1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause
37     and destination addresses.  For UDP and TCP, it also stores
60 	  or unspecified remote addresses.
100 	(192.168.0.1, port 23)  <-> alias port 6002, unknown dest addr/port
102 	(192.168.0.2, port 21)  <-> alias port 3604, known dest addr
107 	user-chosen amount of specificity, with increasing specificity
122 	multiple external addresses rather than just a single
160 /* When the link has been used and closed - minimal grace time to
161    allow ACKs and potential re-connect in FTP (XXX - is this allowed?)  */
166 /* When the link has been used and closed on one side - the other side
201     with the 16-bit ID number of the ICMP packet.
217     endpoint-independent mapping, and indexes on source address,
231 	int		in;	/* State for outside -> inside */
232 	int		out;	/* State for inside  -> outside */
280 	int		pflags;	/* protocol-specific flags */
285 #define LINK_PARTIALLY_SPECIFIED   0x03	/* logical-or of first two bits */
321     StartPointIn()           -- link table initial search point for
323     StartPointOut()          -- link table initial search point for
327     SeqDiff()                -- difference between two TCP sequences
328     ShowAliasStats()         -- send alias statistics to a monitor file
355 	int i = a->src_port - b->src_port;  in cmp_out()
357 	if (a->src_addr.s_addr > b->src_addr.s_addr) return (1);  in cmp_out()
358 	if (a->src_addr.s_addr < b->src_addr.s_addr) return (-1);  in cmp_out()
359 	if (a->dst_addr.s_addr > b->dst_addr.s_addr) return (1);  in cmp_out()
360 	if (a->dst_addr.s_addr < b->dst_addr.s_addr) return (-1);  in cmp_out()
361 	i = a->dst_port - b->dst_port;  in cmp_out()
363 	i = a->link_type - b->link_type;  in cmp_out()
370 	int i = a->alias_port - b->alias_port;  in cmp_in()
372 	i = a->link_type - b->link_type;  in cmp_in()
374 	if (a->alias_addr.s_addr > b->alias_addr.s_addr) return (1);  in cmp_in()
375 	if (a->alias_addr.s_addr < b->alias_addr.s_addr) return (-1);  in cmp_in()
382 	int i = a->link_type - b->link_type;  in cmp_internal_endpoint()
384 	if (a->src_addr.s_addr > b->src_addr.s_addr) return (1);  in cmp_internal_endpoint()
385 	if (a->src_addr.s_addr < b->src_addr.s_addr) return (-1);  in cmp_internal_endpoint()
386 	i = a->src_port - b->src_port;  in cmp_internal_endpoint()
395     GetNewPort()                 -- find and reserve new alias port number
396     GetSocket()                  -- try to allocate a socket for a given port
399     CleanupAliasData()           - remove all link chains from lookup table
400     CleanupLink()                - look for a stale link
401     DeleteLink()                 - remove link
402     AddLink()                    - add link
403     ReLink()                     - change link
406     FindLinkOut()                - find link for outgoing packets
407     FindLinkIn()                 - find link for incoming packets
408     FindLinkByInternalEndpoint() - find link by a packet's internal endpoint
411     FindNewPortGroup()           - find an available group of ports
448 #define fw_setfield(la, field, num)			\  argument
450     (field)[(num) - la->fireWallBaseNum] = 1;		\
451 } /*lint -save -e717 */ while(0)/* lint -restore */
453 #define fw_clrfield(la, field, num)			\  argument
455     (field)[(num) - la->fireWallBaseNum] = 0;		\
456 } /*lint -save -e717 */ while(0)/* lint -restore */
458 #define fw_tstfield(la, field, num) ((field)[(num) - la->fireWallBaseNum])  argument