class PaPfBackend PF ACL backend interface. More...

Annotated List  Files  Globals  Hierarchy  Index  Top

Public Types

• typedef vector<uint32_t> RuleBuf
• typedef map<uint16_t, RuleBuf> RulesetDB
• typedef map<uint8_t, Snapshot4* > Snapshot4DB
• typedef bitset<MAX_RULESETS> RulesetGroup

Public Methods

•  PaPfBackend ()
• virtual  ~PaPfBackend ()
• const char*  get_name () const
• const char*  get_version () const
• bool  push_entries4 (const PaSnapshot4* snap)
• bool  delete_all_entries4 ()
• const PaBackend::Snapshot4Base*  create_snapshot4 ()
• bool  restore_snapshot4 (const PaBackend::Snapshot4Base* snap)
• bool  push_entries6 (const PaSnapshot6* snap)
• bool  delete_all_entries6 ()
• const PaBackend::Snapshot6Base*  create_snapshot6 () const
• bool  restore_snapshot6 (const PaBackend::Snapshot6Base* snap)
• inline Snapshot4**  get_snapshotdb ()

Protected Methods

• bool  set_pf_enabled (bool enable)
• u_int32_t  start_transaction ()
• void  abort_transaction (u_int32_t ticket)
• bool  commit_transaction (u_int32_t ticket)
• bool  transcribe_and_add_rule4 (const PaEntry4& entry, u_int32_t ticket)

Protected Members

• Snapshot4* _snapshot4db[MAX_RULESETS]
• int _fd

Detailed Description

Concrete class defining a backend which drives PF on [Free|Open|Net]BSD.

PF is closer to IPF than IPFW2 in that it has a single inactive ruleset which is used to install rules before being swapped in by its own commit command.

[virtual]

[const]

Reimplemented from PaBackend.

[const]

Reimplemented from PaBackend.

Reimplemented from PaBackend.

Reimplemented from PaBackend.

Reimplemented from PaBackend.

Reimplemented from PaBackend.

Reimplemented from PaBackend.

Reimplemented from PaBackend.

[const]

Reimplemented from PaBackend.

Reimplemented from PaBackend.

[protected]

[protected]

[protected]

[protected]

[protected]

[protected]

[protected]