

971

rule->flowtype = TYPE_BYPASS;

sbin/ipsecctl/pfkey.c

974

rule->flowtype = TYPE_DONTACQ;

sbin/ipsecctl/pfkey.c

977

rule->flowtype = TYPE_UNKNOWN;

sbin/ipsecctl/pfkey.c

986

if (rule->src == NULL) {

sbin/ipsecctl/pfkey.c

987

rule->src = calloc(1,

sbin/ipsecctl/pfkey.c

989

if (rule->src == NULL)

sbin/ipsecctl/pfkey.c

993

rule->src->af = sa->sa_family;

sbin/ipsecctl/pfkey.c

997

&rule->src->address.v4,

sbin/ipsecctl/pfkey.c

999

rule->sport =

sbin/pfctl/pf_print_state.c

340

if (ntohl(s->rule) != -1)

sbin/pfctl/pf_print_state.c

341

printf(", rule %u", ntohl(s->rule));

sbin/pfctl/pfctl.c

1275

pr.rule.action = PF_PASS;

sbin/pfctl/pfctl.c

1290

pr.rule.action = PF_PASS;

sbin/pfctl/pfctl.c

1302

if (pr.rule.anchor_wildcard == 0)

sbin/pfctl/pfctl.c

1307

if (pr.rule.label[0]) {

sbin/pfctl/pfctl.c

1311

pr.rule.label,

sbin/pfctl/pfctl.c

1312

(unsigned long long)pr.rule.evaluations,

sbin/pfctl/pfctl.c

1313

(unsigned long long)(pr.rule.packets[0] +

sbin/pfctl/pfctl.c

1314

pr.rule.packets[1]),

sbin/pfctl/pfctl.c

1315

(unsigned long long)(pr.rule.bytes[0] +

sbin/pfctl/pfctl.c

1316

pr.rule.bytes[1]),

sbin/pfctl/pfctl.c

1317

(unsigned long long)pr.rule.packets[0],

sbin/pfctl/pfctl.c

1318

(unsigned long long)pr.rule.bytes[0],

sbin/pfctl/pfctl.c

1319

(unsigned long long)pr.rule.packets[1],

sbin/pfctl/pfctl.c

1320

(unsigned long long)pr.rule.bytes[1],

sbin/pfctl/pfctl.c

1321

(unsigned long long)pr.rule.states_tot);

sbin/pfctl/pfctl.c

1325

if (pr.rule.label[0] && (pf->opts & PF_OPT_SHOWALL))

sbin/pfctl/pfctl.c

1328

print_rule(pf, &pr.rule, pr.anchor_call, pf->opts);

sbin/pfctl/pfctl.c

1340

pfctl_print_rule_counters(&pr.rule, pf->opts);

sbin/pfctl/pfctl.c

1343

pr.rule.anchor_wildcard, -1);

sbin/pfctl/pfctl.c

1347

if ((pr.rule.rule_flag & PFRULE_EXPIRED) &&

sbin/pfctl/pfctl.c

1352

pfctl_print_rule_counters(&pr.rule, pf->opts);

sbin/pfctl/pfctl.c

1488

if (shownr < 0 || ntohl(p->rule) == shownr)

sbin/pfctl/pfctl.c

1601

struct pf_rule *rule;

sbin/pfctl/pfctl.c

1606

if ((rule = calloc(1, sizeof(*rule))) == NULL)

sbin/pfctl/pfctl.c

1608

bcopy(r, rule, sizeof(*rule));

sbin/pfctl/pfctl.c

1610

TAILQ_INSERT_TAIL(rs->rules.active.ptr, rule, entries);

sbin/pfctl/pfctl.c

2054

memcpy(&pr.rule, r, sizeof(pr.rule));

sbin/pfctl/pfctl.c

849

pfctl_print_rule_counters(struct pf_rule *rule, int opts)

sbin/pfctl/pfctl.c

851

if ((rule->rule_flag & PFRULE_EXPIRED) &&

sbin/pfctl/pfctl.c

862

if (rule->skip[i].nr == rule->nr + 1)

sbin/pfctl/pfctl.c

865

if (rule->skip[i].nr == -1)

sbin/pfctl/pfctl.c

868

printf("%u ", rule->skip[i].nr);

sbin/pfctl/pfctl.c

873

rule->qname, rule->qid, rule->pqname, rule->pqid);

sbin/pfctl/pfctl.c

878

(unsigned long long)rule->evaluations,

sbin/pfctl/pfctl.c

879

(unsigned long long)(rule->packets[0] +

sbin/pfctl/pfctl.c

880

rule->packets[1]),

sbin/pfctl/pfctl.c

881

(unsigned long long)(rule->bytes[0] +

sbin/pfctl/pfctl.c

882

rule->bytes[1]), rule->states_cur);

sbin/pfctl/pfctl.c

886

(unsigned long)rule->cuid, (unsigned long)rule->cpid,

sbin/pfctl/pfctl.c

887

rule->states_tot);

sbin/pfctl/pfctl_optimize.c

860

pr.rule.action = PF_PASS;

sbin/pfctl/pfctl_optimize.c

880

memcpy(&por->por_rule, &pr.rule, sizeof(por->por_rule));

sbin/pfctl/pfctl_parser.c

713

if (sn->rule.nr != -1)

sbin/pfctl/pfctl_parser.c

714

printf(", rule %u", sn->rule.nr);

sys/dev/ic/qwx.c

12788

struct cur_reg_rule *rule;

sys/dev/ic/qwx.c

12793

rule = &reg_info->reg_rules_2ghz_ptr[i];

sys/dev/ic/qwx.c

12794

if (rule->start_freq < 2402 ||

sys/dev/ic/qwx.c

12795

rule->start_freq > 2500 ||

sys/dev/ic/qwx.c

12796

rule->start_freq > rule->end_freq) {

sys/dev/ic/qwx.c

12798

"end freq %u\n", __func__, rule->start_freq,

sys/dev/ic/qwx.c

12799

rule->end_freq);

sys/dev/ic/qwx.c

12803

freq = rule->start_freq + 10;

sys/dev/ic/qwx.c

12810

while (freq <= rule->end_freq && chnum <= 14) {

sys/dev/ic/qwx.c

12812

if (rule->flags & REGULATORY_CHAN_DISABLED) {

sys/dev/ic/qwx.c

12829

rule = &reg_info->reg_rules_5ghz_ptr[i];

sys/dev/ic/qwx.c

12830

if (rule->start_freq < 5170 ||

sys/dev/ic/qwx.c

12831

rule->start_freq > 6000 ||

sys/dev/ic/qwx.c

12832

rule->start_freq > rule->end_freq) {

sys/dev/ic/qwx.c

12834

"end freq %u\n", __func__, rule->start_freq,

sys/dev/ic/qwx.c

12835

rule->end_freq);

sys/dev/ic/qwx.c

12839

freq = rule->start_freq + 10;

sys/dev/ic/qwx.c

12846

while (freq <= rule->end_freq && freq <= 5885 &&

sys/dev/ic/qwx.c

12849

if (rule->flags & (REGULATORY_CHAN_DISABLED |

sys/dev/ic/qwx.c

12857

if (rule->flags & (REGULATORY_CHAN_RADAR |

sys/dev/ic/qwz.c

10483

struct cur_reg_rule *rule;

sys/dev/ic/qwz.c

10488

rule = &reg_info->reg_rules_2ghz_ptr[i];

sys/dev/ic/qwz.c

10489

if (rule->start_freq < 2402 ||

sys/dev/ic/qwz.c

10490

rule->start_freq > 2500 ||

sys/dev/ic/qwz.c

10491

rule->start_freq > rule->end_freq) {

sys/dev/ic/qwz.c

10493

"end freq %u\n", __func__, rule->start_freq,

sys/dev/ic/qwz.c

10494

rule->end_freq);

sys/dev/ic/qwz.c

10498

freq = rule->start_freq + 10;

sys/dev/ic/qwz.c

10505

while (freq <= rule->end_freq && chnum <= 14) {

sys/dev/ic/qwz.c

10507

if (rule->flags & REGULATORY_CHAN_DISABLED) {

sys/dev/ic/qwz.c

10523

rule = &reg_info->reg_rules_5ghz_ptr[i];

sys/dev/ic/qwz.c

10524

if (rule->start_freq < 5170 ||

sys/dev/ic/qwz.c

10525

rule->start_freq > 6000 ||

sys/dev/ic/qwz.c

10526

rule->start_freq > rule->end_freq) {

sys/dev/ic/qwz.c

10528

"end freq %u\n", __func__, rule->start_freq,

sys/dev/ic/qwz.c

10529

rule->end_freq);

sys/dev/ic/qwz.c

10533

freq = rule->start_freq + 10;

sys/dev/ic/qwz.c

10540

while (freq <= rule->end_freq && freq <= 5885 &&

sys/dev/ic/qwz.c

10543

if (rule->flags & (REGULATORY_CHAN_DISABLED |

sys/dev/ic/qwz.c

10550

if (rule->flags & (REGULATORY_CHAN_RADAR |

sys/net/if_pflow.c

810

flow1->tos = flow2->tos = st->rule.ptr->tos;

sys/net/if_pflow.c

847

flow1->tos = flow2->tos = st->rule.ptr->tos;

sys/net/if_pflow.c

900

flow1->tos = flow2->tos = st->rule.ptr ? st->rule.ptr->tos : 0;

sys/net/if_pflow.c

939

flow1->tos = flow2->tos = st->rule.ptr->tos;

sys/net/pf.c

1514

if (st->rule.ptr->pktrate.limit && pd->dir == st->direction) {

sys/net/pf.c

1515

pf_add_threshold(&st->rule.ptr->pktrate);

sys/net/pf.c

1516

if (pf_check_threshold(&st->rule.ptr->pktrate))

sys/net/pf.c

1644

if (st->rule.ptr == NULL)

sys/net/pf.c

1645

sp->rule = htonl(-1);

sys/net/pf.c

1647

sp->rule = htonl(st->rule.ptr->nr);

sys/net/pf.c

1711

if (sp->rule != htonl(-1) && sp->anchor == htonl(-1) &&

sys/net/pf.c

1713

ntohl(sp->rule) < pf_main_ruleset.rules.active.rcount) {

sys/net/pf.c

1715

if (ntohl(sp->rule) == n++)

sys/net/pf.c

1834

st->rule.ptr = r;

sys/net/pf.c

2011

timeout = st->rule.ptr->timeout[stimeout];

sys/net/pf.c

2015

start = st->rule.ptr->timeout[PFTM_ADAPTIVE_START];

sys/net/pf.c

2017

end = st->rule.ptr->timeout[PFTM_ADAPTIVE_END];

sys/net/pf.c

2018

states = st->rule.ptr->states_cur;

sys/net/pf.c

2059

timeout = st->rule.ptr->timeout[PFTM_SRC_NODE];

sys/net/pf.c

2088

pf_send_tcp(st->rule.ptr, st->key[PF_SK_WIRE]->af,

sys/net/pf.c

2192

if (sk == sist->key[PF_SK_STACK] && sist->rule.ptr &&

sys/net/pf.c

2193

(sist->rule.ptr->divert.type == PF_DIVERT_TO ||

sys/net/pf.c

2194

sist->rule.ptr->divert.type == PF_DIVERT_REPLY)) {

sys/net/pf.c

2235

if (--st->rule.ptr->states_cur == 0 &&

sys/net/pf.c

2236

st->rule.ptr->src_nodes == 0)

sys/net/pf.c

2237

pf_rm_rule(NULL, st->rule.ptr);

sys/net/pf.c

2527

if (st->rule.ptr)

sys/net/pf.c

2528

addlog(" @%d", st->rule.ptr->nr);

sys/net/pf.c

287

s->rule.ptr->states_cur++; \

sys/net/pf.c

288

s->rule.ptr->states_tot++; \

sys/net/pf.c

3776

pf_send_tcp(st->rule.ptr, pd->af, pd->dst, pd->src,

sys/net/pf.c

3778

src->seqlo, TH_ACK, 0, 0, st->rule.ptr->return_ttl, 1, 0,

sys/net/pf.c

4363

struct pf_rule *r = st->rule.ptr;

sys/net/pf.c

5144

st->rule.ptr = r;

sys/net/pf.c

5845

pf_send_tcp((*stp)->rule.ptr, pd->af,

sys/net/pf.c

5849

(*stp)->rule.ptr->return_ttl, 1, 0,

sys/net/pf.c

5984

pf_send_tcp((*stp)->rule.ptr, pd->af, pd->dst,

sys/net/pf.c

6017

pf_send_tcp((*stp)->rule.ptr, pd->af,

sys/net/pf.c

6033

pf_send_tcp((*stp)->rule.ptr, pd->af, pd->dst,

sys/net/pf.c

6038

pf_send_tcp((*stp)->rule.ptr, pd->af,

sys/net/pf.c

631

if (a->rule.ptr > b->rule.ptr)

sys/net/pf.c

633

if (a->rule.ptr < b->rule.ptr)

sys/net/pf.c

7347

pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

7365

0, pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

7405

ifp->if_mtu, pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

7465

pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

7485

pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

7528

ifp->if_mtu, pd->af, st->rule.ptr, pd->rdomain);

sys/net/pf.c

767

if ((*stp)->rule.ptr->max_src_conn &&

sys/net/pf.c

768

(*stp)->rule.ptr->max_src_conn < sn->conn) {

sys/net/pf.c

773

if ((*stp)->rule.ptr->max_src_conn_rate.limit &&

sys/net/pf.c

782

if ((*stp)->rule.ptr->overload_tbl) {

sys/net/pf.c

809

pfr_insert_kentry((*stp)->rule.ptr->overload_tbl,

sys/net/pf.c

813

if ((*stp)->rule.ptr->flush) {

sys/net/pf.c

831

((*stp)->rule.ptr->flush &

sys/net/pf.c

833

(*stp)->rule.ptr == st->rule.ptr)) {

sys/net/pf.c

8417

r = st->rule.ptr;

sys/net/pf.c

8449

r = st->rule.ptr;

sys/net/pf.c

8534

r = st->rule.ptr;

sys/net/pf.c

854

pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule,

sys/net/pf.c

864

k.rule.ptr = rule;

sys/net/pf.c

869

if (!rule->max_src_nodes ||

sys/net/pf.c

870

rule->src_nodes < rule->max_src_nodes)

sys/net/pf.c

878

rule->max_src_conn_rate.limit,

sys/net/pf.c

879

rule->max_src_conn_rate.seconds);

sys/net/pf.c

883

(*sn)->rule.ptr = rule;

sys/net/pf.c

899

(*sn)->rule.ptr->src_nodes++;

sys/net/pf.c

907

if (rule->max_src_states &&

sys/net/pf.c

908

(*sn)->states >= rule->max_src_states) {

sys/net/pf.c

922

sn->rule.ptr->src_nodes--;

sys/net/pf.c

923

if (sn->rule.ptr->states_cur == 0 &&

sys/net/pf.c

924

sn->rule.ptr->src_nodes == 0)

sys/net/pf.c

925

pf_rm_rule(NULL, sn->rule.ptr);

sys/net/pf_ioctl.c

2321

struct pf_rule *rule, *tail;

sys/net/pf_ioctl.c

2323

rule = pool_get(&pf_rule_pl, PR_WAITOK|PR_LIMITFAIL|PR_ZERO);

sys/net/pf_ioctl.c

2324

if (rule == NULL) {

sys/net/pf_ioctl.c

2329

if ((error = pf_rule_copyin(&pr->rule, rule))) {

sys/net/pf_ioctl.c

2330

pf_rule_free(rule);

sys/net/pf_ioctl.c

2331

rule = NULL;

sys/net/pf_ioctl.c

2335

if (pr->rule.return_icmp >> 8 > ICMP_MAXTYPE) {

sys/net/pf_ioctl.c

2337

pf_rule_free(rule);

sys/net/pf_ioctl.c

2338

rule = NULL;

sys/net/pf_ioctl.c

2341

if ((error = pf_rule_checkaf(rule))) {

sys/net/pf_ioctl.c

2342

pf_rule_free(rule);

sys/net/pf_ioctl.c

2343

rule = NULL;

sys/net/pf_ioctl.c

2346

if (rule->src.addr.type == PF_ADDR_NONE ||

sys/net/pf_ioctl.c

2347

rule->dst.addr.type == PF_ADDR_NONE) {

sys/net/pf_ioctl.c

2349

pf_rule_free(rule);

sys/net/pf_ioctl.c

2350

rule = NULL;

sys/net/pf_ioctl.c

2354

if (rule->rt && !rule->direction) {

sys/net/pf_ioctl.c

2356

pf_rule_free(rule);

sys/net/pf_ioctl.c

2357

rule = NULL;

sys/net/pf_ioctl.c

2369

pf_rule_free(rule);

sys/net/pf_ioctl.c

2376

pf_rule_free(rule);

sys/net/pf_ioctl.c

2379

rule->cuid = p->p_ucred->cr_ruid;

sys/net/pf_ioctl.c

2380

rule->cpid = p->p_p->ps_pid;

sys/net/pf_ioctl.c

2385

rule->nr = tail->nr + 1;

sys/net/pf_ioctl.c

2387

rule->nr = 0;

sys/net/pf_ioctl.c

2389

rule->kif = pf_kif_setup(rule->kif);

sys/net/pf_ioctl.c

2390

rule->rcv_kif = pf_kif_setup(rule->rcv_kif);

sys/net/pf_ioctl.c

2391

rule->rdr.kif = pf_kif_setup(rule->rdr.kif);

sys/net/pf_ioctl.c

2392

rule->nat.kif = pf_kif_setup(rule->nat.kif);

sys/net/pf_ioctl.c

2393

rule->route.kif = pf_kif_setup(rule->route.kif);

sys/net/pf_ioctl.c

2395

if (rule->overload_tblname[0]) {

sys/net/pf_ioctl.c

2396

if ((rule->overload_tbl = pfr_attach_table(ruleset,

sys/net/pf_ioctl.c

2397

rule->overload_tblname, PR_WAITOK)) == NULL)

sys/net/pf_ioctl.c

2400

rule->overload_tbl->pfrkt_flags |= PFR_TFLAG_ACTIVE;

sys/net/pf_ioctl.c

2403

if (pf_addr_setup(ruleset, &rule->src.addr, rule->af))

sys/net/pf_ioctl.c

2405

if (pf_addr_setup(ruleset, &rule->dst.addr, rule->af))

sys/net/pf_ioctl.c

2407

if (pf_addr_setup(ruleset, &rule->rdr.addr, rule->af))

sys/net/pf_ioctl.c

2409

if (pf_addr_setup(ruleset, &rule->nat.addr, rule->af))

sys/net/pf_ioctl.c

2411

if (pf_addr_setup(ruleset, &rule->route.addr, rule->af))

sys/net/pf_ioctl.c

2413

if (pf_anchor_setup(rule, ruleset, pr->anchor_call))

sys/net/pf_ioctl.c

2417

pf_rm_rule(NULL, rule);

sys/net/pf_ioctl.c

2423

rule, entries);

sys/net/pf_ioctl.c

2433

struct pf_rule *rule;

sys/net/pf_ioctl.c

2447

rule = TAILQ_LAST(ruleset->rules.active.ptr, pf_rulequeue);

sys/net/pf_ioctl.c

2448

if (rule)

sys/net/pf_ioctl.c

2449

pr->nr = rule->nr + 1;

sys/net/pf_ioctl.c

2454

rule = TAILQ_FIRST(ruleset->rules.active.ptr);

sys/net/pf_ioctl.c

2463

pf_init_tgetrule(t, ruleset->anchor, ruleset_version, rule);

sys/net/pf_ioctl.c

2472

struct pf_rule *rule;

sys/net/pf_ioctl.c

2497

rule = t->pftgr_rule;

sys/net/pf_ioctl.c

2498

if (rule == NULL) {

sys/net/pf_ioctl.c

2504

memcpy(&pr->rule, rule, sizeof(struct pf_rule));

sys/net/pf_ioctl.c

2505

memset(&pr->rule.entries, 0, sizeof(pr->rule.entries));

sys/net/pf_ioctl.c

2506

pr->rule.kif = NULL;

sys/net/pf_ioctl.c

2507

pr->rule.nat.kif = NULL;

sys/net/pf_ioctl.c

2508

pr->rule.rdr.kif = NULL;

sys/net/pf_ioctl.c

2509

pr->rule.route.kif = NULL;

sys/net/pf_ioctl.c

2510

pr->rule.rcv_kif = NULL;

sys/net/pf_ioctl.c

2511

pr->rule.anchor = NULL;

sys/net/pf_ioctl.c

2512

pr->rule.overload_tbl = NULL;

sys/net/pf_ioctl.c

2513

pr->rule.pktrate.limit /= PF_THRESHOLD_MULT;

sys/net/pf_ioctl.c

2514

if (pf_anchor_copyout(ruleset, rule, pr)) {

sys/net/pf_ioctl.c

2520

pf_addr_copyout(&pr->rule.src.addr);

sys/net/pf_ioctl.c

2521

pf_addr_copyout(&pr->rule.dst.addr);

sys/net/pf_ioctl.c

2522

pf_addr_copyout(&pr->rule.rdr.addr);

sys/net/pf_ioctl.c

2523

pf_addr_copyout(&pr->rule.nat.addr);

sys/net/pf_ioctl.c

2524

pf_addr_copyout(&pr->rule.route.addr);

sys/net/pf_ioctl.c

2526

if (rule->skip[i].ptr == NULL)

sys/net/pf_ioctl.c

2527

pr->rule.skip[i].nr = (u_int32_t)-1;

sys/net/pf_ioctl.c

2529

pr->rule.skip[i].nr =

sys/net/pf_ioctl.c

2530

rule->skip[i].ptr->nr;

sys/net/pf_ioctl.c

2533

rule->evaluations = 0;

sys/net/pf_ioctl.c

2534

rule->packets[0] = rule->packets[1] = 0;

sys/net/pf_ioctl.c

2535

rule->bytes[0] = rule->bytes[1] = 0;

sys/net/pf_ioctl.c

2536

rule->states_tot = 0;

sys/net/pf_ioctl.c

2538

pr->nr = rule->nr;

sys/net/pf_ioctl.c

2539

t->pftgr_rule = TAILQ_NEXT(rule, entries);

sys/net/pf_ioctl.c

2580

if (pcr->rule.return_icmp >> 8 > ICMP_MAXTYPE) {

sys/net/pf_ioctl.c

2585

error = pf_rule_copyin(&pcr->rule, newrule);

sys/net/pf_ioctl.c

2850

(!psk->psk_label[0] || (st->rule.ptr->label[0] &&

sys/net/pf_ioctl.c

2851

!strcmp(psk->psk_label, st->rule.ptr->label))) &&

sys/net/pf_ioctl.c

347

pf_rule_free(struct pf_rule *rule)

sys/net/pf_ioctl.c

349

if (rule == NULL)

sys/net/pf_ioctl.c

352

pfi_kif_free(rule->kif);

sys/net/pf_ioctl.c

353

pfi_kif_free(rule->rcv_kif);

sys/net/pf_ioctl.c

354

pfi_kif_free(rule->rdr.kif);

sys/net/pf_ioctl.c

355

pfi_kif_free(rule->nat.kif);

sys/net/pf_ioctl.c

356

pfi_kif_free(rule->route.kif);

sys/net/pf_ioctl.c

358

pool_put(&pf_rule_pl, rule);

sys/net/pf_ioctl.c

362

pf_rm_rule(struct pf_rulequeue *rulequeue, struct pf_rule *rule)

sys/net/pf_ioctl.c

365

if (rule->states_cur == 0 && rule->src_nodes == 0) {

sys/net/pf_ioctl.c

371

pf_tbladdr_remove(&rule->src.addr);

sys/net/pf_ioctl.c

372

pf_tbladdr_remove(&rule->dst.addr);

sys/net/pf_ioctl.c

373

pf_tbladdr_remove(&rule->rdr.addr);

sys/net/pf_ioctl.c

374

pf_tbladdr_remove(&rule->nat.addr);

sys/net/pf_ioctl.c

375

pf_tbladdr_remove(&rule->route.addr);

sys/net/pf_ioctl.c

376

if (rule->overload_tbl)

sys/net/pf_ioctl.c

377

pfr_detach_table(rule->overload_tbl);

sys/net/pf_ioctl.c

3772

pstore->rule.ptr = NULL;

sys/net/pf_ioctl.c

3774

pstore->rule.nr = n->rule.ptr->nr;

sys/net/pf_ioctl.c

379

TAILQ_REMOVE(rulequeue, rule, entries);

sys/net/pf_ioctl.c

380

rule->entries.tqe_prev = NULL;

sys/net/pf_ioctl.c

381

rule->nr = (u_int32_t)-1;

sys/net/pf_ioctl.c

384

if (rule->states_cur > 0 || rule->src_nodes > 0 ||

sys/net/pf_ioctl.c

385

rule->entries.tqe_prev != NULL)

sys/net/pf_ioctl.c

387

pf_tag_unref(rule->tag);

sys/net/pf_ioctl.c

388

pf_tag_unref(rule->match_tag);

sys/net/pf_ioctl.c

389

pf_rtlabel_remove(&rule->src.addr);

sys/net/pf_ioctl.c

390

pf_rtlabel_remove(&rule->dst.addr);

sys/net/pf_ioctl.c

391

pfi_dynaddr_remove(&rule->src.addr);

sys/net/pf_ioctl.c

392

pfi_dynaddr_remove(&rule->dst.addr);

sys/net/pf_ioctl.c

393

pfi_dynaddr_remove(&rule->rdr.addr);

sys/net/pf_ioctl.c

394

pfi_dynaddr_remove(&rule->nat.addr);

sys/net/pf_ioctl.c

395

pfi_dynaddr_remove(&rule->route.addr);

sys/net/pf_ioctl.c

397

pf_tbladdr_remove(&rule->src.addr);

sys/net/pf_ioctl.c

398

pf_tbladdr_remove(&rule->dst.addr);

sys/net/pf_ioctl.c

399

pf_tbladdr_remove(&rule->rdr.addr);

sys/net/pf_ioctl.c

400

pf_tbladdr_remove(&rule->nat.addr);

sys/net/pf_ioctl.c

401

pf_tbladdr_remove(&rule->route.addr);

sys/net/pf_ioctl.c

402

if (rule->overload_tbl)

sys/net/pf_ioctl.c

403

pfr_detach_table(rule->overload_tbl);

sys/net/pf_ioctl.c

405

pfi_kif_unref(rule->rcv_kif, PFI_KIF_REF_RULE);

sys/net/pf_ioctl.c

406

pfi_kif_unref(rule->kif, PFI_KIF_REF_RULE);

sys/net/pf_ioctl.c

407

pfi_kif_unref(rule->rdr.kif, PFI_KIF_REF_RULE);

sys/net/pf_ioctl.c

408

pfi_kif_unref(rule->nat.kif, PFI_KIF_REF_RULE);

sys/net/pf_ioctl.c

409

pfi_kif_unref(rule->route.kif, PFI_KIF_REF_RULE);

sys/net/pf_ioctl.c

410

pf_remove_anchor(rule);

sys/net/pf_ioctl.c

411

pool_put(&pf_rule_pl, rule);

sys/net/pf_ioctl.c

571

struct pf_rule *rule;

sys/net/pf_ioctl.c

575

while ((rule = TAILQ_FIRST(rs->rules.inactive.ptr)) != NULL) {

sys/net/pf_ioctl.c

576

pf_rm_rule(rs->rules.inactive.ptr, rule);

sys/net/pf_ioctl.c

588

struct pf_rule *rule;

sys/net/pf_ioctl.c

594

while ((rule = TAILQ_FIRST(rs->rules.inactive.ptr)) != NULL) {

sys/net/pf_ioctl.c

595

pf_rm_rule(rs->rules.inactive.ptr, rule);

sys/net/pf_ioctl.c

833

pf_hash_rule(MD5_CTX *ctx, struct pf_rule *rule)

sys/net/pf_ioctl.c

838

pf_hash_rule_addr(ctx, &rule->src);

sys/net/pf_ioctl.c

839

pf_hash_rule_addr(ctx, &rule->dst);

sys/net/pf_ioctl.c

840

PF_MD5_UPD_STR(rule, label);

sys/net/pf_ioctl.c

841

PF_MD5_UPD_STR(rule, ifname);

sys/net/pf_ioctl.c

842

PF_MD5_UPD_STR(rule, rcv_ifname);

sys/net/pf_ioctl.c

843

PF_MD5_UPD_STR(rule, match_tagname);

sys/net/pf_ioctl.c

844

PF_MD5_UPD_HTONS(rule, match_tag, x); /* dup? */

sys/net/pf_ioctl.c

845

PF_MD5_UPD_HTONL(rule, os_fingerprint, y);

sys/net/pf_ioctl.c

846

PF_MD5_UPD_HTONL(rule, prob, y);

sys/net/pf_ioctl.c

847

PF_MD5_UPD_HTONL(rule, uid.uid[0], y);

sys/net/pf_ioctl.c

848

PF_MD5_UPD_HTONL(rule, uid.uid[1], y);

sys/net/pf_ioctl.c

849

PF_MD5_UPD(rule, uid.op);

sys/net/pf_ioctl.c

850

PF_MD5_UPD_HTONL(rule, gid.gid[0], y);

sys/net/pf_ioctl.c

851

PF_MD5_UPD_HTONL(rule, gid.gid[1], y);

sys/net/pf_ioctl.c

852

PF_MD5_UPD(rule, gid.op);

sys/net/pf_ioctl.c

853

PF_MD5_UPD_HTONL(rule, rule_flag, y);

sys/net/pf_ioctl.c

854

PF_MD5_UPD(rule, action);

sys/net/pf_ioctl.c

855

PF_MD5_UPD(rule, direction);

sys/net/pf_ioctl.c

856

PF_MD5_UPD(rule, af);

sys/net/pf_ioctl.c

857

PF_MD5_UPD(rule, quick);

sys/net/pf_ioctl.c

858

PF_MD5_UPD(rule, ifnot);

sys/net/pf_ioctl.c

859

PF_MD5_UPD(rule, rcvifnot);

sys/net/pf_ioctl.c

860

PF_MD5_UPD(rule, match_tag_not);

sys/net/pf_ioctl.c

861

PF_MD5_UPD(rule, keep_state);

sys/net/pf_ioctl.c

862

PF_MD5_UPD(rule, proto);

sys/net/pf_ioctl.c

863

PF_MD5_UPD(rule, type);

sys/net/pf_ioctl.c

864

PF_MD5_UPD(rule, code);

sys/net/pf_ioctl.c

865

PF_MD5_UPD(rule, flags);

sys/net/pf_ioctl.c

866

PF_MD5_UPD(rule, flagset);

sys/net/pf_ioctl.c

867

PF_MD5_UPD(rule, allow_opts);

sys/net/pf_ioctl.c

868

PF_MD5_UPD(rule, rt);

sys/net/pf_ioctl.c

869

PF_MD5_UPD(rule, tos);

sys/net/pf_ioctl.c

876

struct pf_rule *rule;

sys/net/pf_ioctl.c

909

while ((rule = TAILQ_FIRST(old_rules)) != NULL)

sys/net/pf_ioctl.c

910

pf_rm_rule(old_rules, rule);

sys/net/pf_ioctl.c

929

struct pf_rule *rule;

sys/net/pf_ioctl.c

935

TAILQ_FOREACH(rule, rs->rules.inactive.ptr, entries) {

sys/net/pf_ioctl.c

936

pf_hash_rule(&ctx, rule);

sys/net/pf_lb.c

266

k.rule.ptr = r;

sys/net/pf_lb.c

949

if (cur->rule.ptr != NULL) {

sys/net/pf_lb.c

951

rpool = &cur->rule.ptr->route;

sys/net/pf_norm.c

1465

if ((ts_fudge = state->rule.ptr->timeout[PFTM_TS_DIFF]) == 0)

sys/net/pfvar.h

1374

struct pf_rule rule;

sys/net/pfvar.h

656

union pf_rule_ptr rule;

sys/net/pfvar.h

788

u_int32_t rule;

sys/net/pfvar_priv.h

156

union pf_rule_ptr rule; /* [I] */

usr.bin/doas/doas.c

136

permit(uid_t uid, gid_t *groups, int ngroups, const struct rule **lastr,

usr.bin/doas/doas.c

185

const struct rule *rule;

usr.bin/doas/doas.c

194

rv = permit(uid, groups, ngroups, &rule, target, argv[0],

usr.bin/doas/doas.c

197

printf("permit%s\n", (rule->options & NOPASS) ? " nopass" : "");

usr.bin/doas/doas.c

319

const struct rule *rule;

usr.bin/doas/doas.c

418

rv = permit(uid, groups, ngroups, &rule, target, cmd,

usr.bin/doas/doas.c

426

if (!(rule->options & NOPASS)) {

usr.bin/doas/doas.c

430

authuser(mypw->pw_name, login_style, rule->options & PERSIST);

usr.bin/doas/doas.c

444

if (rule->cmd) {

usr.bin/doas/doas.c

477

if (!(rule->options & NOLOG)) {

usr.bin/doas/doas.c

483

envp = prepenv(rule, mypw, targpw);

usr.bin/doas/doas.c

486

if (rule->cmd) {

usr.bin/doas/doas.c

97

const char **cmdargs, struct rule *r)

usr.bin/doas/doas.h

28

extern struct rule **rules;

usr.bin/doas/doas.h

36

char **prepenv(const struct rule *, const struct passwd *,

usr.bin/doas/env.c

112

if (rule->options & KEEPENV) {

usr.bin/doas/env.c

225

prepenv(const struct rule *rule, const struct passwd *mypw,

usr.bin/doas/env.c

230

env = createenv(rule, mypw, targpw);

usr.bin/doas/env.c

231

if (rule->envlist)

usr.bin/doas/env.c

232

fillenv(env, rule->envlist);

usr.bin/doas/env.c

87

createenv(const struct rule *rule, const struct passwd *mypw,

usr.bin/doas/parse.y

50

struct rule **rules;

usr.bin/doas/parse.y

81

| grammar rule '\n'

usr.bin/doas/parse.y

85

rule: action ident target cmd {

usr.bin/doas/parse.y

86

struct rule *r;

usr.bin/lex/parse.y

230

flexrule : '^' rule

usr.bin/lex/parse.y

266

| rule

usr.bin/lex/parse.y

376

rule : re2 re

usr.bin/mandoc/roff.c

139

int rule; /* content is: 1=evaluated 0=skipped */

usr.bin/mandoc/roff.c

2322

rr = r->last->rule;

usr.bin/mandoc/roff.c

2392

bl->rule = 0;

usr.bin/mandoc/roff.c

2682

r->last->rule = tok == ROFF_el ?

usr.bin/mandoc/roff.c

2697

r->rstack[++r->rstackpos] = !r->last->rule;

usr.bin/mandoc/roff.c

2702

if (r->last->parent && !r->last->parent->rule)

usr.bin/mandoc/roff.c

2703

r->last->rule = 0;

usr.bin/mandoc/roff.c

721

p->rule = p->parent ? p->parent->rule : 0;

usr.bin/pkgconf/libpkgconf/pkg.c

1377

const pkgconf_pkg_provides_vermatch_rule_t *rule = &pkgconf_pkg_provides_vermatch_rules[pkgdep->compare];

usr.bin/pkgconf/libpkgconf/pkg.c

1379

if (rule->depcmp[provider->compare] != NULL &&

usr.bin/pkgconf/libpkgconf/pkg.c

1380

!rule->depcmp[provider->compare](provider->version, pkgdep->version))

usr.bin/pkgconf/libpkgconf/pkg.c

1383

if (rule->rulecmp[provider->compare] != NULL &&

usr.bin/pkgconf/libpkgconf/pkg.c

1384

!rule->rulecmp[provider->compare](pkgdep->version, provider->version))

usr.bin/rsync/rules.c

101

static struct rule *

usr.bin/rsync/rules.c

104

struct rule *new;

usr.bin/rsync/rules.c

147

parse_pattern(struct rule *r, char *pattern)

usr.bin/rsync/rules.c

204

struct rule *r;

usr.bin/rsync/rules.c

267

send_command(struct rule *r)

usr.bin/rsync/rules.c

309

if (rule->modifiers & modifiers[i].modifier)

usr.bin/rsync/rules.c

327

postfix_command(struct rule *r)

usr.bin/rsync/rules.c

345

struct rule *r;

usr.bin/rsync/rules.c

38

static struct rule *rules;

usr.bin/rsync/rules.c

398

rule_matched(struct rule *r)

usr.bin/rsync/rules.c

412

struct rule *r;

usr.bin/ssh/ssh.c

366

struct allowed_cname *rule;

usr.bin/ssh/ssh.c

382

rule = options.permitted_cnames + i;

usr.bin/ssh/ssh.c

383

if (match_pattern_list(*namep, rule->source_list, 1) != 1 ||

usr.bin/ssh/ssh.c

384

match_pattern_list(cname, rule->target_list, 1) != 1)

usr.bin/systat/pftop.c

884

print_fld_uint(FLD_RULE, ntohl(s->rule));

usr.bin/systat/pftop.c

981

pr.rule.anchor = (struct pf_anchor *) anchor;

usr.bin/systat/pftop.c

982

len = strlen(pr.rule.label);

usr.bin/systat/pftop.c

985

rules[off + nr] = pr.rule;

usr.bin/yacc/closure.c

119

int symbol, rowsize, i, rule;

usr.bin/yacc/closure.c

128

for (rule = *sp; rule > 0; rule = *++sp) {

usr.bin/yacc/closure.c

129

symbol = ritem[rrhs[rule]];

usr.bin/yacc/closure.c

151

int i, j, rule, rulesetsize, varsetsize;

usr.bin/yacc/closure.c

172

while ((rule = *rp++) >= 0) {

usr.bin/yacc/closure.c

173

SETBIT(rrow, rule);

usr.bin/yacc/verbose.c

187

int rule;

usr.bin/yacc/verbose.c

200

rule = -(*sp);

usr.bin/yacc/verbose.c

201

fprintf(verbose_file, "\t%s : ", symbol_name[rlhs[rule]]);

usr.bin/yacc/verbose.c

203

for (sp = ritem + rrhs[rule]; sp < sp1; sp++)

usr.sbin/bgpd/parse.y

4956

expand_rule(struct filter_rule *rule, struct filter_rib_l *rib,

usr.sbin/bgpd/parse.y

4982

memcpy(r, rule, sizeof(*r));

usr.sbin/bgpd/rde_filter.c

549

struct rde_filter_rule *rule;

usr.sbin/bgpd/rde_filter.c

554

rule = &rf->rules[index];

usr.sbin/bgpd/rde_filter.c

555

rule->match = fr->match;

usr.sbin/bgpd/rde_filter.c

556

rule->rde_set = fr->rde_set;

usr.sbin/bgpd/rde_filter.c

557

rde_filterset_ref(rule->rde_set);

usr.sbin/bgpd/rde_filter.c

558

rule->action = fr->action;

usr.sbin/bgpd/rde_filter.c

559

rule->quick = fr->quick;

usr.sbin/btrace/bt_parse.y

140

| grammar rule

usr.sbin/btrace/bt_parse.y

144

rule : plist filter action { br_new($1, $2, $3); beflag = 0; }

usr.sbin/config/files.c

164

fi->fi_mkrule = rule;

usr.sbin/config/files.c

91

addfile(struct nvlist *nvpath, struct nvlist *optx, int flags, const char *rule)

usr.sbin/config/gram.y

113

%type <str> rule

usr.sbin/config/gram.y

177

XFILE pathnames fopts fflgs rule { addfile($2, $3, $4, $5); };

usr.sbin/config/gram.y

212

rule:

usr.sbin/ftp-proxy/filter.c

109

if (add_addr(rdr, &pfr.rule.rdr) == -1)

usr.sbin/ftp-proxy/filter.c

112

pfr.rule.direction = PF_IN;

usr.sbin/ftp-proxy/filter.c

113

pfr.rule.onrdomain = s_rd;

usr.sbin/ftp-proxy/filter.c

114

pfr.rule.rtableid = d_rd;

usr.sbin/ftp-proxy/filter.c

115

pfr.rule.rdr.proxy_port[0] = rdr_port;

usr.sbin/ftp-proxy/filter.c

204

pfr.rule.af = src->sa_family;

usr.sbin/ftp-proxy/filter.c

205

pfr.rule.proto = IPPROTO_TCP;

usr.sbin/ftp-proxy/filter.c

206

pfr.rule.src.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/ftp-proxy/filter.c

207

pfr.rule.dst.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/ftp-proxy/filter.c

208

pfr.rule.nat.addr.type = PF_ADDR_NONE;

usr.sbin/ftp-proxy/filter.c

209

pfr.rule.rdr.addr.type = PF_ADDR_NONE;

usr.sbin/ftp-proxy/filter.c

212

memcpy(&pfr.rule.src.addr.v.a.addr.v4,

usr.sbin/ftp-proxy/filter.c

214

memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 4);

usr.sbin/ftp-proxy/filter.c

215

memcpy(&pfr.rule.dst.addr.v.a.addr.v4,

usr.sbin/ftp-proxy/filter.c

217

memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 4);

usr.sbin/ftp-proxy/filter.c

219

memcpy(&pfr.rule.src.addr.v.a.addr.v6,

usr.sbin/ftp-proxy/filter.c

221

memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 16);

usr.sbin/ftp-proxy/filter.c

222

memcpy(&pfr.rule.dst.addr.v.a.addr.v6,

usr.sbin/ftp-proxy/filter.c

224

memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 16);

usr.sbin/ftp-proxy/filter.c

226

pfr.rule.dst.port_op = PF_OP_EQ;

usr.sbin/ftp-proxy/filter.c

227

pfr.rule.dst.port[0] = htons(d_port);

usr.sbin/ftp-proxy/filter.c

235

pfr.rule.action = PF_MATCH;

usr.sbin/ftp-proxy/filter.c

237

pfr.rule.action = PF_PASS;

usr.sbin/ftp-proxy/filter.c

238

pfr.rule.quick = 1;

usr.sbin/ftp-proxy/filter.c

239

pfr.rule.log = rule_log;

usr.sbin/ftp-proxy/filter.c

240

pfr.rule.keep_state = 1;

usr.sbin/ftp-proxy/filter.c

241

pfr.rule.flags = TH_SYN;

usr.sbin/ftp-proxy/filter.c

242

pfr.rule.flagset = (TH_SYN|TH_ACK);

usr.sbin/ftp-proxy/filter.c

243

pfr.rule.max_states = 1;

usr.sbin/ftp-proxy/filter.c

245

strlcpy(pfr.rule.qname, qname, sizeof pfr.rule.qname);

usr.sbin/ftp-proxy/filter.c

247

pfr.rule.quick = 0;

usr.sbin/ftp-proxy/filter.c

248

strlcpy(pfr.rule.tagname, tagname,

usr.sbin/ftp-proxy/filter.c

249

sizeof pfr.rule.tagname);

usr.sbin/ftp-proxy/filter.c

82

if (add_addr(nat, &pfr.rule.nat) == -1)

usr.sbin/ftp-proxy/filter.c

85

pfr.rule.direction = PF_OUT;

usr.sbin/ftp-proxy/filter.c

86

pfr.rule.onrdomain = s_rd;

usr.sbin/ftp-proxy/filter.c

87

pfr.rule.rtableid = -1;

usr.sbin/ftp-proxy/filter.c

88

pfr.rule.nat.proxy_port[0] = nat_range_low;

usr.sbin/ftp-proxy/filter.c

89

pfr.rule.nat.proxy_port[1] = nat_range_high;

usr.sbin/relayd/config.c

146

struct relay_rule *rule;

usr.sbin/relayd/config.c

186

while ((rule = TAILQ_FIRST(&proto->rules)) != NULL)

usr.sbin/relayd/config.c

187

rule_delete(&proto->rules, rule);

usr.sbin/relayd/config.c

642

struct relay_rule *rule;

usr.sbin/relayd/config.c

656

TAILQ_FOREACH(rule, &proto->rules, rule_entry) {

usr.sbin/relayd/config.c

657

rule->rule_protoid = proto->id;

usr.sbin/relayd/config.c

658

bzero(&rule->rule_ctl, sizeof(rule->rule_ctl));

usr.sbin/relayd/config.c

660

iov[c].iov_base = rule;

usr.sbin/relayd/config.c

661

iov[c++].iov_len = sizeof(*rule);

usr.sbin/relayd/config.c

663

if (rule->rule_kv[i].kv_key != NULL) {

usr.sbin/relayd/config.c

664

rule->rule_ctl.kvlen[i].key =

usr.sbin/relayd/config.c

665

strlen(rule->rule_kv[i].kv_key);

usr.sbin/relayd/config.c

667

rule->rule_kv[i].kv_key;

usr.sbin/relayd/config.c

669

rule->rule_ctl.kvlen[i].key;

usr.sbin/relayd/config.c

671

rule->rule_ctl.kvlen[i].key = -1;

usr.sbin/relayd/config.c

672

if (rule->rule_kv[i].kv_value != NULL) {

usr.sbin/relayd/config.c

673

rule->rule_ctl.kvlen[i].value =

usr.sbin/relayd/config.c

674

strlen(rule->rule_kv[i].kv_value);

usr.sbin/relayd/config.c

676

rule->rule_kv[i].kv_value;

usr.sbin/relayd/config.c

678

rule->rule_ctl.kvlen[i].value;

usr.sbin/relayd/config.c

680

rule->rule_ctl.kvlen[i].value = -1;

usr.sbin/relayd/config.c

733

struct relay_rule *rule;

usr.sbin/relayd/config.c

738

if ((rule = calloc(1, sizeof(*rule))) == NULL)

usr.sbin/relayd/config.c

741

IMSG_SIZE_CHECK(imsg, rule);

usr.sbin/relayd/config.c

742

memcpy(rule, p, sizeof(*rule));

usr.sbin/relayd/config.c

743

s = sizeof(*rule);

usr.sbin/relayd/config.c

746

if ((proto = proto_find(env, rule->rule_protoid)) == NULL) {

usr.sbin/relayd/config.c

747

free(rule);

usr.sbin/relayd/config.c

752

if (rule->rule_ctl.kvlen[_n]._f >= 0) { \

usr.sbin/relayd/config.c

754

if ((len < rule->rule_ctl.kvlen[_n]._f) || \

usr.sbin/relayd/config.c

755

(rule->rule_kv[_n].kv_##_f = \

usr.sbin/relayd/config.c

757

rule->rule_ctl.kvlen[_n]._f)) == NULL) { \

usr.sbin/relayd/config.c

758

free(rule); \

usr.sbin/relayd/config.c

761

s += rule->rule_ctl.kvlen[_n]._f; \

usr.sbin/relayd/config.c

762

len -= rule->rule_ctl.kvlen[_n]._f; \

usr.sbin/relayd/config.c

765

#_n, #_f, rule->rule_ctl.kvlen[_n]._f, \

usr.sbin/relayd/config.c

766

rule->rule_kv[_n].kv_option, \

usr.sbin/relayd/config.c

767

rule->rule_kv[_n].kv_##_f); \

usr.sbin/relayd/config.c

771

memset(&rule->rule_kv[0], 0, sizeof(struct kv));

usr.sbin/relayd/config.c

773

TAILQ_INIT(&rule->rule_kv[i].kv_children);

usr.sbin/relayd/config.c

778

if (rule->rule_labelname[0])

usr.sbin/relayd/config.c

779

rule->rule_label = label_name2id(rule->rule_labelname);

usr.sbin/relayd/config.c

781

if (rule->rule_tagname[0])

usr.sbin/relayd/config.c

782

rule->rule_tag = tag_name2id(rule->rule_tagname);

usr.sbin/relayd/config.c

784

if (rule->rule_taggedname[0])

usr.sbin/relayd/config.c

785

rule->rule_tagged = tag_name2id(rule->rule_taggedname);

usr.sbin/relayd/config.c

787

rule->rule_id = proto->rulecount++;

usr.sbin/relayd/config.c

789

TAILQ_INSERT_TAIL(&proto->rules, rule, rule_entry);

usr.sbin/relayd/config.c

793

rule->rule_id, proto->name);

usr.sbin/relayd/parse.y

117

static struct relay_rule *rule = NULL;

usr.sbin/relayd/parse.y

1401

if ((rule = calloc(1, sizeof(*rule))) == NULL)

usr.sbin/relayd/parse.y

1404

rule->rule_action = $1;

usr.sbin/relayd/parse.y

1405

rule->rule_proto = proto->type;

usr.sbin/relayd/parse.y

1406

rule->rule_dir = $2;

usr.sbin/relayd/parse.y

1407

rule->rule_flags |= $3;

usr.sbin/relayd/parse.y

1408

rule->rule_af = $4;

usr.sbin/relayd/parse.y

1409

rule->rule_src.addr = $5.ss;

usr.sbin/relayd/parse.y

1410

rule->rule_src.addr_mask = $5.prefixlen;

usr.sbin/relayd/parse.y

1411

rule->rule_dst.addr = $6.ss;

usr.sbin/relayd/parse.y

1412

rule->rule_dst.addr_mask = $6.prefixlen;

usr.sbin/relayd/parse.y

1414

if (RELAY_AF_NEQ(rule->rule_af,

usr.sbin/relayd/parse.y

1415

rule->rule_src.addr.ss_family) ||

usr.sbin/relayd/parse.y

1416

RELAY_AF_NEQ(rule->rule_af,

usr.sbin/relayd/parse.y

1417

rule->rule_dst.addr.ss_family) ||

usr.sbin/relayd/parse.y

1418

RELAY_AF_NEQ(rule->rule_src.addr.ss_family,

usr.sbin/relayd/parse.y

1419

rule->rule_dst.addr.ss_family)) {

usr.sbin/relayd/parse.y

1426

if (rule_add(proto, rule, rulefile) == -1) {

usr.sbin/relayd/parse.y

1434

rule_free(rule);

usr.sbin/relayd/parse.y

1435

free(rule);

usr.sbin/relayd/parse.y

1441

rule = NULL;

usr.sbin/relayd/parse.y

1504

rule->rule_method = id;

usr.sbin/relayd/parse.y

1509

rule->rule_kv[keytype].kv_key = strdup($3);

usr.sbin/relayd/parse.y

1510

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1511

rule->rule_kv[keytype].kv_value = (($4 != NULL) ?

usr.sbin/relayd/parse.y

1513

if (rule->rule_kv[keytype].kv_key == NULL ||

usr.sbin/relayd/parse.y

1514

rule->rule_kv[keytype].kv_value == NULL)

usr.sbin/relayd/parse.y

1519

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1523

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1524

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1528

memset(&rule->rule_kv[keytype], 0,

usr.sbin/relayd/parse.y

1529

sizeof(rule->rule_kv[keytype]));

usr.sbin/relayd/parse.y

1530

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1531

rule->rule_kv[keytype].kv_key = strdup($3);

usr.sbin/relayd/parse.y

1532

rule->rule_kv[keytype].kv_value = (($4 != NULL) ?

usr.sbin/relayd/parse.y

1534

if (rule->rule_kv[keytype].kv_key == NULL ||

usr.sbin/relayd/parse.y

1535

rule->rule_kv[keytype].kv_value == NULL)

usr.sbin/relayd/parse.y

1540

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1544

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1545

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1549

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1550

rule->rule_kv[keytype].kv_key = strdup($3);

usr.sbin/relayd/parse.y

1551

rule->rule_kv[keytype].kv_value = (($4 != NULL) ?

usr.sbin/relayd/parse.y

1553

if (rule->rule_kv[keytype].kv_key == NULL ||

usr.sbin/relayd/parse.y

1554

rule->rule_kv[keytype].kv_value == NULL)

usr.sbin/relayd/parse.y

1559

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1563

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1564

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1576

rule->rule_kv[keytype].kv_option = KEY_OPTION_STRIP;

usr.sbin/relayd/parse.y

1577

rule->rule_kv[keytype].kv_value = strip;

usr.sbin/relayd/parse.y

1578

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1594

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1595

rule->rule_kv[keytype].kv_key = strdup($3);

usr.sbin/relayd/parse.y

1596

rule->rule_kv[keytype].kv_value = (($4 != NULL) ?

usr.sbin/relayd/parse.y

1598

if (rule->rule_kv[keytype].kv_key == NULL ||

usr.sbin/relayd/parse.y

1599

rule->rule_kv[keytype].kv_value == NULL)

usr.sbin/relayd/parse.y

1604

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1617

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1618

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1633

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1634

rule->rule_kv[keytype].kv_key = strdup($3.digest);

usr.sbin/relayd/parse.y

1635

rule->rule_kv[keytype].kv_digest = $3.type;

usr.sbin/relayd/parse.y

1636

rule->rule_kv[keytype].kv_value = (($4 != NULL) ?

usr.sbin/relayd/parse.y

1638

if (rule->rule_kv[keytype].kv_key == NULL ||

usr.sbin/relayd/parse.y

1639

rule->rule_kv[keytype].kv_value == NULL)

usr.sbin/relayd/parse.y

1644

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1657

rule->rule_kv[keytype].kv_option = $2;

usr.sbin/relayd/parse.y

1658

rule->rule_kv[keytype].kv_type = keytype;

usr.sbin/relayd/parse.y

1666

if (strlcpy(rule->rule_tablename, $3,

usr.sbin/relayd/parse.y

1667

sizeof(rule->rule_tablename)) >=

usr.sbin/relayd/parse.y

1668

sizeof(rule->rule_tablename)) {

usr.sbin/relayd/parse.y

1677

if (rule->rule_tag) {

usr.sbin/relayd/parse.y

1680

rule_free(rule);

usr.sbin/relayd/parse.y

1681

free(rule);

usr.sbin/relayd/parse.y

1687

rule_free(rule);

usr.sbin/relayd/parse.y

1688

free(rule);

usr.sbin/relayd/parse.y

1691

rule->rule_tag = tag;

usr.sbin/relayd/parse.y

1692

if (strlcpy(rule->rule_tagname, $2,

usr.sbin/relayd/parse.y

1693

sizeof(rule->rule_tagname)) >=

usr.sbin/relayd/parse.y

1694

sizeof(rule->rule_tagname)) {

usr.sbin/relayd/parse.y

1697

rule_free(rule);

usr.sbin/relayd/parse.y

1698

free(rule);

usr.sbin/relayd/parse.y

1708

rule->rule_tag = -1;

usr.sbin/relayd/parse.y

1709

memset(rule->rule_tagname, 0,

usr.sbin/relayd/parse.y

1710

sizeof(rule->rule_tagname));

usr.sbin/relayd/parse.y

1714

if (rule->rule_tagged) {

usr.sbin/relayd/parse.y

1717

rule_free(rule);

usr.sbin/relayd/parse.y

1718

free(rule);

usr.sbin/relayd/parse.y

1724

rule_free(rule);

usr.sbin/relayd/parse.y

1725

free(rule);

usr.sbin/relayd/parse.y

1728

rule->rule_tagged = tagged;

usr.sbin/relayd/parse.y

1729

if (strlcpy(rule->rule_taggedname, $2,

usr.sbin/relayd/parse.y

1730

sizeof(rule->rule_taggedname)) >=

usr.sbin/relayd/parse.y

1731

sizeof(rule->rule_taggedname)) {

usr.sbin/relayd/parse.y

1734

rule_free(rule);

usr.sbin/relayd/parse.y

1735

free(rule);

usr.sbin/relayd/parse.y

1742

if (rule->rule_label) {

usr.sbin/relayd/parse.y

1745

rule_free(rule);

usr.sbin/relayd/parse.y

1746

free(rule);

usr.sbin/relayd/parse.y

1752

rule_free(rule);

usr.sbin/relayd/parse.y

1753

free(rule);

usr.sbin/relayd/parse.y

1756

rule->rule_label = label;

usr.sbin/relayd/parse.y

1757

if (strlcpy(rule->rule_labelname, $2,

usr.sbin/relayd/parse.y

1758

sizeof(rule->rule_labelname)) >=

usr.sbin/relayd/parse.y

1759

sizeof(rule->rule_labelname)) {

usr.sbin/relayd/parse.y

1762

rule_free(rule);

usr.sbin/relayd/parse.y

1763

free(rule);

usr.sbin/relayd/parse.y

1773

rule->rule_label = -1;

usr.sbin/relayd/parse.y

1774

memset(rule->rule_labelname, 0,

usr.sbin/relayd/parse.y

1775

sizeof(rule->rule_labelname));

usr.sbin/relayd/parse.y

1782

rule_free(rule);

usr.sbin/relayd/parse.y

1783

free(rule);

usr.sbin/relayd/parse.y

1787

if ((rule->rule_kv[keytype].kv_value =

usr.sbin/relayd/parse.y

1792

rule->rule_kv[keytype].kv_value = NULL;

usr.sbin/relayd/pfe_filter.c

372

rio.rule.action = PF_MATCH;

usr.sbin/relayd/pfe_filter.c

373

rio.rule.quick = 0;

usr.sbin/relayd/pfe_filter.c

375

rio.rule.action = PF_PASS;

usr.sbin/relayd/pfe_filter.c

376

rio.rule.quick = 1; /* force first match */

usr.sbin/relayd/pfe_filter.c

378

rio.rule.direction = PF_IN;

usr.sbin/relayd/pfe_filter.c

379

rio.rule.keep_state = PF_STATE_NORMAL;

usr.sbin/relayd/pfe_filter.c

382

rio.rule.log = 1;

usr.sbin/relayd/pfe_filter.c

384

rio.rule.log = 0; /* allow change via reload */

usr.sbin/relayd/pfe_filter.c

390

rio.rule.flags = TH_SYN;

usr.sbin/relayd/pfe_filter.c

391

rio.rule.flagset = (TH_SYN|TH_ACK);

usr.sbin/relayd/pfe_filter.c

396

rio.rule.rt = PF_ROUTETO;

usr.sbin/relayd/pfe_filter.c

399

rio.rule.rule_flag = PFRULE_STATESLOPPY;

usr.sbin/relayd/pfe_filter.c

408

rio.rule.af = address->ss.ss_family;

usr.sbin/relayd/pfe_filter.c

409

rio.rule.proto = address->ipproto;

usr.sbin/relayd/pfe_filter.c

410

rio.rule.src.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/relayd/pfe_filter.c

411

rio.rule.dst.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/relayd/pfe_filter.c

412

rio.rule.dst.port_op = address->port.op;

usr.sbin/relayd/pfe_filter.c

413

rio.rule.dst.port[0] = address->port.val[0];

usr.sbin/relayd/pfe_filter.c

414

rio.rule.dst.port[1] = address->port.val[1];

usr.sbin/relayd/pfe_filter.c

415

rio.rule.rtableid = -1; /* stay in the main routing table */

usr.sbin/relayd/pfe_filter.c

416

rio.rule.onrdomain = env->sc_rtable;

usr.sbin/relayd/pfe_filter.c

419

if (rio.rule.proto == IPPROTO_TCP)

usr.sbin/relayd/pfe_filter.c

420

rio.rule.timeout[PFTM_TCP_ESTABLISHED] =

usr.sbin/relayd/pfe_filter.c

425

(void)strlcpy(rio.rule.tagname, rdr->conf.tag,

usr.sbin/relayd/pfe_filter.c

426

sizeof(rio.rule.tagname));

usr.sbin/relayd/pfe_filter.c

428

(void)strlcpy(rio.rule.ifname, address->ifname,

usr.sbin/relayd/pfe_filter.c

429

sizeof(rio.rule.ifname));

usr.sbin/relayd/pfe_filter.c

434

rio.rule.dst.addr.v.a.addr.addr32[0] =

usr.sbin/relayd/pfe_filter.c

436

rio.rule.dst.addr.v.a.mask.addr32[0] = 0xffffffff;

usr.sbin/relayd/pfe_filter.c

440

memcpy(&rio.rule.dst.addr.v.a.addr.v6,

usr.sbin/relayd/pfe_filter.c

443

memset(&rio.rule.dst.addr.v.a.mask.addr8, 0xff, 16);

usr.sbin/relayd/pfe_filter.c

446

rio.rule.nat.addr.type = PF_ADDR_NONE;

usr.sbin/relayd/pfe_filter.c

447

rio.rule.rdr.addr.type = PF_ADDR_TABLE;

usr.sbin/relayd/pfe_filter.c

449

(void)strlcpy(rio.rule.rdr.ifname, t->conf.ifname,

usr.sbin/relayd/pfe_filter.c

450

sizeof(rio.rule.rdr.ifname));

usr.sbin/relayd/pfe_filter.c

451

if (strlcpy(rio.rule.rdr.addr.v.tblname, rdr->conf.name,

usr.sbin/relayd/pfe_filter.c

452

sizeof(rio.rule.rdr.addr.v.tblname)) >=

usr.sbin/relayd/pfe_filter.c

453

sizeof(rio.rule.rdr.addr.v.tblname))

usr.sbin/relayd/pfe_filter.c

458

rio.rule.rdr.proxy_port[0] =

usr.sbin/relayd/pfe_filter.c

460

rio.rule.rdr.port_op = PF_OP_EQ;

usr.sbin/relayd/pfe_filter.c

465

rio.rule.rdr.opts = PF_POOL_RANDOM;

usr.sbin/relayd/pfe_filter.c

468

rio.rule.rdr.opts = PF_POOL_ROUNDROBIN;

usr.sbin/relayd/pfe_filter.c

471

rio.rule.rdr.opts = PF_POOL_SRCHASH;

usr.sbin/relayd/pfe_filter.c

474

rio.rule.rdr.opts = PF_POOL_LEASTSTATES;

usr.sbin/relayd/pfe_filter.c

481

rio.rule.rdr.opts |= PF_POOL_STICKYADDR;

usr.sbin/relayd/pfe_filter.c

483

memcpy(rio.rule.rdr.key.key32, rdr->conf.key.data,

usr.sbin/relayd/pfe_filter.c

484

sizeof(rio.rule.rdr.key.key32));

usr.sbin/relayd/pfe_filter.c

486

if (rio.rule.rt == PF_ROUTETO) {

usr.sbin/relayd/pfe_filter.c

487

memcpy(&rio.rule.route, &rio.rule.rdr,

usr.sbin/relayd/pfe_filter.c

488

sizeof(rio.rule.route));

usr.sbin/relayd/pfe_filter.c

489

rio.rule.rdr.addr.type = PF_ADDR_NONE;

usr.sbin/relayd/relay.c

120

relay_ruledebug(struct relay_rule *rule)

usr.sbin/relayd/relay.c

128

switch (rule->rule_action) {

usr.sbin/relayd/relay.c

140

switch (rule->rule_dir) {

usr.sbin/relayd/relay.c

155

if (rule->rule_flags & RULE_FLAG_QUICK)

usr.sbin/relayd/relay.c

158

switch (rule->rule_af) {

usr.sbin/relayd/relay.c

167

if (rule->rule_src.addr.ss_family != AF_UNSPEC)

usr.sbin/relayd/relay.c

169

print_host(&rule->rule_src.addr, buf, sizeof(buf)),

usr.sbin/relayd/relay.c

170

rule->rule_src.addr_mask);

usr.sbin/relayd/relay.c

172

if (rule->rule_dst.addr.ss_family != AF_UNSPEC)

usr.sbin/relayd/relay.c

174

print_host(&rule->rule_dst.addr, buf, sizeof(buf)),

usr.sbin/relayd/relay.c

175

rule->rule_dst.addr_mask);

usr.sbin/relayd/relay.c

178

kv = &rule->rule_kv[i];

usr.sbin/relayd/relay.c

245

if (rule->rule_tablename[0])

usr.sbin/relayd/relay.c

246

fprintf(stderr, "forward to <%s> ", rule->rule_tablename);

usr.sbin/relayd/relay.c

248

if (rule->rule_tag == -1)

usr.sbin/relayd/relay.c

250

else if (rule->rule_tag && rule->rule_tagname[0])

usr.sbin/relayd/relay.c

252

rule->rule_tagname);

usr.sbin/relayd/relay.c

254

if (rule->rule_tagged && rule->rule_taggedname[0])

usr.sbin/relayd/relay.c

256

rule->rule_taggedname);

usr.sbin/relayd/relay.c

258

if (rule->rule_label == -1)

usr.sbin/relayd/relay.c

260

else if (rule->rule_label && rule->rule_labelname[0])

usr.sbin/relayd/relay.c

262

rule->rule_labelname);

usr.sbin/relayd/relay.c

271

struct relay_rule *rule = NULL;

usr.sbin/relayd/relay.c

299

rule = TAILQ_FIRST(&proto->rules);

usr.sbin/relayd/relay.c

300

while (rule != NULL) {

usr.sbin/relayd/relay.c

301

relay_ruledebug(rule);

usr.sbin/relayd/relay.c

302

rule = TAILQ_NEXT(rule, rule_entry);

usr.sbin/relayd/relay_http.c

1408

relay_httpquery_test(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1413

struct kv *kv = &rule->rule_kv[KEY_TYPE_QUERY];

usr.sbin/relayd/relay_http.c

1429

relay_httpheader_test(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1433

struct kv *kv = &rule->rule_kv[KEY_TYPE_HEADER];

usr.sbin/relayd/relay_http.c

1463

relay_httppath_test(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1467

struct kv *kv = &rule->rule_kv[KEY_TYPE_PATH];

usr.sbin/relayd/relay_http.c

1491

relay_httpurl_test(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1496

struct kv *kv = &rule->rule_kv[KEY_TYPE_URL];

usr.sbin/relayd/relay_http.c

1509

else if (rule->rule_action != RULE_ACTION_BLOCK &&

usr.sbin/relayd/relay_http.c

1521

relay_httpcookie_test(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1525

struct kv *kv = &rule->rule_kv[KEY_TYPE_COOKIE], key;

usr.sbin/relayd/relay_http.c

1565

relay_match_actions(struct ctl_relay_event *cre, struct relay_rule *rule,

usr.sbin/relayd/relay_http.c

1574

if (rule->rule_table != NULL) {

usr.sbin/relayd/relay_http.c

1575

*tbl = rule->rule_table;

usr.sbin/relayd/relay_http.c

1578

if (rule->rule_tag != 0)

usr.sbin/relayd/relay_http.c

1579

con->se_tag = rule->rule_tag == -1 ? 0 : rule->rule_tag;

usr.sbin/relayd/relay_http.c

1580

if (rule->rule_label != 0)

usr.sbin/relayd/relay_http.c

1581

con->se_label = rule->rule_label == -1 ? 0 : rule->rule_label;

usr.sbin/relayd/relay_http.c

1588

TAILQ_CONCAT(actions, &rule->rule_kvlist, kv_rule_entry);

usr.sbin/relayd/relay_http.c

1843

struct relay_rule *r = NULL, *rule = NULL;

usr.sbin/relayd/relay_http.c

1903

rule = r;

usr.sbin/relayd/relay_http.c

1907

TAILQ_INSERT_TAIL(&rule->rule_kvlist,

usr.sbin/relayd/relay_http.c

1911

if (rule->rule_flags & RULE_FLAG_QUICK)

usr.sbin/relayd/relay_http.c

1925

if (rule != NULL && relay_match_actions(cre, rule, NULL, &actions, &tbl)

usr.sbin/relayd/relayd.c

1013

rule_free(struct relay_rule *rule)

usr.sbin/relayd/relayd.c

1018

kv_free(&rule->rule_kv[i]);

usr.sbin/relayd/relayd.c

1019

if (rule->rule_label > 0)

usr.sbin/relayd/relayd.c

1020

label_unref(rule->rule_label);

usr.sbin/relayd/relayd.c

1021

if (rule->rule_tag > 0)

usr.sbin/relayd/relayd.c

1022

tag_unref(rule->rule_tag);

usr.sbin/relayd/relayd.c

1023

if (rule->rule_tagged > 0)

usr.sbin/relayd/relayd.c

1024

tag_unref(rule->rule_tagged);

usr.sbin/relayd/relayd.c

1028

rule_delete(struct relay_rules *rules, struct relay_rule *rule)

usr.sbin/relayd/relayd.c

1030

TAILQ_REMOVE(rules, rule, rule_entry);

usr.sbin/relayd/relayd.c

1031

rule_free(rule);

usr.sbin/relayd/relayd.c

1032

free(rule);

usr.sbin/relayd/relayd.c

897

rule_add(struct protocol *proto, struct relay_rule *rule, const char *rulefile)

usr.sbin/relayd/relayd.c

907

kv = &rule->rule_kv[i];

usr.sbin/relayd/relayd.c

926

if (rule->rule_dir != RELAY_DIR_REQUEST)

usr.sbin/relayd/relayd.c

940

TAILQ_INSERT_TAIL(&proto->rules, rule, rule_entry);

usr.sbin/relayd/relayd.c

953

if ((r = rule_inherit(rule)) == NULL)

usr.sbin/relayd/relayd.c

972

rule_free(rule);

usr.sbin/relayd/relayd.c

973

free(rule);

usr.sbin/relayd/relayd.c

982

rule_inherit(struct relay_rule *rule)

usr.sbin/relayd/relayd.c

990

memcpy(r, rule, sizeof(*r));

usr.sbin/relayd/relayd.c

993

kv = &rule->rule_kv[i];

usr.sbin/smtpd/aliases.c

40

dsp = dict_xget(env->sc_dispatchers, expand->rule->dispatcher);

usr.sbin/smtpd/aliases.c

95

dsp = dict_xget(env->sc_dispatchers, expand->rule->dispatcher);

usr.sbin/smtpd/config.c

228

struct rule *r;

usr.sbin/smtpd/expand.c

297

(void)snprintf(tmp, sizeof(tmp), ", rule=%p", e->rule);

usr.sbin/smtpd/expand.c

301

if (e->rule) {

usr.sbin/smtpd/expand.c

302

(void)snprintf(tmp, sizeof(tmp), ", dispatcher=%p", e->rule->dispatcher);

usr.sbin/smtpd/expand.c

55

node->rule = expand->rule;

usr.sbin/smtpd/expand.c

76

xn->rule = expand->rule;

usr.sbin/smtpd/lka_session.c

110

dsp = dict_get(env->sc_dispatchers, lks->rule->dispatcher);

usr.sbin/smtpd/lka_session.c

124

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

128

dsp = dict_get(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

131

lks->expand.rule = rule;

usr.sbin/smtpd/lka_session.c

155

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

185

lka_expand(lks, xn->rule, xn);

usr.sbin/smtpd/lka_session.c

242

lka_expand(struct lka_session *lks, struct rule *rule, struct expandnode *xn)

usr.sbin/smtpd/lka_session.c

300

rule = ruleset_match(&ep);

usr.sbin/smtpd/lka_session.c

301

if (rule == NULL || rule->reject) {

usr.sbin/smtpd/lka_session.c

307

dsp = dict_xget(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

309

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

313

lks->expand.rule = rule;

usr.sbin/smtpd/lka_session.c

339

lks->expand.rule = rule;

usr.sbin/smtpd/lka_session.c

341

xn->rule = rule;

usr.sbin/smtpd/lka_session.c

357

dsp = dict_xget(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

359

lks->expand.rule = rule;

usr.sbin/smtpd/lka_session.c

405

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

418

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

424

lks->rule = rule;

usr.sbin/smtpd/lka_session.c

43

struct rule *rule;

usr.sbin/smtpd/lka_session.c

447

dsp = dict_xget(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

455

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

459

dsp = dict_xget(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

47

static void lka_expand(struct lka_session *, struct rule *,

usr.sbin/smtpd/lka_session.c

481

dsp = dict_xget(env->sc_dispatchers, rule->dispatcher);

usr.sbin/smtpd/lka_session.c

489

lka_submit(lks, rule, xn);

usr.sbin/smtpd/lka_session.c

49

static void lka_submit(struct lka_session *, struct rule *,

usr.sbin/smtpd/lka_session.c

508

lka_submit(struct lka_session *lks, struct rule *rule, struct expandnode *xn)

usr.sbin/smtpd/lka_session.c

516

(void)strlcpy(ep->dispatcher, rule->dispatcher, sizeof ep->dispatcher);

usr.sbin/smtpd/lka_session.c

80

lks->expand.rule = NULL;

usr.sbin/smtpd/lka_session.c

91

struct rule *rule;

usr.sbin/smtpd/lka_session.c

97

rule = lks->rule;

usr.sbin/smtpd/parse.y

1041

if (rule->flag_tag) {

usr.sbin/smtpd/parse.y

1052

rule->flag_tag = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1053

rule->table_tag = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1059

if (rule->flag_tag) {

usr.sbin/smtpd/parse.y

1070

rule->flag_tag = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1071

rule->flag_tag_regex = 1;

usr.sbin/smtpd/parse.y

1072

rule->table_tag = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1078

if (rule->flag_smtp_helo) {

usr.sbin/smtpd/parse.y

1089

rule->flag_smtp_helo = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1090

rule->table_smtp_helo = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1095

if (rule->flag_smtp_helo) {

usr.sbin/smtpd/parse.y

1106

rule->flag_smtp_helo = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1107

rule->flag_smtp_helo_regex = 1;

usr.sbin/smtpd/parse.y

1108

rule->table_smtp_helo = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1111

if (rule->flag_smtp_starttls) {

usr.sbin/smtpd/parse.y

1115

rule->flag_smtp_starttls = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1118

if (rule->flag_smtp_auth) {

usr.sbin/smtpd/parse.y

1122

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1127

if (rule->flag_smtp_auth) {

usr.sbin/smtpd/parse.y

1138

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1139

rule->table_smtp_auth = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1144

if (rule->flag_smtp_auth) {

usr.sbin/smtpd/parse.y

1155

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1156

rule->flag_smtp_auth_regex = 1;

usr.sbin/smtpd/parse.y

1157

rule->table_smtp_auth = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1162

if (rule->flag_smtp_mail_from) {

usr.sbin/smtpd/parse.y

1173

rule->flag_smtp_mail_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1174

rule->table_smtp_mail_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1179

if (rule->flag_smtp_mail_from) {

usr.sbin/smtpd/parse.y

1190

rule->flag_smtp_mail_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1191

rule->flag_smtp_mail_from_regex = 1;

usr.sbin/smtpd/parse.y

1192

rule->table_smtp_mail_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1197

if (rule->flag_smtp_rcpt_to) {

usr.sbin/smtpd/parse.y

1208

rule->flag_smtp_rcpt_to = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1209

rule->table_smtp_rcpt_to = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1214

if (rule->flag_smtp_rcpt_to) {

usr.sbin/smtpd/parse.y

1225

rule->flag_smtp_rcpt_to = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1226

rule->flag_smtp_rcpt_to_regex = 1;

usr.sbin/smtpd/parse.y

1227

rule->table_smtp_rcpt_to = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1231

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1235

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1236

rule->flag_from_socket = 1;

usr.sbin/smtpd/parse.y

1241

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1245

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1246

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1251

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1255

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1256

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1261

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1272

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1273

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1278

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1289

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1290

rule->flag_from_regex = 1;

usr.sbin/smtpd/parse.y

1291

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1294

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1298

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1299

rule->flag_from_rdns = 1;

usr.sbin/smtpd/parse.y

1304

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1315

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1316

rule->flag_from_rdns = 1;

usr.sbin/smtpd/parse.y

1317

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1322

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1333

rule->flag_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1334

rule->flag_from_regex = 1;

usr.sbin/smtpd/parse.y

1335

rule->flag_from_rdns = 1;

usr.sbin/smtpd/parse.y

1336

rule->table_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1342

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1347

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1348

rule->table_from = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1349

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1355

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1366

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1367

rule->table_from = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1368

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1369

rule->table_smtp_auth = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1375

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1386

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1387

rule->table_from = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1388

rule->flag_smtp_auth = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1389

rule->flag_smtp_auth_regex = 1;

usr.sbin/smtpd/parse.y

1390

rule->table_smtp_auth = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1397

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1408

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1409

rule->table_from = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1410

rule->flag_smtp_mail_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1411

rule->table_smtp_mail_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1417

if (rule->flag_from) {

usr.sbin/smtpd/parse.y

1428

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1429

rule->table_from = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1430

rule->flag_smtp_mail_from = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1431

rule->flag_smtp_mail_from_regex = 1;

usr.sbin/smtpd/parse.y

1432

rule->table_smtp_mail_from = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1438

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1442

rule->flag_for = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1443

rule->table_for = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1448

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1452

rule->flag_for = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1453

rule->table_for = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1458

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1469

rule->flag_for = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1470

rule->table_for = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1475

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1486

rule->flag_for = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1487

rule->flag_for_regex = 1;

usr.sbin/smtpd/parse.y

1488

rule->table_for = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1494

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1505

rule->flag_for = 1;

usr.sbin/smtpd/parse.y

1506

rule->table_for = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1507

rule->flag_smtp_rcpt_to = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1508

rule->table_smtp_rcpt_to = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1514

if (rule->flag_for) {

usr.sbin/smtpd/parse.y

1525

rule->flag_for = 1;

usr.sbin/smtpd/parse.y

1526

rule->table_for = strdup(anyhost->t_name);

usr.sbin/smtpd/parse.y

1527

rule->flag_smtp_rcpt_to = $1 ? -1 : 1;

usr.sbin/smtpd/parse.y

1528

rule->flag_smtp_rcpt_to_regex = 1;

usr.sbin/smtpd/parse.y

1529

rule->table_smtp_rcpt_to = strdup(t->t_name);

usr.sbin/smtpd/parse.y

1544

rule->dispatcher = $1;

usr.sbin/smtpd/parse.y

1550

rule->reject = 1;

usr.sbin/smtpd/parse.y

1557

rule = xcalloc(1, sizeof *rule);

usr.sbin/smtpd/parse.y

1559

if (!rule->flag_from) {

usr.sbin/smtpd/parse.y

1560

rule->table_from = strdup("<localhost>");

usr.sbin/smtpd/parse.y

1561

rule->flag_from = 1;

usr.sbin/smtpd/parse.y

1563

if (!rule->flag_for) {

usr.sbin/smtpd/parse.y

1564

rule->table_for = strdup("<localnames>");

usr.sbin/smtpd/parse.y

1565

rule->flag_for = 1;

usr.sbin/smtpd/parse.y

1567

TAILQ_INSERT_TAIL(conf->sc_rules, rule, r_entry);

usr.sbin/smtpd/parse.y

1568

rule = NULL;

usr.sbin/smtpd/parse.y

95

struct rule *rule;

usr.sbin/smtpd/ruleset.c

111

ruleset_match_smtp_helo(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

130

ruleset_match_smtp_starttls(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

140

ruleset_match_smtp_auth(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

168

ruleset_match_smtp_mail_from(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

191

ruleset_match_smtp_rcpt_to(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

213

struct rule *

usr.sbin/smtpd/ruleset.c

216

struct rule *r;

usr.sbin/smtpd/ruleset.c

27

ruleset_match_tag(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

46

ruleset_match_from(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/ruleset.c

92

ruleset_match_to(struct rule *r, const struct envelope *evp)

usr.sbin/smtpd/smtpd.h

1222

TAILQ_ENTRY(rule) r_entry;

usr.sbin/smtpd/smtpd.h

1565

struct rule *ruleset_match(const struct envelope *);

usr.sbin/smtpd/smtpd.h

1674

const char *rule_to_text(struct rule *);

usr.sbin/smtpd/smtpd.h

433

struct rule *rule;

usr.sbin/smtpd/smtpd.h

452

struct rule *rule;

usr.sbin/smtpd/smtpd.h

606

TAILQ_HEAD(rulelist, rule) *sc_rules;

usr.sbin/smtpd/to.c

412

rule_to_text(struct rule *r)

usr.sbin/tcpdump/pf_print_state.c

308

if (s->rule != -1)

usr.sbin/tcpdump/pf_print_state.c

309

printf(", rule %u", ntohl(s->rule));

usr.sbin/tftp-proxy/filter.c

187

pfr.rule.af = src->sa_family;

usr.sbin/tftp-proxy/filter.c

188

pfr.rule.proto = proto;

usr.sbin/tftp-proxy/filter.c

189

pfr.rule.src.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/tftp-proxy/filter.c

190

pfr.rule.dst.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/tftp-proxy/filter.c

191

pfr.rule.rdr.addr.type = PF_ADDR_NONE;

usr.sbin/tftp-proxy/filter.c

192

pfr.rule.nat.addr.type = PF_ADDR_NONE;

usr.sbin/tftp-proxy/filter.c

195

memcpy(&pfr.rule.src.addr.v.a.addr.v4,

usr.sbin/tftp-proxy/filter.c

197

memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 4);

usr.sbin/tftp-proxy/filter.c

198

memcpy(&pfr.rule.dst.addr.v.a.addr.v4,

usr.sbin/tftp-proxy/filter.c

200

memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 4);

usr.sbin/tftp-proxy/filter.c

202

memcpy(&pfr.rule.src.addr.v.a.addr.v6,

usr.sbin/tftp-proxy/filter.c

204

memset(&pfr.rule.src.addr.v.a.mask.addr8, 255, 16);

usr.sbin/tftp-proxy/filter.c

205

memcpy(&pfr.rule.dst.addr.v.a.addr.v6,

usr.sbin/tftp-proxy/filter.c

207

memset(&pfr.rule.dst.addr.v.a.mask.addr8, 255, 16);

usr.sbin/tftp-proxy/filter.c

209

pfr.rule.dst.port_op = PF_OP_EQ;

usr.sbin/tftp-proxy/filter.c

210

pfr.rule.dst.port[0] = htons(d_port);

usr.sbin/tftp-proxy/filter.c

212

pfr.rule.rule_flag = PFRULE_ONCE;

usr.sbin/tftp-proxy/filter.c

214

pfr.rule.action = PF_PASS;

usr.sbin/tftp-proxy/filter.c

215

pfr.rule.quick = 1;

usr.sbin/tftp-proxy/filter.c

216

pfr.rule.log = rule_log;

usr.sbin/tftp-proxy/filter.c

217

pfr.rule.keep_state = 1;

usr.sbin/tftp-proxy/filter.c

218

pfr.rule.flags = (proto == IPPROTO_TCP ? TH_SYN : 0);

usr.sbin/tftp-proxy/filter.c

219

pfr.rule.flagset = (proto == IPPROTO_TCP ?

usr.sbin/tftp-proxy/filter.c

222

pfr.rule.max_states = 1;

usr.sbin/tftp-proxy/filter.c

225

strlcpy(pfr.rule.qname, qname, sizeof pfr.rule.qname);

usr.sbin/tftp-proxy/filter.c

68

pfr.rule.direction = dir;

usr.sbin/tftp-proxy/filter.c

88

pfr.rule.rdr.addr.type = PF_ADDR_ADDRMASK;

usr.sbin/tftp-proxy/filter.c

90

memcpy(&pfr.rule.rdr.addr.v.a.addr.v4,

usr.sbin/tftp-proxy/filter.c

92

memset(&pfr.rule.rdr.addr.v.a.mask.addr8, 255, 4);

usr.sbin/tftp-proxy/filter.c

94

memcpy(&pfr.rule.rdr.addr.v.a.addr.v6,

usr.sbin/tftp-proxy/filter.c

96

memset(&pfr.rule.rdr.addr.v.a.mask.addr8, 255, 16);

usr.sbin/tftp-proxy/filter.c

99

pfr.rule.rdr.proxy_port[0] = rdr_port;

usr.sbin/zic/zic.c

102

struct rule z_untilrule;

usr.sbin/zic/zic.c

1139

rulesub(struct rule * const rp, const char * const loyearp,

usr.sbin/zic/zic.c

127

static zic_t rpytime(const struct rule *rp, zic_t wantedy);

usr.sbin/zic/zic.c

128

static void rulesub(struct rule *rp, const char *loyearp, const char *hiyearp,

usr.sbin/zic/zic.c

1738

stringrule(char *result, size_t size, const struct rule *rp, zic_t dstoff,

usr.sbin/zic/zic.c

1813

rule_cmp(struct rule const *a, struct rule const *b)

usr.sbin/zic/zic.c

1832

struct rule *rp, *stdrp, *dstrp;

usr.sbin/zic/zic.c

1836

struct rule stdr, dstr;

usr.sbin/zic/zic.c

1863

struct rule *stdabbrrp = NULL;

usr.sbin/zic/zic.c

1945

struct rule *rp;

usr.sbin/zic/zic.c

2219

struct rule xr;

usr.sbin/zic/zic.c

239

static struct rule *rules;

usr.sbin/zic/zic.c

2498

rpytime(const struct rule *rp, zic_t wantedy)

usr.sbin/zic/zic.c

659

return strcmp(((const struct rule *) cp1)->r_name,

usr.sbin/zic/zic.c

660

((const struct rule *) cp2)->r_name);

usr.sbin/zic/zic.c

667

struct rule *rp;

usr.sbin/zic/zic.c

863

static struct rule r;

usr.sbin/zic/zic.c

99

struct rule *z_rules;