newrule 1345 net/pf_ioctl.c struct pf_rule *oldrule = NULL, *newrule = NULL; newrule 1388 net/pf_ioctl.c newrule = pool_get(&pf_rule_pl, PR_NOWAIT); newrule 1389 net/pf_ioctl.c if (newrule == NULL) { newrule 1393 net/pf_ioctl.c bcopy(&pcr->rule, newrule, sizeof(struct pf_rule)); newrule 1394 net/pf_ioctl.c newrule->cuid = p->p_cred->p_ruid; newrule 1395 net/pf_ioctl.c newrule->cpid = p->p_pid; newrule 1396 net/pf_ioctl.c TAILQ_INIT(&newrule->rpool.list); newrule 1398 net/pf_ioctl.c newrule->states = 0; newrule 1399 net/pf_ioctl.c newrule->entries.tqe_prev = NULL; newrule 1401 net/pf_ioctl.c if (newrule->af == AF_INET) { newrule 1402 net/pf_ioctl.c pool_put(&pf_rule_pl, newrule); newrule 1408 net/pf_ioctl.c if (newrule->af == AF_INET6) { newrule 1409 net/pf_ioctl.c pool_put(&pf_rule_pl, newrule); newrule 1414 net/pf_ioctl.c if (newrule->ifname[0]) { newrule 1415 net/pf_ioctl.c newrule->kif = pfi_kif_get(newrule->ifname); newrule 1416 net/pf_ioctl.c if (newrule->kif == NULL) { newrule 1417 net/pf_ioctl.c pool_put(&pf_rule_pl, newrule); newrule 1421 net/pf_ioctl.c pfi_kif_ref(newrule->kif, PFI_KIF_REF_RULE); newrule 1423 net/pf_ioctl.c newrule->kif = NULL; newrule 1425 net/pf_ioctl.c if (newrule->rtableid > 0 && newrule 1426 net/pf_ioctl.c !rtable_exists(newrule->rtableid)) newrule 1431 net/pf_ioctl.c if (newrule->qname[0] != 0) { newrule 1432 net/pf_ioctl.c if ((newrule->qid = newrule 1433 net/pf_ioctl.c pf_qname2qid(newrule->qname)) == 0) newrule 1435 net/pf_ioctl.c else if (newrule->pqname[0] != 0) { newrule 1436 net/pf_ioctl.c if ((newrule->pqid = newrule 1437 net/pf_ioctl.c pf_qname2qid(newrule->pqname)) == 0) newrule 1440 net/pf_ioctl.c newrule->pqid = newrule->qid; newrule 1443 net/pf_ioctl.c if (newrule->tagname[0]) newrule 1444 net/pf_ioctl.c if ((newrule->tag = newrule 1445 net/pf_ioctl.c pf_tagname2tag(newrule->tagname)) == 0) newrule 1447 net/pf_ioctl.c if (newrule->match_tagname[0]) newrule 1448 net/pf_ioctl.c if ((newrule->match_tag = pf_tagname2tag( newrule 1449 net/pf_ioctl.c newrule->match_tagname)) == 0) newrule 1451 net/pf_ioctl.c if (newrule->rt && !newrule->direction) newrule 1454 net/pf_ioctl.c if (!newrule->log) newrule 1455 net/pf_ioctl.c newrule->logif = 0; newrule 1456 net/pf_ioctl.c if (newrule->logif >= PFLOGIFS_MAX) newrule 1459 net/pf_ioctl.c if (pf_rtlabel_add(&newrule->src.addr) || newrule 1460 net/pf_ioctl.c pf_rtlabel_add(&newrule->dst.addr)) newrule 1462 net/pf_ioctl.c if (pfi_dynaddr_setup(&newrule->src.addr, newrule->af)) newrule 1464 net/pf_ioctl.c if (pfi_dynaddr_setup(&newrule->dst.addr, newrule->af)) newrule 1466 net/pf_ioctl.c if (pf_tbladdr_setup(ruleset, &newrule->src.addr)) newrule 1468 net/pf_ioctl.c if (pf_tbladdr_setup(ruleset, &newrule->dst.addr)) newrule 1470 net/pf_ioctl.c if (pf_anchor_setup(newrule, ruleset, pcr->anchor_call)) newrule 1476 net/pf_ioctl.c if (newrule->overload_tblname[0]) { newrule 1477 net/pf_ioctl.c if ((newrule->overload_tbl = pfr_attach_table( newrule 1478 net/pf_ioctl.c ruleset, newrule->overload_tblname)) == newrule 1482 net/pf_ioctl.c newrule->overload_tbl->pfrkt_flags |= newrule 1486 net/pf_ioctl.c pf_mv_pool(&pf_pabuf, &newrule->rpool.list); newrule 1487 net/pf_ioctl.c if (((((newrule->action == PF_NAT) || newrule 1488 net/pf_ioctl.c (newrule->action == PF_RDR) || newrule 1489 net/pf_ioctl.c (newrule->action == PF_BINAT) || newrule 1490 net/pf_ioctl.c (newrule->rt > PF_FASTROUTE)) && newrule 1491 net/pf_ioctl.c !newrule->anchor)) && newrule 1492 net/pf_ioctl.c (TAILQ_FIRST(&newrule->rpool.list) == NULL)) newrule 1496 net/pf_ioctl.c pf_rm_rule(NULL, newrule); newrule 1499 net/pf_ioctl.c newrule->rpool.cur = TAILQ_FIRST(&newrule->rpool.list); newrule 1500 net/pf_ioctl.c newrule->evaluations = 0; newrule 1501 net/pf_ioctl.c newrule->packets[0] = newrule->packets[1] = 0; newrule 1502 net/pf_ioctl.c newrule->bytes[0] = newrule->bytes[1] = 0; newrule 1518 net/pf_ioctl.c if (newrule != NULL) newrule 1519 net/pf_ioctl.c pf_rm_rule(NULL, newrule); newrule 1532 net/pf_ioctl.c newrule, entries); newrule 1535 net/pf_ioctl.c TAILQ_INSERT_BEFORE(oldrule, newrule, entries); newrule 1539 net/pf_ioctl.c oldrule, newrule, entries);