1 /* $OpenBSD: pfctl.h,v 1.42 2007/12/05 12:01:47 chl Exp $ */ 2 3 /*- 4 * SPDX-License-Identifier: BSD-2-Clause 5 * 6 * Copyright (c) 2001 Daniel Hartmeier 7 * All rights reserved. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions 11 * are met: 12 * 13 * - Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * - Redistributions in binary form must reproduce the above 16 * copyright notice, this list of conditions and the following 17 * disclaimer in the documentation and/or other materials provided 18 * with the distribution. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 21 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 22 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 23 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 24 * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 25 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 26 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 27 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 28 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN 30 * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 31 * POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34 #ifndef _PFCTL_H_ 35 #define _PFCTL_H_ 36 37 #include <libpfctl.h> 38 39 extern struct pfctl_handle *pfh; 40 41 struct pfctl; 42 43 enum pfctl_show { PFCTL_SHOW_RULES, PFCTL_SHOW_LABELS, PFCTL_SHOW_NOTHING }; 44 45 enum { PFRB_TABLES = 1, PFRB_TSTATS, PFRB_ADDRS, PFRB_ASTATS, 46 PFRB_IFACES, PFRB_TRANS, PFRB_MAX }; 47 struct pfr_buffer { 48 int pfrb_type; /* type of content, see enum above */ 49 int pfrb_size; /* number of objects in buffer */ 50 int pfrb_msize; /* maximum number of objects in buffer */ 51 void *pfrb_caddr; /* malloc'ated memory area */ 52 }; 53 #define PFRB_FOREACH(var, buf) \ 54 for ((var) = pfr_buf_next((buf), NULL); \ 55 (var) != NULL; \ 56 (var) = pfr_buf_next((buf), (var))) 57 58 struct pfr_anchoritem { 59 SLIST_ENTRY(pfr_anchoritem) pfra_sle; 60 char *pfra_anchorname; 61 }; 62 63 SLIST_HEAD(pfr_anchors, pfr_anchoritem); 64 65 int pfr_get_fd(void); 66 int pfr_add_table(struct pfr_table *, int *, int); 67 int pfr_del_table(struct pfr_table *, int *, int); 68 int pfr_get_tables(struct pfr_table *, struct pfr_table *, int *, int); 69 int pfr_clr_astats(struct pfr_table *, struct pfr_addr *, int, int *, int); 70 int pfr_clr_addrs(struct pfr_table *, int *, int); 71 int pfr_add_addrs(struct pfr_table *, struct pfr_addr *, int, int *, int); 72 int pfr_del_addrs(struct pfr_table *, struct pfr_addr *, int, int *, int); 73 int pfr_set_addrs(struct pfr_table *, struct pfr_addr *, int, int *, 74 int *, int *, int *, int); 75 int pfr_get_addrs(struct pfr_table *, struct pfr_addr *, int *, int); 76 int pfr_get_astats(struct pfr_table *, struct pfr_astats *, int *, int); 77 int pfr_tst_addrs(struct pfr_table *, struct pfr_addr *, int, int *, int); 78 int pfr_ina_define(struct pfr_table *, struct pfr_addr *, int, int *, 79 int *, int, int); 80 void pfr_buf_clear(struct pfr_buffer *); 81 int pfr_buf_add(struct pfr_buffer *, const void *); 82 void *pfr_buf_next(struct pfr_buffer *, const void *); 83 int pfr_buf_grow(struct pfr_buffer *, int); 84 int pfr_buf_load(struct pfr_buffer *, char *, int, 85 int (*)(struct pfr_buffer *, char *, int, int), int); 86 char *pf_strerror(int); 87 int pfi_get_ifaces(const char *, struct pfi_kif *, int *); 88 int pfi_clr_istats(const char *, int *, int); 89 90 void pfctl_print_title(char *); 91 int pfctl_do_clear_tables(const char *, int); 92 void pfctl_show_tables(const char *, int); 93 int pfctl_table(int, char *[], char *, const char *, char *, 94 const char *, int); 95 int pfctl_show_altq(int, const char *, int, int); 96 void warn_duplicate_tables(const char *, const char *); 97 void pfctl_show_ifaces(const char *, int); 98 void pfctl_show_creators(int); 99 FILE *pfctl_fopen(const char *, const char *); 100 101 #ifdef __FreeBSD__ 102 extern int altqsupport; 103 extern int dummynetsupport; 104 #define HTONL(x) (x) = htonl((__uint32_t)(x)) 105 #endif 106 107 #ifndef DEFAULT_PRIORITY 108 #define DEFAULT_PRIORITY 1 109 #endif 110 111 #ifndef DEFAULT_QLIMIT 112 #define DEFAULT_QLIMIT 50 113 #endif 114 115 /* 116 * generalized service curve used for admission control 117 */ 118 struct segment { 119 LIST_ENTRY(segment) _next; 120 double x, y, d, m; 121 }; 122 123 extern int loadopt; 124 125 int check_commit_altq(int, int); 126 void pfaltq_store(struct pf_altq *); 127 char *rate2str(double); 128 129 void print_addr(struct pf_addr_wrap *, sa_family_t, int); 130 void print_addr_str(sa_family_t, struct pf_addr *); 131 void print_host(struct pf_addr *, u_int16_t p, sa_family_t, int); 132 void print_seq(struct pfctl_state_peer *); 133 void print_state(struct pfctl_state *, int); 134 135 int pfctl_cmdline_symset(char *); 136 int pfctl_add_trans(struct pfr_buffer *, int, const char *); 137 u_int32_t 138 pfctl_get_ticket(struct pfr_buffer *, int, const char *); 139 int pfctl_trans(int, struct pfr_buffer *, u_long, int); 140 141 int pf_get_ruleset_number(u_int8_t); 142 void pf_init_ruleset(struct pfctl_ruleset *); 143 int pfctl_anchor_setup(struct pfctl_rule *, 144 const struct pfctl_ruleset *, const char *); 145 void pf_remove_if_empty_ruleset(struct pfctl_ruleset *); 146 struct pfctl_ruleset *pf_find_ruleset(const char *); 147 struct pfctl_ruleset *pf_find_or_create_ruleset(const char *); 148 void pf_init_eth_ruleset(struct pfctl_eth_ruleset *); 149 int pfctl_eth_anchor_setup(struct pfctl *, 150 struct pfctl_eth_rule *, 151 const struct pfctl_eth_ruleset *, const char *); 152 struct pfctl_eth_ruleset *pf_find_or_create_eth_ruleset(const char *); 153 void pf_remove_if_empty_eth_ruleset( 154 struct pfctl_eth_ruleset *); 155 156 void expand_label(char *, size_t, struct pfctl_rule *); 157 158 const char *pfctl_proto2name(int); 159 160 void pfctl_err(int, int, const char *, ...); 161 void pfctl_errx(int, int, const char *, ...); 162 163 #endif /* _PFCTL_H_ */ 164