--- fwsync/driver/fwsync_workers.c	2022/07/15 09:19:25	1.6
+++ fwsync/driver/fwsync_workers.c	2022/08/10 00:03:50	1.9
@@ -6,15 +6,19 @@
 
 
 static int
-fwsync_add_state_4(const struct fws_proto *pkt)
+fwsync_add_state_4(struct ipfw_flow_id *fid, u_int ruleid, u_short rulenum, 
+		u_short kidx, u_char cmdtype)
 {
+	struct ip_fw *rule = NULL;
+
 	DTRACE();
 
-	return 0;
+	return ipfw_dyn_install_sync_state(fid, rule, ruleid, rulenum, kidx, cmdtype);
 }
 
 static int
-fwsync_add_state_6(const struct fws_proto *pkt)
+fwsync_add_state_6(struct ipfw_flow_id *fid, u_int ruleid, u_short rulenum, 
+		u_short kidx, u_char cmdtype)
 {
 	DTRACE();
 
@@ -24,18 +28,26 @@ fwsync_add_state_6(const struct fws_proto *pkt)
 int
 fwsync_add_state(const struct fws_proto *pkt)
 {
+	struct fws_sndpkt *p;
+
 	DTRACE();
 
-	if (pkt->fws_addrtype == 4)
-		fwsync_add_state_4(pkt);
-	else if (pkt->fws_addrtype == 6)
-		fwsync_add_state_6(pkt);
-	else
-		return EINVAL;
+	if (!pkt || pkt->fws_addrtype == 1)
+		return 0;	/* skip ethernet packet */
 
+	p = malloc(sizeof(struct fws_sndpkt), M_FWSYNC, M_NOWAIT | M_ZERO);
+	if (!p) {
+		return ENOMEM;
+	} else
+		memcpy(&p->sp_proto, pkt, sizeof(struct fws_proto));
+
+	mtx_lock(&fws_mtx_u);
+	TAILQ_INSERT_TAIL(&fwsync_updpkt, p, sp_next);
+	mtx_unlock(&fws_mtx_u);
 	return 0;
 }
 
+
 int
 fwsync_add_alias(const struct fws_proto *pkt)
 {
@@ -54,8 +66,6 @@ fwsync_sndpkt_handler(void *context, int pending)
 
 	DTRACE();
 
-	printf("pending=%d\n", pending);
-
 	do {
 		mtx_lock(&fws_mtx_c);
 		pkt = TAILQ_FIRST(&fwsync_sndpkt);
@@ -115,9 +125,10 @@ out:
 }
 
 int
-fwsync_state_handler(const void *arg)
+fwsync_state_handler(const void *arg, const void *extdata)
 {
 	const struct ipfw_flow_id *pkt = arg;
+	const struct ipfw_dyn_hook_extdata *edata = extdata;
 	struct fws_proto *spkt;
 	struct fws_sndpkt *p;
 
@@ -137,6 +148,10 @@ fwsync_state_handler(const void *arg)
 
 	spkt->fws_version = FWS_PKTVER_STATE;
 	spkt->fws_fib = pkt->fib;
+	spkt->fws_cmdtype = edata->cmdtype;
+	spkt->fws_kidx = edata->kidx;
+	spkt->fws_ruleid = edata->ruleid;
+	spkt->fws_rulenum = edata->rulenum;
 	spkt->fws_proto = pkt->proto;
 	spkt->fws_addrtype = pkt->addr_type;
 	spkt->fws_sport = pkt->src_port;
@@ -168,7 +183,7 @@ fwsync_state_handler(const void *arg)
 }
 
 int
-fwsync_alias_handler(const void *arg)
+fwsync_alias_handler(const void *arg, const void *extdata)
 {
 	const struct alias_link *lnk = arg;
 	struct fws_proto *spkt;
@@ -205,5 +220,59 @@ fwsync_alias_handler(const void *arg)
 	mtx_unlock(&fws_mtx_c);
 
 	taskqueue_enqueue(fws_tq, &fws_sndpkt_task);
+	return 0;
+}
+
+int
+fwsync_state_sync(const void *arg, const void *extdata)
+{
+	struct fws_sndpkt *pkt;
+	struct ipfw_flow_id fid;
+
+	DTRACE();
+
+	mtx_lock(&fws_mtx_u);
+	pkt = TAILQ_FIRST(&fwsync_updpkt);
+	if (pkt)
+		TAILQ_REMOVE(&fwsync_updpkt, pkt, sp_next);
+	mtx_unlock(&fws_mtx_u);
+
+	if (!pkt)	/* update queue is empty */
+		return 0;
+
+	if (!(fws_cfg.cfg.on & CFG_SYNC_EDGE)) {
+		free(pkt, M_FWSYNC);
+		return EAGAIN;
+	}
+
+	memset(&fid, 0, sizeof fid);
+	fid.fib = pkt->sp_proto.fws_fib;
+	fid.proto = pkt->sp_proto.fws_proto;
+	fid.addr_type = pkt->sp_proto.fws_addrtype;
+	fid.src_port = pkt->sp_proto.fws_sport;
+	fid.dst_port = pkt->sp_proto.fws_dport;
+	switch (pkt->sp_proto.fws_addrtype) {
+		case 4:
+			fid.src_ip = pkt->sp_proto.fws_saddr.s_addr;
+			fid.dst_ip = pkt->sp_proto.fws_daddr.s_addr;
+			break;
+		case 6:
+			memcpy(&fid.src_ip6, &pkt->sp_proto.fws_saddr6, sizeof fid.src_ip6);
+			memcpy(&fid.dst_ip6, &pkt->sp_proto.fws_daddr6, sizeof fid.dst_ip6);
+			fid.flow_id6 = pkt->sp_proto.fws_scopeid;
+			break;
+		default:
+			free(pkt, M_FWSYNC);
+			return EINVAL;
+	}
+
+	if (pkt->sp_proto.fws_addrtype == 4)
+		fwsync_add_state_4(&fid, pkt->sp_proto.fws_ruleid, pkt->sp_proto.fws_rulenum, 
+				pkt->sp_proto.fws_kidx, pkt->sp_proto.fws_cmdtype);
+	else if (pkt->sp_proto.fws_addrtype == 6)
+		fwsync_add_state_6(&fid, pkt->sp_proto.fws_ruleid, pkt->sp_proto.fws_rulenum, 
+				pkt->sp_proto.fws_kidx, pkt->sp_proto.fws_cmdtype);
+
+	free(pkt, M_FWSYNC);
 	return 0;
 }