|
Packit |
7b22a4 |
#include <stdio.h>
|
|
Packit |
7b22a4 |
#include <string.h>
|
|
Packit |
7b22a4 |
#include <stdlib.h>
|
|
Packit |
7b22a4 |
#include <errno.h>
|
|
Packit |
7b22a4 |
#if defined(__GLIBC__) && __GLIBC__ == 2
|
|
Packit |
7b22a4 |
#include <net/ethernet.h>
|
|
Packit |
7b22a4 |
#else
|
|
Packit |
7b22a4 |
#include <linux/if_ether.h>
|
|
Packit |
7b22a4 |
#endif
|
|
Packit |
7b22a4 |
#include <xtables.h>
|
|
Packit |
7b22a4 |
#include <linux/netfilter_ipv4/ipt_realm.h>
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
enum {
|
|
Packit |
7b22a4 |
O_REALM = 0,
|
|
Packit |
7b22a4 |
};
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static void realm_help(void)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
printf(
|
|
Packit |
7b22a4 |
"realm match options:\n"
|
|
Packit |
7b22a4 |
"[!] --realm value[/mask]\n"
|
|
Packit |
7b22a4 |
" Match realm\n");
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static const struct xt_option_entry realm_opts[] = {
|
|
Packit |
7b22a4 |
{.name = "realm", .id = O_REALM, .type = XTTYPE_STRING,
|
|
Packit |
7b22a4 |
.flags = XTOPT_MAND | XTOPT_INVERT},
|
|
Packit |
7b22a4 |
XTOPT_TABLEEND,
|
|
Packit |
7b22a4 |
};
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static const char f_realms[] = "/etc/iproute2/rt_realms";
|
|
Packit |
7b22a4 |
/* array of realms from f_realms[] */
|
|
Packit |
7b22a4 |
static struct xtables_lmap *realms;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static void realm_parse(struct xt_option_call *cb)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
struct xt_realm_info *ri = cb->data;
|
|
Packit |
7b22a4 |
unsigned int id, mask;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
xtables_option_parse(cb);
|
|
Packit |
7b22a4 |
xtables_parse_val_mask(cb, &id, &mask, realms);
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ri->id = id;
|
|
Packit |
7b22a4 |
ri->mask = mask;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
if (cb->invert)
|
|
Packit |
7b22a4 |
ri->invert = 1;
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static void realm_print(const void *ip, const struct xt_entry_match *match,
|
|
Packit |
7b22a4 |
int numeric)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
const struct xt_realm_info *ri = (const void *)match->data;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
if (ri->invert)
|
|
Packit |
7b22a4 |
printf(" !");
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
printf(" realm");
|
|
Packit |
7b22a4 |
xtables_print_val_mask(ri->id, ri->mask, numeric ? NULL : realms);
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static void realm_save(const void *ip, const struct xt_entry_match *match)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
const struct xt_realm_info *ri = (const void *)match->data;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
if (ri->invert)
|
|
Packit |
7b22a4 |
printf(" !");
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
printf(" --realm");
|
|
Packit |
7b22a4 |
xtables_print_val_mask(ri->id, ri->mask, realms);
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static void
|
|
Packit |
7b22a4 |
print_realm_xlate(unsigned long id, unsigned long mask,
|
|
Packit |
7b22a4 |
int numeric, struct xt_xlate *xl, uint32_t op)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
const char *name = NULL;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
if (mask != 0xffffffff)
|
|
Packit |
7b22a4 |
xt_xlate_add(xl, " and 0x%lx %s 0x%lx", mask,
|
|
Packit |
7b22a4 |
op == XT_OP_EQ ? "==" : "!=", id);
|
|
Packit |
7b22a4 |
else {
|
|
Packit |
7b22a4 |
if (numeric == 0)
|
|
Packit |
7b22a4 |
name = xtables_lmap_id2name(realms, id);
|
|
Packit |
7b22a4 |
if (name)
|
|
Packit |
7b22a4 |
xt_xlate_add(xl, " %s%s",
|
|
Packit |
7b22a4 |
op == XT_OP_EQ ? "" : "!= ", name);
|
|
Packit |
7b22a4 |
else
|
|
Packit |
7b22a4 |
xt_xlate_add(xl, " %s0x%lx",
|
|
Packit |
7b22a4 |
op == XT_OP_EQ ? "" : "!= ", id);
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static int realm_xlate(struct xt_xlate *xl,
|
|
Packit |
7b22a4 |
const struct xt_xlate_mt_params *params)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
const struct xt_realm_info *ri = (const void *)params->match->data;
|
|
Packit |
7b22a4 |
enum xt_op op = XT_OP_EQ;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
if (ri->invert)
|
|
Packit |
7b22a4 |
op = XT_OP_NEQ;
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
xt_xlate_add(xl, "rtclassid");
|
|
Packit |
7b22a4 |
print_realm_xlate(ri->id, ri->mask, 0, xl, op);
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
return 1;
|
|
Packit |
7b22a4 |
}
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
static struct xtables_match realm_mt_reg = {
|
|
Packit |
7b22a4 |
.name = "realm",
|
|
Packit |
7b22a4 |
.version = XTABLES_VERSION,
|
|
Packit |
7b22a4 |
.family = NFPROTO_IPV4,
|
|
Packit |
7b22a4 |
.size = XT_ALIGN(sizeof(struct xt_realm_info)),
|
|
Packit |
7b22a4 |
.userspacesize = XT_ALIGN(sizeof(struct xt_realm_info)),
|
|
Packit |
7b22a4 |
.help = realm_help,
|
|
Packit |
7b22a4 |
.print = realm_print,
|
|
Packit |
7b22a4 |
.save = realm_save,
|
|
Packit |
7b22a4 |
.x6_parse = realm_parse,
|
|
Packit |
7b22a4 |
.x6_options = realm_opts,
|
|
Packit |
7b22a4 |
.xlate = realm_xlate,
|
|
Packit |
7b22a4 |
};
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
void _init(void)
|
|
Packit |
7b22a4 |
{
|
|
Packit |
7b22a4 |
realms = xtables_lmap_init(f_realms);
|
|
Packit |
7b22a4 |
if (realms == NULL && errno != ENOENT)
|
|
Packit |
7b22a4 |
fprintf(stderr, "Warning: %s: %s\n", f_realms,
|
|
Packit |
7b22a4 |
strerror(errno));
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
xtables_register_match(&realm_mt_reg);
|
|
Packit |
7b22a4 |
}
|