aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/ip_fw.h
diff options
context:
space:
mode:
authorAndrey V. Elsukov <ae@FreeBSD.org>2018-12-04 16:12:43 +0000
committerAndrey V. Elsukov <ae@FreeBSD.org>2018-12-04 16:12:43 +0000
commitd66f9c86fa3fd8d8f0a56ea96b03ca11f2fac1fb (patch)
tree0315ee86648d11c7484394ebdf189819d9c638a1 /sys/netinet/ip_fw.h
parentcefe3d67e29b9d9321a0677cc565d8c05c230d82 (diff)
downloadsrc-d66f9c86fa3fd8d8f0a56ea96b03ca11f2fac1fb.tar.gz
src-d66f9c86fa3fd8d8f0a56ea96b03ca11f2fac1fb.zip
Notes
Diffstat (limited to 'sys/netinet/ip_fw.h')
-rw-r--r--sys/netinet/ip_fw.h4
1 files changed, 3 insertions, 1 deletions
diff --git a/sys/netinet/ip_fw.h b/sys/netinet/ip_fw.h
index e49b9ad9c6c6..41351215f96e 100644
--- a/sys/netinet/ip_fw.h
+++ b/sys/netinet/ip_fw.h
@@ -708,6 +708,7 @@ struct _ipfw_dyn_rule {
u_int32_t state; /* state of this rule (typically a
* combination of TCP flags)
*/
+#define IPFW_DYN_ORPHANED 0x40000 /* state's parent rule was deleted */
u_int32_t ack_fwd; /* most recent ACKs in forward */
u_int32_t ack_rev; /* and reverse directions (used */
/* to generate keepalives) */
@@ -938,9 +939,10 @@ typedef struct _ipfw_range_tlv {
#define IPFW_RCFLAG_RANGE 0x01 /* rule range is set */
#define IPFW_RCFLAG_ALL 0x02 /* match ALL rules */
#define IPFW_RCFLAG_SET 0x04 /* match rules in given set */
+#define IPFW_RCFLAG_DYNAMIC 0x08 /* match only dynamic states */
/* User-settable flags */
#define IPFW_RCFLAG_USER (IPFW_RCFLAG_RANGE | IPFW_RCFLAG_ALL | \
- IPFW_RCFLAG_SET)
+ IPFW_RCFLAG_SET | IPFW_RCFLAG_DYNAMIC)
/* Internally used flags */
#define IPFW_RCFLAG_DEFAULT 0x0100 /* Do not skip defaul rule */