aboutsummaryrefslogtreecommitdiff
path: root/sys/contrib/ipfilter/netinet/ip_rules.c
diff options
context:
space:
mode:
Diffstat (limited to 'sys/contrib/ipfilter/netinet/ip_rules.c')
-rw-r--r--sys/contrib/ipfilter/netinet/ip_rules.c270
1 files changed, 0 insertions, 270 deletions
diff --git a/sys/contrib/ipfilter/netinet/ip_rules.c b/sys/contrib/ipfilter/netinet/ip_rules.c
deleted file mode 100644
index fcf6923adeb3..000000000000
--- a/sys/contrib/ipfilter/netinet/ip_rules.c
+++ /dev/null
@@ -1,270 +0,0 @@
-/* $FreeBSD$ */
-
-/*
-* Copyright (C) 2012 by Darren Reed.
-*
-* Redistribution and use in source and binary forms are permitted
-* provided that this notice is preserved and due credit is given
-* to the original author and the contributors.
-*/
-
-#include <sys/param.h>
-#include <sys/types.h>
-#include <sys/time.h>
-#include <sys/socket.h>
-#if defined(__FreeBSD__)
-# if defined(_KERNEL)
-# include <sys/libkern.h>
-# else
-# include <sys/unistd.h>
-# endif
-#else
-# include <sys/systm.h>
-#endif
-#include <sys/errno.h>
-#include <sys/param.h>
-#if !defined(__SVR4)
-# include <sys/mbuf.h>
-#endif
-#if defined(__FreeBSD__)
-# include <sys/sockio.h>
-#if defined(_KERNEL)
-#include <net/vnet.h>
-#else
-#define CURVNET_SET(arg)
-#define CURVNET_RESTORE()
-#define VNET_DEFINE(_t, _v) _t _v
-#define VNET_DECLARE(_t, _v) extern _t _v
-#define VNET(arg) arg
-#endif
-#else
-# include <sys/ioctl.h>
-#endif /* FreeBSD */
-#include <net/if.h>
-#include <netinet/in.h>
-#include <netinet/in_systm.h>
-#include <netinet/ip.h>
-#include <netinet/tcp.h>
-#include "netinet/ip_compat.h"
-#include "netinet/ip_fil.h"
-
-#include "netinet/ip_rules.h"
-
-#ifndef _KERNEL
-# include <string.h>
-#endif /* _KERNEL */
-
-#ifdef IPFILTER_COMPILED
-
-VNET_DECLARE(ipf_main_softc_t, ipfmain);
-#define V_ipfmain VNET(ipfmain)
-
-
-static u_long in_rule__0[] = {
-0, 0, 0, 0, 0, 0, 0, 0x8070d88, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0x1b0, 0x1, 0, 0, 0, 0x2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0x40000000, 0x8002, 0, 0, 0, 0xffff, 0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0
-};
-
-static u_long out_rule__0[] = {
-0, 0, 0, 0, 0, 0, 0, 0x8070d88, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0x1b0, 0x1, 0, 0, 0, 0x3, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0x40000000, 0x4002, 0, 0, 0, 0xffff, 0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xffffffff, 0, 0, 0, 0
-};
-
-frentry_t *ipf_rules_in_[1] = {
- (frentry_t *)&in_rule__0
-};
-
-/* XXX This file (ip_rules.c) is not part of the ipfilter tarball, it is
- XXX generated by the ipfilter build process. Unfortunately the build
- XXX process did not generate the following lines so they are added
- XXX by hand here. This is a bit of a hack but it works for now. Future
- XXX imports/merges of ipfilter may generate this so the following will
- XXX need to be removed following some future merge.
- XXX */
-frentry_t *ipf_rules_out_[1] = {
- (frentry_t *)&out_rule__0
-};
-
-frentry_t *ipfrule_match_in_(fin, passp)
-fr_info_t *fin;
-u_32_t *passp;
-{
- frentry_t *fr = NULL;
-
- fr = (frentry_t *)&in_rule__0;
- return fr;
-}
-
-frentry_t *ipfrule_match_out_(fin, passp)
-fr_info_t *fin;
-u_32_t *passp;
-{
- frentry_t *fr = NULL;
-
- fr = (frentry_t *)&out_rule__0;
- return fr;
-}
-static frentry_t ipfrule_out_;
-
-int ipfrule_add_out_()
-{
- int i, j, err = 0, max;
- frentry_t *fp;
-
- max = sizeof(ipf_rules_out_)/sizeof(frentry_t *);
- for (i = 0; i < max; i++) {
- fp = ipf_rules_out_[i];
- fp->fr_next = NULL;
- for (j = i + 1; j < max; j++)
- if (strncmp(fp->fr_names + fp->fr_group,
- ipf_rules_out_[j]->fr_names +
- ipf_rules_out_[j]->fr_group,
- FR_GROUPLEN) == 0) {
- if (ipf_rules_out_[j] != NULL)
- ipf_rules_out_[j]->fr_pnext =
- &fp->fr_next;
- fp->fr_pnext = &ipf_rules_out_[j];
- fp->fr_next = ipf_rules_out_[j];
- break;
- }
- }
-
- fp = &ipfrule_out_;
- bzero((char *)fp, sizeof(*fp));
- fp->fr_type = FR_T_CALLFUNC_BUILTIN;
- fp->fr_flags = FR_OUTQUE|FR_NOMATCH;
- fp->fr_data = (void *)ipf_rules_out_[0];
- fp->fr_dsize = sizeof(ipf_rules_out_[0]);
- fp->fr_family = AF_INET;
- fp->fr_func = (ipfunc_t)ipfrule_match_out_;
- err = frrequest(&V_ipfmain, IPL_LOGIPF, SIOCADDFR, (caddr_t)fp,
- V_ipfmain.ipf_active, 0);
- return err;
-}
-
-
-int ipfrule_remove_out_()
-{
- int err = 0, i;
- frentry_t *fp;
-
- /*
- * Try to remove the outbound rule.
- */
- if (ipfrule_out_.fr_ref > 0) {
- err = EBUSY;
- } else {
- i = sizeof(ipf_rules_out_)/sizeof(frentry_t *) - 1;
- for (; i >= 0; i--) {
- fp = ipf_rules_out_[i];
- if (fp->fr_ref > 1) {
- err = EBUSY;
- break;
- }
- }
- }
- if (err == 0)
- err = frrequest(&V_ipfmain, IPL_LOGIPF, SIOCDELFR,
- (caddr_t)&ipfrule_out_,
- V_ipfmain.ipf_active, 0);
- if (err)
- return err;
-
-
- return err;
-}
-static frentry_t ipfrule_in_;
-
-int ipfrule_add_in_()
-{
- int i, j, err = 0, max;
- frentry_t *fp;
-
- max = sizeof(ipf_rules_in_)/sizeof(frentry_t *);
- for (i = 0; i < max; i++) {
- fp = ipf_rules_in_[i];
- fp->fr_next = NULL;
- for (j = i + 1; j < max; j++)
- if (strncmp(fp->fr_names + fp->fr_group,
- ipf_rules_in_[j]->fr_names +
- ipf_rules_in_[j]->fr_group,
- FR_GROUPLEN) == 0) {
- if (ipf_rules_in_[j] != NULL)
- ipf_rules_in_[j]->fr_pnext =
- &fp->fr_next;
- fp->fr_pnext = &ipf_rules_in_[j];
- fp->fr_next = ipf_rules_in_[j];
- break;
- }
- }
-
- fp = &ipfrule_in_;
- bzero((char *)fp, sizeof(*fp));
- fp->fr_type = FR_T_CALLFUNC_BUILTIN;
- fp->fr_flags = FR_INQUE|FR_NOMATCH;
- fp->fr_data = (void *)ipf_rules_in_[0];
- fp->fr_dsize = sizeof(ipf_rules_in_[0]);
- fp->fr_family = AF_INET;
- fp->fr_func = (ipfunc_t)ipfrule_match_in_;
- err = frrequest(&V_ipfmain, IPL_LOGIPF, SIOCADDFR, (caddr_t)fp,
- V_ipfmain.ipf_active, 0);
- return err;
-}
-
-
-int ipfrule_remove_in_()
-{
- int err = 0, i;
- frentry_t *fp;
-
- /*
- * Try to remove the inbound rule.
- */
- if (ipfrule_in_.fr_ref > 0) {
- err = EBUSY;
- } else {
- i = sizeof(ipf_rules_in_)/sizeof(frentry_t *) - 1;
- for (; i >= 0; i--) {
- fp = ipf_rules_in_[i];
- if (fp->fr_ref > 1) {
- err = EBUSY;
- break;
- }
- }
- }
- if (err == 0)
- err = frrequest(&V_ipfmain, IPL_LOGIPF, SIOCDELFR,
- (caddr_t)&ipfrule_in_,
- V_ipfmain.ipf_active, 0);
- if (err)
- return err;
-
-
- return err;
-}
-
-int ipfrule_add()
-{
- int err;
-
- err = ipfrule_add_out_();
- if (err != 0)
- return err;
- err = ipfrule_add_in_();
- if (err != 0)
- return err;
- return 0;
-}
-
-
-int ipfrule_remove()
-{
- int err;
-
- err = ipfrule_remove_out_();
- if (err != 0)
- return err;
- err = ipfrule_remove_in_();
- if (err != 0)
- return err;
- return 0;
-}
-#endif /* IPFILTER_COMPILED */
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-24 03:26:55 +0000