xref: /freebsd/sys/netpfil/pf/pf_nl.h (revision 25e0f8f99f544f5bb737b2c7709fe6ea572e37f0)
12cef6288SAlexander V. Chernikov /*-
22cef6288SAlexander V. Chernikov  * SPDX-License-Identifier: BSD-2-Clause
32cef6288SAlexander V. Chernikov  *
42cef6288SAlexander V. Chernikov  * Copyright (c) 2023 Alexander V. Chernikov <melifaro@FreeBSD.org>
52cef6288SAlexander V. Chernikov  * Copyright (c) 2023 Rubicon Communications, LLC (Netgate)
62cef6288SAlexander V. Chernikov  *
72cef6288SAlexander V. Chernikov  * Redistribution and use in source and binary forms, with or without
82cef6288SAlexander V. Chernikov  * modification, are permitted provided that the following conditions
92cef6288SAlexander V. Chernikov  * are met:
102cef6288SAlexander V. Chernikov  * 1. Redistributions of source code must retain the above copyright
112cef6288SAlexander V. Chernikov  *    notice, this list of conditions and the following disclaimer.
122cef6288SAlexander V. Chernikov  * 2. Redistributions in binary form must reproduce the above copyright
132cef6288SAlexander V. Chernikov  *    notice, this list of conditions and the following disclaimer in the
142cef6288SAlexander V. Chernikov  *    documentation and/or other materials provided with the distribution.
152cef6288SAlexander V. Chernikov  *
162cef6288SAlexander V. Chernikov  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
172cef6288SAlexander V. Chernikov  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
182cef6288SAlexander V. Chernikov  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
192cef6288SAlexander V. Chernikov  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
202cef6288SAlexander V. Chernikov  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
212cef6288SAlexander V. Chernikov  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
222cef6288SAlexander V. Chernikov  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
232cef6288SAlexander V. Chernikov  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
242cef6288SAlexander V. Chernikov  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
252cef6288SAlexander V. Chernikov  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
262cef6288SAlexander V. Chernikov  * SUCH DAMAGE.
272cef6288SAlexander V. Chernikov  *
282cef6288SAlexander V. Chernikov  */
292cef6288SAlexander V. Chernikov 
302cef6288SAlexander V. Chernikov #ifndef _NETPFIL_PF_PF_NL_H_
312cef6288SAlexander V. Chernikov #define _NETPFIL_PF_PF_NL_H_
322cef6288SAlexander V. Chernikov 
332cef6288SAlexander V. Chernikov /* Genetlink family */
342cef6288SAlexander V. Chernikov #define PFNL_FAMILY_NAME	"pfctl"
352cef6288SAlexander V. Chernikov 
362cef6288SAlexander V. Chernikov /* available commands */
372cef6288SAlexander V. Chernikov enum {
382cef6288SAlexander V. Chernikov 	PFNL_CMD_UNSPEC = 0,
392cef6288SAlexander V. Chernikov 	PFNL_CMD_GETSTATES = 1,
40a7191e5dSKristof Provost 	PFNL_CMD_GETCREATORS = 2,
4181647eb6SKristof Provost 	PFNL_CMD_START = 3,
4281647eb6SKristof Provost 	PFNL_CMD_STOP = 4,
43ffbf2595SKristof Provost 	PFNL_CMD_ADDRULE = 5,
4444f323ecSKristof Provost 	PFNL_CMD_GETRULES = 6,
45777a4702SKristof Provost 	PFNL_CMD_GETRULE = 7,
46706d465dSKristof Provost 	PFNL_CMD_CLRSTATES = 8,
47706d465dSKristof Provost 	PFNL_CMD_KILLSTATES = 9,
48470a2b33SKristof Provost 	PFNL_CMD_SET_STATUSIF = 10,
495824df8dSKristof Provost 	PFNL_CMD_GET_STATUS = 11,
509dbbe68bSKristof Provost 	PFNL_CMD_CLEAR_STATUS = 12,
5171d3c704SKristof Provost 	PFNL_CMD_NATLOOK = 13,
52c36c90a2SKristof Provost 	PFNL_CMD_SET_DEBUG = 14,
5330bad751SKristof Provost 	PFNL_CMD_SET_TIMEOUT = 15,
5430bad751SKristof Provost 	PFNL_CMD_GET_TIMEOUT = 16,
55d9ab8999SKristof Provost 	PFNL_CMD_SET_LIMIT = 17,
56d9ab8999SKristof Provost 	PFNL_CMD_GET_LIMIT = 18,
57ba2a9207SKristof Provost 	PFNL_CMD_BEGIN_ADDRS = 19,
58d909f06bSKristof Provost 	PFNL_CMD_ADD_ADDR = 20,
59644b7b5aSKristof Provost 	PFNL_CMD_GET_ADDRS = 21,
609ae91f59SKristof Provost 	PFNL_CMD_GET_ADDR = 22,
61*25e0f8f9SKristof Provost 	PFNL_CMD_GET_RULESETS = 23,
622cef6288SAlexander V. Chernikov 	__PFNL_CMD_MAX,
632cef6288SAlexander V. Chernikov };
642cef6288SAlexander V. Chernikov #define PFNL_CMD_MAX (__PFNL_CMD_MAX -1)
652cef6288SAlexander V. Chernikov 
662cef6288SAlexander V. Chernikov enum pfstate_key_type_t {
672cef6288SAlexander V. Chernikov 	PF_STK_UNSPEC,
682cef6288SAlexander V. Chernikov 	PF_STK_ADDR0		= 1, /* ip */
692cef6288SAlexander V. Chernikov 	PF_STK_ADDR1		= 2, /* ip */
702cef6288SAlexander V. Chernikov 	PF_STK_PORT0		= 3, /* u16 */
712cef6288SAlexander V. Chernikov 	PF_STK_PORT1		= 4, /* u16 */
722cef6288SAlexander V. Chernikov };
732cef6288SAlexander V. Chernikov 
742cef6288SAlexander V. Chernikov enum pfstate_peer_type_t {
752cef6288SAlexander V. Chernikov 	PF_STP_UNSPEC,
762cef6288SAlexander V. Chernikov 	PF_STP_PFSS_FLAGS	= 1, /* u16 */
772cef6288SAlexander V. Chernikov 	PF_STP_PFSS_TTL		= 2, /* u8 */
782cef6288SAlexander V. Chernikov 	PF_STP_SCRUB_FLAG	= 3, /* u8 */
792cef6288SAlexander V. Chernikov 	PF_STP_PFSS_TS_MOD	= 4, /* u32 */
802cef6288SAlexander V. Chernikov 	PF_STP_SEQLO		= 5, /* u32 */
812cef6288SAlexander V. Chernikov 	PF_STP_SEQHI		= 6, /* u32 */
822cef6288SAlexander V. Chernikov 	PF_STP_SEQDIFF		= 7, /* u32 */
832cef6288SAlexander V. Chernikov 	PF_STP_MAX_WIN		= 8, /* u16 */
842cef6288SAlexander V. Chernikov 	PF_STP_MSS		= 9, /* u16 */
852cef6288SAlexander V. Chernikov 	PF_STP_STATE		= 10, /* u8 */
862cef6288SAlexander V. Chernikov 	PF_STP_WSCALE		= 11, /* u8 */
872cef6288SAlexander V. Chernikov };
882cef6288SAlexander V. Chernikov 
892cef6288SAlexander V. Chernikov enum pfstate_type_t {
902cef6288SAlexander V. Chernikov 	PF_ST_UNSPEC,
912cef6288SAlexander V. Chernikov 	PF_ST_ID		= 1, /* u32, state id */
922cef6288SAlexander V. Chernikov 	PF_ST_CREATORID		= 2, /* u32, */
932cef6288SAlexander V. Chernikov 	PF_ST_IFNAME		= 3, /* string */
942cef6288SAlexander V. Chernikov 	PF_ST_ORIG_IFNAME	= 4, /* string */
952cef6288SAlexander V. Chernikov 	PF_ST_KEY_WIRE		= 5, /* nested, pfstate_key_type_t */
962cef6288SAlexander V. Chernikov 	PF_ST_KEY_STACK		= 6, /* nested, pfstate_key_type_t */
972cef6288SAlexander V. Chernikov 	PF_ST_PEER_SRC		= 7, /* nested, pfstate_peer_type_t*/
982cef6288SAlexander V. Chernikov 	PF_ST_PEER_DST		= 8, /* nested, pfstate_peer_type_t */
992cef6288SAlexander V. Chernikov 	PF_ST_RT_ADDR		= 9, /* ip */
1002cef6288SAlexander V. Chernikov 	PF_ST_RULE		= 10, /* u32 */
1012cef6288SAlexander V. Chernikov 	PF_ST_ANCHOR		= 11, /* u32 */
1022cef6288SAlexander V. Chernikov 	PF_ST_NAT_RULE		= 12, /* u32 */
1032cef6288SAlexander V. Chernikov 	PF_ST_CREATION		= 13, /* u32 */
1042cef6288SAlexander V. Chernikov 	PF_ST_EXPIRE		= 14, /* u32 */
1052cef6288SAlexander V. Chernikov 	PF_ST_PACKETS0		= 15, /* u64 */
1062cef6288SAlexander V. Chernikov 	PF_ST_PACKETS1		= 16, /* u64 */
1072cef6288SAlexander V. Chernikov 	PF_ST_BYTES0		= 17, /* u64 */
1082cef6288SAlexander V. Chernikov 	PF_ST_BYTES1		= 18, /* u64 */
1092cef6288SAlexander V. Chernikov 	PF_ST_AF		= 19, /* u8 */
1102cef6288SAlexander V. Chernikov 	PF_ST_PROTO		= 21, /* u8 */
1112cef6288SAlexander V. Chernikov 	PF_ST_DIRECTION		= 22, /* u8 */
1122cef6288SAlexander V. Chernikov 	PF_ST_LOG		= 23, /* u8 */
1132cef6288SAlexander V. Chernikov 	PF_ST_TIMEOUT		= 24, /* u8 */
1142cef6288SAlexander V. Chernikov 	PF_ST_STATE_FLAGS	= 25, /* u8 */
1152cef6288SAlexander V. Chernikov 	PF_ST_SYNC_FLAGS	= 26, /* u8 */
1162cef6288SAlexander V. Chernikov 	PF_ST_UPDATES		= 27, /* u8 */
1172cef6288SAlexander V. Chernikov 	PF_ST_VERSION		= 28, /* u64 */
118044eef6aSKristof Provost 	PF_ST_FILTER_ADDR	= 29, /* in6_addr */
119044eef6aSKristof Provost 	PF_ST_FILTER_MASK	= 30, /* in6_addr */
120881bf881SKristof Provost 	PF_ST_RTABLEID		= 31, /* i32 */
121881bf881SKristof Provost 	PF_ST_MIN_TTL		= 32, /* u8 */
122881bf881SKristof Provost 	PF_ST_MAX_MSS		= 33, /* u16 */
123881bf881SKristof Provost 	PF_ST_DNPIPE		= 34, /* u16 */
124881bf881SKristof Provost 	PF_ST_DNRPIPE		= 35, /* u16 */
125881bf881SKristof Provost 	PF_ST_RT		= 36, /* u8 */
126881bf881SKristof Provost 	PF_ST_RT_IFNAME		= 37, /* string */
1272cef6288SAlexander V. Chernikov };
1282cef6288SAlexander V. Chernikov 
129ffbf2595SKristof Provost enum pf_addr_type_t {
130ffbf2595SKristof Provost 	PF_AT_UNSPEC,
131ffbf2595SKristof Provost 	PF_AT_ADDR		= 1, /* in6_addr */
132ffbf2595SKristof Provost 	PF_AT_MASK		= 2, /* in6_addr */
133ffbf2595SKristof Provost 	PF_AT_IFNAME		= 3, /* string */
134ffbf2595SKristof Provost 	PF_AT_TABLENAME		= 4, /* string */
135ffbf2595SKristof Provost 	PF_AT_TYPE		= 5, /* u8 */
136ffbf2595SKristof Provost 	PF_AT_IFLAGS		= 6, /* u8 */
137777a4702SKristof Provost 	PF_AT_TBLCNT		= 7, /* u32 */
138777a4702SKristof Provost 	PF_AT_DYNCNT		= 8, /* u32 */
139ffbf2595SKristof Provost };
140ffbf2595SKristof Provost 
141ffbf2595SKristof Provost enum pfrule_addr_type_t {
142ffbf2595SKristof Provost 	PF_RAT_UNSPEC,
143ffbf2595SKristof Provost 	PF_RAT_ADDR		= 1, /* nested, pf_addr_type_t */
144ffbf2595SKristof Provost 	PF_RAT_SRC_PORT		= 2, /* u16 */
145ffbf2595SKristof Provost 	PF_RAT_DST_PORT		= 3, /* u16 */
146ffbf2595SKristof Provost 	PF_RAT_NEG		= 4, /* u8 */
147ffbf2595SKristof Provost 	PF_RAT_OP		= 5, /* u8 */
148ffbf2595SKristof Provost };
149ffbf2595SKristof Provost 
150ffbf2595SKristof Provost enum pf_labels_type_t {
151ffbf2595SKristof Provost 	PF_LT_UNSPEC,
152ffbf2595SKristof Provost 	PF_LT_LABEL		= 1, /* string */
153ffbf2595SKristof Provost };
154ffbf2595SKristof Provost 
155ffbf2595SKristof Provost enum pf_mape_portset_type_t
156ffbf2595SKristof Provost {
157ffbf2595SKristof Provost 	PF_MET_UNSPEC,
158ffbf2595SKristof Provost 	PF_MET_OFFSET		= 1, /* u8 */
159ffbf2595SKristof Provost 	PF_MET_PSID_LEN		= 2, /* u8 */
160ffbf2595SKristof Provost 	PF_MET_PSID		= 3, /* u16 */
161ffbf2595SKristof Provost };
162ffbf2595SKristof Provost 
163ffbf2595SKristof Provost enum pf_rpool_type_t
164ffbf2595SKristof Provost {
165ffbf2595SKristof Provost 	PF_PT_UNSPEC,
166ffbf2595SKristof Provost 	PF_PT_KEY		= 1, /* bytes, sizeof(struct pf_poolhashkey) */
167ffbf2595SKristof Provost 	PF_PT_COUNTER		= 2, /* in6_addr */
168ffbf2595SKristof Provost 	PF_PT_TBLIDX		= 3, /* u32 */
169ffbf2595SKristof Provost 	PF_PT_PROXY_SRC_PORT	= 4, /* u16 */
170ffbf2595SKristof Provost 	PF_PT_PROXY_DST_PORT	= 5, /* u16 */
171ffbf2595SKristof Provost 	PF_PT_OPTS		= 6, /* u8 */
172ffbf2595SKristof Provost 	PF_PT_MAPE		= 7, /* nested, pf_mape_portset_type_t */
173ffbf2595SKristof Provost };
174ffbf2595SKristof Provost 
175ffbf2595SKristof Provost enum pf_timeout_type_t {
176ffbf2595SKristof Provost 	PF_TT_UNSPEC,
177ffbf2595SKristof Provost 	PF_TT_TIMEOUT		= 1, /* u32 */
178ffbf2595SKristof Provost };
179ffbf2595SKristof Provost 
180ffbf2595SKristof Provost enum pf_rule_uid_type_t {
181ffbf2595SKristof Provost 	PF_RUT_UNSPEC,
182ffbf2595SKristof Provost 	PF_RUT_UID_LOW		= 1, /* u32 */
183ffbf2595SKristof Provost 	PF_RUT_UID_HIGH		= 2, /* u32 */
184ffbf2595SKristof Provost 	PF_RUT_OP		= 3, /* u8 */
185ffbf2595SKristof Provost };
186ffbf2595SKristof Provost 
187ffbf2595SKristof Provost enum pf_rule_type_t {
188ffbf2595SKristof Provost 	PF_RT_UNSPEC,
189ffbf2595SKristof Provost 	PF_RT_SRC		= 1, /* nested, pf_rule_addr_type_t */
190ffbf2595SKristof Provost 	PF_RT_DST		= 2, /* nested, pf_rule_addr_type_t */
191ffbf2595SKristof Provost 	PF_RT_RIDENTIFIER	= 3, /* u32 */
192ffbf2595SKristof Provost 	PF_RT_LABELS		= 4, /* nested, pf_labels_type_t */
193ffbf2595SKristof Provost 	PF_RT_IFNAME		= 5, /* string */
194ffbf2595SKristof Provost 	PF_RT_QNAME		= 6, /* string */
195ffbf2595SKristof Provost 	PF_RT_PQNAME		= 7, /* string */
196ffbf2595SKristof Provost 	PF_RT_TAGNAME		= 8, /* string */
197ffbf2595SKristof Provost 	PF_RT_MATCH_TAGNAME	= 9, /* string */
198ffbf2595SKristof Provost 	PF_RT_OVERLOAD_TBLNAME	= 10, /* string */
199ffbf2595SKristof Provost 	PF_RT_RPOOL		= 11, /* nested, pf_rpool_type_t */
200ffbf2595SKristof Provost 	PF_RT_OS_FINGERPRINT	= 12, /* u32 */
201ffbf2595SKristof Provost 	PF_RT_RTABLEID		= 13, /* u32 */
202ffbf2595SKristof Provost 	PF_RT_TIMEOUT		= 14, /* nested, pf_timeout_type_t */
203ffbf2595SKristof Provost 	PF_RT_MAX_STATES	= 15, /* u32 */
204ffbf2595SKristof Provost 	PF_RT_MAX_SRC_NODES	= 16, /* u32 */
205ffbf2595SKristof Provost 	PF_RT_MAX_SRC_STATES	= 17, /* u32 */
206ffbf2595SKristof Provost 	PF_RT_MAX_SRC_CONN_RATE_LIMIT	= 18, /* u32 */
207ffbf2595SKristof Provost 	PF_RT_MAX_SRC_CONN_RATE_SECS	= 19, /* u32 */
208ffbf2595SKristof Provost 	PF_RT_DNPIPE		= 20, /* u16 */
209ffbf2595SKristof Provost 	PF_RT_DNRPIPE		= 21, /* u16 */
210ffbf2595SKristof Provost 	PF_RT_DNFLAGS		= 22, /* u32 */
211ffbf2595SKristof Provost 	PF_RT_NR		= 23, /* u32 */
212ffbf2595SKristof Provost 	PF_RT_PROB		= 24, /* u32 */
213ffbf2595SKristof Provost 	PF_RT_CUID		= 25, /* u32 */
214ffbf2595SKristof Provost 	PF_RT_CPID		= 26, /* u32 */
215ffbf2595SKristof Provost 	PF_RT_RETURN_ICMP	= 27, /* u16 */
216ffbf2595SKristof Provost 	PF_RT_RETURN_ICMP6	= 28, /* u16 */
217ffbf2595SKristof Provost 	PF_RT_MAX_MSS		= 29, /* u16 */
218ffbf2595SKristof Provost 	PF_RT_SCRUB_FLAGS	= 30, /* u16 */
219ffbf2595SKristof Provost 	PF_RT_UID		= 31, /* nested, pf_rule_uid_type_t */
220ffbf2595SKristof Provost 	PF_RT_GID		= 32, /* nested, pf_rule_uid_type_t */
221ffbf2595SKristof Provost 	PF_RT_RULE_FLAG		= 33, /* u32 */
222ffbf2595SKristof Provost 	PF_RT_ACTION		= 34, /* u8 */
223ffbf2595SKristof Provost 	PF_RT_DIRECTION		= 35, /* u8 */
224ffbf2595SKristof Provost 	PF_RT_LOG		= 36, /* u8 */
225ffbf2595SKristof Provost 	PF_RT_LOGIF		= 37, /* u8 */
226ffbf2595SKristof Provost 	PF_RT_QUICK		= 38, /* u8 */
227ffbf2595SKristof Provost 	PF_RT_IF_NOT		= 39, /* u8 */
228ffbf2595SKristof Provost 	PF_RT_MATCH_TAG_NOT	= 40, /* u8 */
229ffbf2595SKristof Provost 	PF_RT_NATPASS		= 41, /* u8 */
230ffbf2595SKristof Provost 	PF_RT_KEEP_STATE	= 42, /* u8 */
231ffbf2595SKristof Provost 	PF_RT_AF		= 43, /* u8 */
232ffbf2595SKristof Provost 	PF_RT_PROTO		= 44, /* u8 */
233ffbf2595SKristof Provost 	PF_RT_TYPE		= 45, /* u8 */
234ffbf2595SKristof Provost 	PF_RT_CODE		= 46, /* u8 */
235ffbf2595SKristof Provost 	PF_RT_FLAGS		= 47, /* u8 */
236ffbf2595SKristof Provost 	PF_RT_FLAGSET		= 48, /* u8 */
237ffbf2595SKristof Provost 	PF_RT_MIN_TTL		= 49, /* u8 */
238ffbf2595SKristof Provost 	PF_RT_ALLOW_OPTS	= 50, /* u8 */
239ffbf2595SKristof Provost 	PF_RT_RT		= 51, /* u8 */
240ffbf2595SKristof Provost 	PF_RT_RETURN_TTL	= 52, /* u8 */
241ffbf2595SKristof Provost 	PF_RT_TOS		= 53, /* u8 */
242ffbf2595SKristof Provost 	PF_RT_SET_TOS		= 54, /* u8 */
243ffbf2595SKristof Provost 	PF_RT_ANCHOR_RELATIVE	= 55, /* u8 */
244ffbf2595SKristof Provost 	PF_RT_ANCHOR_WILDCARD	= 56, /* u8 */
245ffbf2595SKristof Provost 	PF_RT_FLUSH		= 57, /* u8 */
246ffbf2595SKristof Provost 	PF_RT_PRIO		= 58, /* u8 */
247ffbf2595SKristof Provost 	PF_RT_SET_PRIO		= 59, /* u8 */
248ffbf2595SKristof Provost 	PF_RT_SET_PRIO_REPLY	= 60, /* u8 */
249ffbf2595SKristof Provost 	PF_RT_DIVERT_ADDRESS	= 61, /* in6_addr */
250ffbf2595SKristof Provost 	PF_RT_DIVERT_PORT	= 62, /* u16 */
251777a4702SKristof Provost 	PF_RT_PACKETS_IN	= 63, /* u64 */
252777a4702SKristof Provost 	PF_RT_PACKETS_OUT	= 64, /* u64 */
253777a4702SKristof Provost 	PF_RT_BYTES_IN		= 65, /* u64 */
254777a4702SKristof Provost 	PF_RT_BYTES_OUT		= 66, /* u64 */
255777a4702SKristof Provost 	PF_RT_EVALUATIONS	= 67, /* u64 */
256777a4702SKristof Provost 	PF_RT_TIMESTAMP		= 68, /* u64 */
257777a4702SKristof Provost 	PF_RT_STATES_CUR	= 69, /* u64 */
258777a4702SKristof Provost 	PF_RT_STATES_TOTAL	= 70, /* u64 */
259777a4702SKristof Provost 	PF_RT_SRC_NODES		= 71, /* u64 */
260777a4702SKristof Provost 	PF_RT_ANCHOR_CALL	= 72, /* string */
2612339ead6SKristof Provost 	PF_RT_RCV_IFNAME	= 73, /* string */
2627fe42038SKajetan Staszkiewicz 	PF_RT_MAX_SRC_CONN	= 74, /* u32 */
263ffbf2595SKristof Provost };
264ffbf2595SKristof Provost 
265ffbf2595SKristof Provost enum pf_addrule_type_t {
266ffbf2595SKristof Provost 	PF_ART_UNSPEC,
267ffbf2595SKristof Provost 	PF_ART_TICKET		= 1, /* u32 */
268ffbf2595SKristof Provost 	PF_ART_POOL_TICKET	= 2, /* u32 */
269ffbf2595SKristof Provost 	PF_ART_ANCHOR		= 3, /* string */
270ffbf2595SKristof Provost 	PF_ART_ANCHOR_CALL	= 4, /* string */
271ffbf2595SKristof Provost 	PF_ART_RULE		= 5, /* nested, pfrule_type_t */
272ffbf2595SKristof Provost };
273ffbf2595SKristof Provost 
27444f323ecSKristof Provost enum pf_getrules_type_t {
27544f323ecSKristof Provost 	PF_GR_UNSPEC,
27644f323ecSKristof Provost 	PF_GR_ANCHOR		= 1, /* string */
27744f323ecSKristof Provost 	PF_GR_ACTION		= 2, /* u8 */
27844f323ecSKristof Provost 	PF_GR_NR		= 3, /* u32 */
27944f323ecSKristof Provost 	PF_GR_TICKET		= 4, /* u32 */
280777a4702SKristof Provost 	PF_GR_CLEAR		= 5, /* u8 */
28144f323ecSKristof Provost };
28244f323ecSKristof Provost 
283706d465dSKristof Provost enum pf_clear_states_type_t {
284706d465dSKristof Provost 	PF_CS_UNSPEC,
285706d465dSKristof Provost 	PF_CS_CMP_ID		= 1, /* u64 */
286706d465dSKristof Provost 	PF_CS_CMP_CREATORID	= 2, /* u32 */
287706d465dSKristof Provost 	PF_CS_CMP_DIR		= 3, /* u8 */
288706d465dSKristof Provost 	PF_CS_AF		= 4, /* u8 */
289706d465dSKristof Provost 	PF_CS_PROTO		= 5, /* u8 */
290706d465dSKristof Provost 	PF_CS_SRC		= 6, /* nested, pf_addr_wrap */
291706d465dSKristof Provost 	PF_CS_DST		= 7, /* nested, pf_addr_wrap */
292706d465dSKristof Provost 	PF_CS_RT_ADDR		= 8, /* nested, pf_addr_wrap */
293706d465dSKristof Provost 	PF_CS_IFNAME		= 9, /* string */
294706d465dSKristof Provost 	PF_CS_LABEL		= 10, /* string */
295706d465dSKristof Provost 	PF_CS_KILL_MATCH	= 11, /* bool */
296706d465dSKristof Provost 	PF_CS_NAT		= 12, /* bool */
297706d465dSKristof Provost 	PF_CS_KILLED		= 13, /* u32 */
298706d465dSKristof Provost };
299706d465dSKristof Provost 
300470a2b33SKristof Provost enum pf_set_statusif_types_t {
301470a2b33SKristof Provost 	PF_SS_UNSPEC,
302470a2b33SKristof Provost 	PF_SS_IFNAME		= 1, /* string */
303470a2b33SKristof Provost };
3045824df8dSKristof Provost 
3055824df8dSKristof Provost enum pf_counter_types_t {
3065824df8dSKristof Provost 	PF_C_UNSPEC,
3075824df8dSKristof Provost 	PF_C_COUNTER		= 1, /* u64 */
3085824df8dSKristof Provost 	PF_C_NAME		= 2, /* string */
3095824df8dSKristof Provost 	PF_C_ID			= 3, /* u32 */
3105824df8dSKristof Provost };
3115824df8dSKristof Provost 
3125824df8dSKristof Provost enum pf_get_status_types_t {
3135824df8dSKristof Provost 	PF_GS_UNSPEC,
3145824df8dSKristof Provost 	PF_GS_IFNAME		= 1, /* string */
3155824df8dSKristof Provost 	PF_GS_RUNNING		= 2, /* bool */
3165824df8dSKristof Provost 	PF_GS_SINCE		= 3, /* u32 */
3175824df8dSKristof Provost 	PF_GS_DEBUG		= 4, /* u32 */
3185824df8dSKristof Provost 	PF_GS_HOSTID		= 5, /* u32 */
3195824df8dSKristof Provost 	PF_GS_STATES		= 6, /* u32 */
3205824df8dSKristof Provost 	PF_GS_SRC_NODES		= 7, /* u32 */
3215824df8dSKristof Provost 	PF_GS_REASSEMBLE	= 8, /* u32 */
3225824df8dSKristof Provost 	PF_GS_SYNCOOKIES_ACTIVE	= 9, /* bool */
3235824df8dSKristof Provost 	PF_GS_COUNTERS		= 10, /* nested, */
3245824df8dSKristof Provost 	PF_GS_LCOUNTERS		= 11, /* nested, */
3255824df8dSKristof Provost 	PF_GS_FCOUNTERS		= 12, /* nested, */
3265824df8dSKristof Provost 	PF_GS_SCOUNTERS		= 13, /* nested, */
3275824df8dSKristof Provost 	PF_GS_CHKSUM		= 14, /* byte array */
3285824df8dSKristof Provost 	PF_GS_PCOUNTERS		= 15, /* u64 array */
3295824df8dSKristof Provost 	PF_GS_BCOUNTERS		= 16, /* u64 array */
3305824df8dSKristof Provost };
3315824df8dSKristof Provost 
33271d3c704SKristof Provost enum pf_natlook_types_t {
33371d3c704SKristof Provost 	PF_NL_UNSPEC,
33471d3c704SKristof Provost 	PF_NL_AF		= 1, /* u8 */
33571d3c704SKristof Provost 	PF_NL_DIRECTION		= 2, /* u8 */
33671d3c704SKristof Provost 	PF_NL_PROTO		= 3, /* u8 */
33771d3c704SKristof Provost 	PF_NL_SRC_ADDR		= 4, /* in6_addr */
33871d3c704SKristof Provost 	PF_NL_DST_ADDR		= 5, /* in6_addr */
33971d3c704SKristof Provost 	PF_NL_SRC_PORT		= 6, /* u16 */
34071d3c704SKristof Provost 	PF_NL_DST_PORT		= 7, /* u16 */
34171d3c704SKristof Provost };
34271d3c704SKristof Provost 
343c36c90a2SKristof Provost enum pf_set_debug_types_t {
344c36c90a2SKristof Provost 	PF_SD_UNSPEC,
345c36c90a2SKristof Provost 	PF_SD_LEVEL		= 1, /* u32 */
346c36c90a2SKristof Provost };
347c36c90a2SKristof Provost 
34830bad751SKristof Provost enum pf_timeout_types_t {
34930bad751SKristof Provost 	PF_TO_UNSPEC,
35030bad751SKristof Provost 	PF_TO_TIMEOUT		= 1, /* u32 */
35130bad751SKristof Provost 	PF_TO_SECONDS		= 2, /* u32 */
35230bad751SKristof Provost };
35330bad751SKristof Provost 
354d9ab8999SKristof Provost enum pf_limit_types_t {
355d9ab8999SKristof Provost 	PF_LI_UNSPEC,
356d9ab8999SKristof Provost 	PF_LI_INDEX		= 1, /* u32 */
357d9ab8999SKristof Provost 	PF_LI_LIMIT		= 2, /* u32 */
358d9ab8999SKristof Provost };
359d9ab8999SKristof Provost 
360ba2a9207SKristof Provost enum pf_begin_addrs_types_t {
361ba2a9207SKristof Provost 	PF_BA_UNSPEC,
362ba2a9207SKristof Provost 	PF_BA_TICKET		= 1, /* u32 */
363ba2a9207SKristof Provost };
364ba2a9207SKristof Provost 
365d909f06bSKristof Provost enum pf_pool_addr_types_t {
366d909f06bSKristof Provost 	PF_PA_UNSPEC,
367d909f06bSKristof Provost 	PF_PA_ADDR		= 1, /* nested, pf_addr_wrap */
368d909f06bSKristof Provost 	PF_PA_IFNAME		= 2, /* string */
369d909f06bSKristof Provost };
370d909f06bSKristof Provost 
371d909f06bSKristof Provost enum pf_add_addr_types_t {
372d909f06bSKristof Provost 	PF_AA_UNSPEC,
373d909f06bSKristof Provost 	PF_AA_ACTION		= 1, /* u32 */
374d909f06bSKristof Provost 	PF_AA_TICKET		= 2, /* u32 */
375d909f06bSKristof Provost 	PF_AA_NR		= 3, /* u32 */
376d909f06bSKristof Provost 	PF_AA_R_NUM		= 4, /* u32 */
377d909f06bSKristof Provost 	PF_AA_R_ACTION		= 5, /* u8 */
378d909f06bSKristof Provost 	PF_AA_R_LAST		= 6, /* u8 */
379d909f06bSKristof Provost 	PF_AA_AF		= 7, /* u8 */
380d909f06bSKristof Provost 	PF_AA_ANCHOR		= 8, /* string */
381d909f06bSKristof Provost 	PF_AA_ADDR		= 9, /* nested, pf_pooladdr */
382d909f06bSKristof Provost };
383d909f06bSKristof Provost 
384*25e0f8f9SKristof Provost enum pf_get_rulesets_types_t {
385*25e0f8f9SKristof Provost 	PF_RS_UNSPEC,
386*25e0f8f9SKristof Provost 	PF_RS_PATH		= 1, /* string */
387*25e0f8f9SKristof Provost 	PF_RS_NR		= 2, /* u32 */
388*25e0f8f9SKristof Provost };
389*25e0f8f9SKristof Provost 
3902cef6288SAlexander V. Chernikov #ifdef _KERNEL
3912cef6288SAlexander V. Chernikov 
3922cef6288SAlexander V. Chernikov void	pf_nl_register(void);
3932cef6288SAlexander V. Chernikov void	pf_nl_unregister(void);
3942cef6288SAlexander V. Chernikov 
3952cef6288SAlexander V. Chernikov #endif
3962cef6288SAlexander V. Chernikov 
3972cef6288SAlexander V. Chernikov #endif
398