Differential D46588 Diff 143484 sbin/pfctl/parse.y

Changeset View

Standalone View

sbin/pfctl/parse.y

Show First 20 Lines • Show All 501 Lines • ▼ Show 20 Lines
%token PASS BLOCK MATCH SCRUB RETURN IN OS OUT LOG QUICK ON FROM TO FLAGS		%token PASS BLOCK MATCH SCRUB RETURN IN OS OUT LOG QUICK ON FROM TO FLAGS
%token RETURNRST RETURNICMP RETURNICMP6 PROTO INET INET6 ALL ANY ICMPTYPE		%token RETURNRST RETURNICMP RETURNICMP6 PROTO INET INET6 ALL ANY ICMPTYPE
%token ICMP6TYPE CODE KEEP MODULATE STATE PORT RDR NAT BINAT ARROW NODF		%token ICMP6TYPE CODE KEEP MODULATE STATE PORT RDR NAT BINAT ARROW NODF
%token MINTTL ERROR ALLOWOPTS FASTROUTE FILENAME ROUTETO DUPTO REPLYTO NO LABEL		%token MINTTL ERROR ALLOWOPTS FASTROUTE FILENAME ROUTETO DUPTO REPLYTO NO LABEL
%token NOROUTE URPFFAILED FRAGMENT USER GROUP MAXMSS MAXIMUM TTL TOS DROP TABLE		%token NOROUTE URPFFAILED FRAGMENT USER GROUP MAXMSS MAXIMUM TTL TOS DROP TABLE
%token REASSEMBLE ANCHOR NATANCHOR RDRANCHOR BINATANCHOR		%token REASSEMBLE ANCHOR NATANCHOR RDRANCHOR BINATANCHOR
%token SET OPTIMIZATION TIMEOUT LIMIT LOGINTERFACE BLOCKPOLICY FAILPOLICY		%token SET OPTIMIZATION TIMEOUT LIMIT LOGINTERFACE BLOCKPOLICY FAILPOLICY
%token RANDOMID REQUIREORDER SYNPROXY FINGERPRINTS NOSYNC DEBUG SKIP HOSTID		%token RANDOMID REQUIREORDER SYNPROXY FINGERPRINTS NOSYNC DEBUG SKIP HOSTID
%token ANTISPOOF FOR INCLUDE KEEPCOUNTERS SYNCOOKIES L3		%token ANTISPOOF FOR INCLUDE KEEPCOUNTERS SYNCOOKIES L3 MATCHES
%token ETHER		%token ETHER
%token BITMASK RANDOM SOURCEHASH ROUNDROBIN STATICPORT PROBABILITY MAPEPORTSET		%token BITMASK RANDOM SOURCEHASH ROUNDROBIN STATICPORT PROBABILITY MAPEPORTSET
%token ALTQ CBQ CODEL PRIQ HFSC FAIRQ BANDWIDTH TBRSIZE LINKSHARE REALTIME		%token ALTQ CBQ CODEL PRIQ HFSC FAIRQ BANDWIDTH TBRSIZE LINKSHARE REALTIME
%token UPPERLIMIT QUEUE PRIORITY QLIMIT HOGS BUCKETS RTABLE TARGET INTERVAL		%token UPPERLIMIT QUEUE PRIORITY QLIMIT HOGS BUCKETS RTABLE TARGET INTERVAL
%token DNPIPE DNQUEUE RIDENTIFIER		%token DNPIPE DNQUEUE RIDENTIFIER
%token LOAD RULESET_OPTIMIZATION PRIO		%token LOAD RULESET_OPTIMIZATION PRIO
%token STICKYADDRESS ENDPI MAXSRCSTATES MAXSRCNODES SOURCETRACK GLOBAL RULE		%token STICKYADDRESS ENDPI MAXSRCSTATES MAXSRCNODES SOURCETRACK GLOBAL RULE
%token MAXSRCCONN MAXSRCCONNRATE OVERLOAD FLUSH SLOPPY PFLOW		%token MAXSRCCONN MAXSRCCONNRATE OVERLOAD FLUSH SLOPPY PFLOW
▲ Show 20 Lines • Show All 2,698 Lines • ▼ Show 20 Lines	\| logopts comma logopt {
$$.log = $1.log \| $3.log;		$$.log = $1.log \| $3.log;
$$.logif = $3.logif;		$$.logif = $3.logif;
if ($$.logif == 0)		if ($$.logif == 0)
$$.logif = $1.logif;		$$.logif = $1.logif;
}		}
;		;

logopt : ALL { $$.log = PF_LOG_ALL; $$.logif = 0; }		logopt : ALL { $$.log = PF_LOG_ALL; $$.logif = 0; }
		\| MATCHES { $$.log = PF_LOG_MATCHES; $$.logif = 0; }
\| USER { $$.log = PF_LOG_SOCKET_LOOKUP; $$.logif = 0; }		\| USER { $$.log = PF_LOG_SOCKET_LOOKUP; $$.logif = 0; }
\| GROUP { $$.log = PF_LOG_SOCKET_LOOKUP; $$.logif = 0; }		\| GROUP { $$.log = PF_LOG_SOCKET_LOOKUP; $$.logif = 0; }
\| TO string {		\| TO string {
const char *errstr;		const char *errstr;
u_int i;		u_int i;

$$.log = 0;		$$.log = 0;
if (strncmp($2, "pflog", 5)) {		if (strncmp($2, "pflog", 5)) {
▲ Show 20 Lines • Show All 3,127 Lines • ▼ Show 20 Lines	static const struct keywords keywords[] = {
{ "label", LABEL},		{ "label", LABEL},
{ "limit", LIMIT},		{ "limit", LIMIT},
{ "linkshare", LINKSHARE},		{ "linkshare", LINKSHARE},
{ "load", LOAD},		{ "load", LOAD},
{ "log", LOG},		{ "log", LOG},
{ "loginterface", LOGINTERFACE},		{ "loginterface", LOGINTERFACE},
{ "map-e-portset", MAPEPORTSET},		{ "map-e-portset", MAPEPORTSET},
{ "match", MATCH},		{ "match", MATCH},
		{ "matches", MATCHES},
{ "max", MAXIMUM},		{ "max", MAXIMUM},
{ "max-mss", MAXMSS},		{ "max-mss", MAXMSS},
{ "max-src-conn", MAXSRCCONN},		{ "max-src-conn", MAXSRCCONN},
{ "max-src-conn-rate", MAXSRCCONNRATE},		{ "max-src-conn-rate", MAXSRCCONNRATE},
{ "max-src-nodes", MAXSRCNODES},		{ "max-src-nodes", MAXSRCNODES},
{ "max-src-states", MAXSRCSTATES},		{ "max-src-states", MAXSRCSTATES},
{ "min-ttl", MINTTL},		{ "min-ttl", MINTTL},
{ "modulate", MODULATE},		{ "modulate", MODULATE},
▲ Show 20 Lines • Show All 936 Lines • Show Last 20 Lines