|
Packit Service |
d1fe03 |
/* ebt_vlan
|
|
Packit Service |
d1fe03 |
*
|
|
Packit Service |
d1fe03 |
* Authors:
|
|
Packit Service |
d1fe03 |
* Bart De Schuymer <bdschuym@pandora.be>
|
|
Packit Service |
d1fe03 |
* Nick Fedchik <nick@fedchik.org.ua>
|
|
Packit Service |
d1fe03 |
* June, 2002
|
|
Packit Service |
d1fe03 |
*/
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
#include <stdio.h>
|
|
Packit Service |
d1fe03 |
#include <stdlib.h>
|
|
Packit Service |
d1fe03 |
#include <string.h>
|
|
Packit Service |
d1fe03 |
#include <getopt.h>
|
|
Packit Service |
d1fe03 |
#include <ctype.h>
|
|
Packit Service |
d1fe03 |
#include <xtables.h>
|
|
Packit Service |
d1fe03 |
#include <netinet/if_ether.h>
|
|
Packit Service |
d1fe03 |
#include <linux/netfilter_bridge/ebt_vlan.h>
|
|
Packit Service |
d1fe03 |
#include <linux/if_ether.h>
|
|
Packit Service |
d1fe03 |
#include "iptables/nft.h"
|
|
Packit Service |
d1fe03 |
#include "iptables/nft-bridge.h"
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
#define NAME_VLAN_ID "id"
|
|
Packit Service |
d1fe03 |
#define NAME_VLAN_PRIO "prio"
|
|
Packit Service |
d1fe03 |
#define NAME_VLAN_ENCAP "encap"
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
#define VLAN_ID '1'
|
|
Packit Service |
d1fe03 |
#define VLAN_PRIO '2'
|
|
Packit Service |
d1fe03 |
#define VLAN_ENCAP '3'
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static const struct option brvlan_opts[] = {
|
|
Packit Service |
d1fe03 |
{"vlan-id" , required_argument, NULL, VLAN_ID},
|
|
Packit Service |
d1fe03 |
{"vlan-prio" , required_argument, NULL, VLAN_PRIO},
|
|
Packit Service |
d1fe03 |
{"vlan-encap", required_argument, NULL, VLAN_ENCAP},
|
|
Packit Service |
d1fe03 |
XT_GETOPT_TABLEEND,
|
|
Packit Service |
d1fe03 |
};
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
/*
|
|
Packit Service |
d1fe03 |
* option inverse flags definition
|
|
Packit Service |
d1fe03 |
*/
|
|
Packit Service |
d1fe03 |
#define OPT_VLAN_ID 0x01
|
|
Packit Service |
d1fe03 |
#define OPT_VLAN_PRIO 0x02
|
|
Packit Service |
d1fe03 |
#define OPT_VLAN_ENCAP 0x04
|
|
Packit Service |
d1fe03 |
#define OPT_VLAN_FLAGS (OPT_VLAN_ID | OPT_VLAN_PRIO | OPT_VLAN_ENCAP)
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static void brvlan_print_help(void)
|
|
Packit Service |
d1fe03 |
{
|
|
Packit Service |
d1fe03 |
printf(
|
|
Packit Service |
d1fe03 |
"vlan options:\n"
|
|
Packit Service |
d1fe03 |
"--vlan-id [!] id : vlan-tagged frame identifier, 0,1-4096 (integer)\n"
|
|
Packit Service |
d1fe03 |
"--vlan-prio [!] prio : Priority-tagged frame's user priority, 0-7 (integer)\n"
|
|
Packit Service |
d1fe03 |
"--vlan-encap [!] encap : Encapsulated frame protocol (hexadecimal or name)\n");
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static int
|
|
Packit Service |
d1fe03 |
brvlan_parse(int c, char **argv, int invert, unsigned int *flags,
|
|
Packit Service |
d1fe03 |
const void *entry, struct xt_entry_match **match)
|
|
Packit Service |
d1fe03 |
{
|
|
Packit Service |
d1fe03 |
struct ebt_vlan_info *vlaninfo = (struct ebt_vlan_info *) (*match)->data;
|
|
Packit Service |
d1fe03 |
struct xt_ethertypeent *ethent;
|
|
Packit Service |
d1fe03 |
char *end;
|
|
Packit Service |
d1fe03 |
struct ebt_vlan_info local;
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
switch (c) {
|
|
Packit Service |
d1fe03 |
case VLAN_ID:
|
|
Packit Service |
d1fe03 |
EBT_CHECK_OPTION(flags, OPT_VLAN_ID);
|
|
Packit Service |
d1fe03 |
if (invert)
|
|
Packit Service |
d1fe03 |
vlaninfo->invflags |= EBT_VLAN_ID;
|
|
Packit Service |
d1fe03 |
local.id = strtoul(optarg, &end, 10);
|
|
Packit Service |
d1fe03 |
if (local.id > 4094 || *end != '\0')
|
|
Packit Service |
d1fe03 |
xtables_error(PARAMETER_PROBLEM, "Invalid --vlan-id range ('%s')", optarg);
|
|
Packit Service |
d1fe03 |
vlaninfo->id = local.id;
|
|
Packit Service |
d1fe03 |
vlaninfo->bitmask |= EBT_VLAN_ID;
|
|
Packit Service |
d1fe03 |
break;
|
|
Packit Service |
d1fe03 |
case VLAN_PRIO:
|
|
Packit Service |
d1fe03 |
EBT_CHECK_OPTION(flags, OPT_VLAN_PRIO);
|
|
Packit Service |
d1fe03 |
if (invert)
|
|
Packit Service |
d1fe03 |
vlaninfo->invflags |= EBT_VLAN_PRIO;
|
|
Packit Service |
d1fe03 |
local.prio = strtoul(optarg, &end, 10);
|
|
Packit Service |
d1fe03 |
if (local.prio >= 8 || *end != '\0')
|
|
Packit Service |
d1fe03 |
xtables_error(PARAMETER_PROBLEM, "Invalid --vlan-prio range ('%s')", optarg);
|
|
Packit Service |
d1fe03 |
vlaninfo->prio = local.prio;
|
|
Packit Service |
d1fe03 |
vlaninfo->bitmask |= EBT_VLAN_PRIO;
|
|
Packit Service |
d1fe03 |
break;
|
|
Packit Service |
d1fe03 |
case VLAN_ENCAP:
|
|
Packit Service |
d1fe03 |
EBT_CHECK_OPTION(flags, OPT_VLAN_ENCAP);
|
|
Packit Service |
d1fe03 |
if (invert)
|
|
Packit Service |
d1fe03 |
vlaninfo->invflags |= EBT_VLAN_ENCAP;
|
|
Packit Service |
d1fe03 |
local.encap = strtoul(optarg, &end, 16);
|
|
Packit Service |
d1fe03 |
if (*end != '\0') {
|
|
Packit Service |
d1fe03 |
ethent = xtables_getethertypebyname(optarg);
|
|
Packit Service |
d1fe03 |
if (ethent == NULL)
|
|
Packit Service |
d1fe03 |
xtables_error(PARAMETER_PROBLEM, "Unknown --vlan-encap value ('%s')", optarg);
|
|
Packit Service |
d1fe03 |
local.encap = ethent->e_ethertype;
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
if (local.encap < ETH_ZLEN)
|
|
Packit Service |
d1fe03 |
xtables_error(PARAMETER_PROBLEM, "Invalid --vlan-encap range ('%s')", optarg);
|
|
Packit Service |
d1fe03 |
vlaninfo->encap = htons(local.encap);
|
|
Packit Service |
d1fe03 |
vlaninfo->bitmask |= EBT_VLAN_ENCAP;
|
|
Packit Service |
d1fe03 |
break;
|
|
Packit Service |
d1fe03 |
default:
|
|
Packit Service |
d1fe03 |
return 0;
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
return 1;
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static void brvlan_print(const void *ip, const struct xt_entry_match *match,
|
|
Packit Service |
d1fe03 |
int numeric)
|
|
Packit Service |
d1fe03 |
{
|
|
Packit Service |
d1fe03 |
struct ebt_vlan_info *vlaninfo = (struct ebt_vlan_info *) match->data;
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_ID) {
|
|
Packit Service |
d1fe03 |
printf("--vlan-id %s%d ", (vlaninfo->invflags & EBT_VLAN_ID) ? "! " : "", vlaninfo->id);
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_PRIO) {
|
|
Packit Service |
d1fe03 |
printf("--vlan-prio %s%d ", (vlaninfo->invflags & EBT_VLAN_PRIO) ? "! " : "", vlaninfo->prio);
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_ENCAP) {
|
|
Packit Service |
d1fe03 |
printf("--vlan-encap %s", (vlaninfo->invflags & EBT_VLAN_ENCAP) ? "! " : "");
|
|
Packit Service |
d1fe03 |
printf("%4.4X ", ntohs(vlaninfo->encap));
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static int brvlan_xlate(struct xt_xlate *xl,
|
|
Packit Service |
d1fe03 |
const struct xt_xlate_mt_params *params)
|
|
Packit Service |
d1fe03 |
{
|
|
Packit Service |
d1fe03 |
const struct ebt_vlan_info *vlaninfo = (const void*)params->match->data;
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_ID)
|
|
Packit Service |
d1fe03 |
xt_xlate_add(xl, "vlan id %s%d ", (vlaninfo->invflags & EBT_VLAN_ID) ? "!= " : "", vlaninfo->id);
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_PRIO)
|
|
Packit Service |
d1fe03 |
xt_xlate_add(xl, "vlan pcp %s%d ", (vlaninfo->invflags & EBT_VLAN_PRIO) ? "!= " : "", vlaninfo->prio);
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
if (vlaninfo->bitmask & EBT_VLAN_ENCAP)
|
|
Packit Service |
d1fe03 |
xt_xlate_add(xl, "vlan type %s0x%4.4x ", (vlaninfo->invflags & EBT_VLAN_ENCAP) ? "!= " : "", ntohs(vlaninfo->encap));
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
return 1;
|
|
Packit Service |
d1fe03 |
}
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
static struct xtables_match brvlan_match = {
|
|
Packit Service |
d1fe03 |
.name = "vlan",
|
|
Packit Service |
d1fe03 |
.version = XTABLES_VERSION,
|
|
Packit Service |
d1fe03 |
.family = NFPROTO_BRIDGE,
|
|
Packit Service |
d1fe03 |
.size = XT_ALIGN(sizeof(struct ebt_vlan_info)),
|
|
Packit Service |
d1fe03 |
.userspacesize = XT_ALIGN(sizeof(struct ebt_vlan_info)),
|
|
Packit Service |
d1fe03 |
.help = brvlan_print_help,
|
|
Packit Service |
d1fe03 |
.parse = brvlan_parse,
|
|
Packit Service |
d1fe03 |
.print = brvlan_print,
|
|
Packit Service |
d1fe03 |
.xlate = brvlan_xlate,
|
|
Packit Service |
d1fe03 |
.extra_opts = brvlan_opts,
|
|
Packit Service |
d1fe03 |
};
|
|
Packit Service |
d1fe03 |
|
|
Packit Service |
d1fe03 |
void _init(void)
|
|
Packit Service |
d1fe03 |
{
|
|
Packit Service |
d1fe03 |
xtables_register_match(&brvlan_match);
|
|
Packit Service |
d1fe03 |
}
|