Blame extensions/libxt_SYNPROXY.c

Packit Service d1fe03
Packit Service d1fe03
/*
Packit Service d1fe03
 * Copyright (c) 2013 Patrick McHardy <kaber@trash.net>
Packit Service d1fe03
 *
Packit Service d1fe03
 * This program is free software; you can redistribute it and/or modify
Packit Service d1fe03
 * it under the terms of the GNU General Public License version 2 as
Packit Service d1fe03
 * published by the Free Software Foundation.
Packit Service d1fe03
 */
Packit Service d1fe03
Packit Service d1fe03
#include <stdbool.h>
Packit Service d1fe03
#include <stdio.h>
Packit Service d1fe03
#include <xtables.h>
Packit Service d1fe03
#include <linux/netfilter/xt_SYNPROXY.h>
Packit Service d1fe03
Packit Service d1fe03
enum {
Packit Service d1fe03
	O_SACK_PERM = 0,
Packit Service d1fe03
	O_TIMESTAMP,
Packit Service d1fe03
	O_WSCALE,
Packit Service d1fe03
	O_MSS,
Packit Service d1fe03
	O_ECN,
Packit Service d1fe03
};
Packit Service d1fe03
Packit Service d1fe03
static void SYNPROXY_help(void)
Packit Service d1fe03
{
Packit Service d1fe03
	printf(
Packit Service d1fe03
"SYNPROXY target options:\n"
Packit Service d1fe03
"  --sack-perm                        Set SACK_PERM\n"
Packit Service d1fe03
"  --timestamp                        Set TIMESTAMP\n"
Packit Service d1fe03
"  --wscale value                     Set window scaling factor\n"
Packit Service d1fe03
"  --mss value                        Set MSS value\n"
Packit Service d1fe03
"  --ecn                              Set ECN\n");
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static const struct xt_option_entry SYNPROXY_opts[] = {
Packit Service d1fe03
	{.name = "sack-perm", .id = O_SACK_PERM, .type = XTTYPE_NONE, },
Packit Service d1fe03
	{.name = "timestamp", .id = O_TIMESTAMP, .type = XTTYPE_NONE, },
Packit Service d1fe03
	{.name = "wscale",    .id = O_WSCALE,    .type = XTTYPE_UINT32, },
Packit Service d1fe03
	{.name = "mss",       .id = O_MSS,       .type = XTTYPE_UINT32, },
Packit Service d1fe03
	{.name = "ecn",       .id = O_ECN,	 .type = XTTYPE_NONE, },
Packit Service d1fe03
	XTOPT_TABLEEND,
Packit Service d1fe03
};
Packit Service d1fe03
Packit Service d1fe03
static void SYNPROXY_parse(struct xt_option_call *cb)
Packit Service d1fe03
{
Packit Service d1fe03
	struct xt_synproxy_info *info = cb->data;
Packit Service d1fe03
Packit Service d1fe03
	xtables_option_parse(cb);
Packit Service d1fe03
	switch (cb->entry->id) {
Packit Service d1fe03
	case O_SACK_PERM:
Packit Service d1fe03
		info->options |= XT_SYNPROXY_OPT_SACK_PERM;
Packit Service d1fe03
		break;
Packit Service d1fe03
	case O_TIMESTAMP:
Packit Service d1fe03
		info->options |= XT_SYNPROXY_OPT_TIMESTAMP;
Packit Service d1fe03
		break;
Packit Service d1fe03
	case O_WSCALE:
Packit Service d1fe03
		info->options |= XT_SYNPROXY_OPT_WSCALE;
Packit Service d1fe03
		info->wscale = cb->val.u32;
Packit Service d1fe03
		break;
Packit Service d1fe03
	case O_MSS:
Packit Service d1fe03
		info->options |= XT_SYNPROXY_OPT_MSS;
Packit Service d1fe03
		info->mss = cb->val.u32;
Packit Service d1fe03
		break;
Packit Service d1fe03
	case O_ECN:
Packit Service d1fe03
		info->options |= XT_SYNPROXY_OPT_ECN;
Packit Service d1fe03
		break;
Packit Service d1fe03
	}
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static void SYNPROXY_check(struct xt_fcheck_call *cb)
Packit Service d1fe03
{
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static void SYNPROXY_print(const void *ip, const struct xt_entry_target *target,
Packit Service d1fe03
                           int numeric)
Packit Service d1fe03
{
Packit Service d1fe03
	const struct xt_synproxy_info *info =
Packit Service d1fe03
		(const struct xt_synproxy_info *)target->data;
Packit Service d1fe03
Packit Service d1fe03
	printf(" SYNPROXY ");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_SACK_PERM)
Packit Service d1fe03
		printf("sack-perm ");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_TIMESTAMP)
Packit Service d1fe03
		printf("timestamp ");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_WSCALE)
Packit Service d1fe03
		printf("wscale %u ", info->wscale);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_MSS)
Packit Service d1fe03
		printf("mss %u ", info->mss);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_ECN)
Packit Service d1fe03
		printf("ecn ");
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static void SYNPROXY_save(const void *ip, const struct xt_entry_target *target)
Packit Service d1fe03
{
Packit Service d1fe03
	const struct xt_synproxy_info *info =
Packit Service d1fe03
		(const struct xt_synproxy_info *)target->data;
Packit Service d1fe03
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_SACK_PERM)
Packit Service d1fe03
		printf(" --sack-perm");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_TIMESTAMP)
Packit Service d1fe03
		printf(" --timestamp");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_WSCALE)
Packit Service d1fe03
		printf(" --wscale %u", info->wscale);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_MSS)
Packit Service d1fe03
		printf(" --mss %u", info->mss);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_ECN)
Packit Service d1fe03
		printf(" --ecn");
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static int SYNPROXY_xlate(struct xt_xlate *xl,
Packit Service d1fe03
		          const struct xt_xlate_tg_params *params)
Packit Service d1fe03
{
Packit Service d1fe03
	const struct xt_synproxy_info *info =
Packit Service d1fe03
		(const struct xt_synproxy_info *)params->target->data;
Packit Service d1fe03
Packit Service d1fe03
	xt_xlate_add(xl, "synproxy ");
Packit Service d1fe03
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_SACK_PERM)
Packit Service d1fe03
		xt_xlate_add(xl, "sack-perm ");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_TIMESTAMP)
Packit Service d1fe03
		xt_xlate_add(xl, "timestamp ");
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_WSCALE)
Packit Service d1fe03
		xt_xlate_add(xl, "wscale %u ", info->wscale);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_MSS)
Packit Service d1fe03
		xt_xlate_add(xl, "mss %u ", info->mss);
Packit Service d1fe03
	if (info->options & XT_SYNPROXY_OPT_ECN)
Packit Service d1fe03
		xt_xlate_add(xl, "ecn ");
Packit Service d1fe03
Packit Service d1fe03
	return 1;
Packit Service d1fe03
}
Packit Service d1fe03
Packit Service d1fe03
static struct xtables_target synproxy_tg_reg = {
Packit Service d1fe03
	.family        = NFPROTO_UNSPEC,
Packit Service d1fe03
	.name          = "SYNPROXY",
Packit Service d1fe03
	.version       = XTABLES_VERSION,
Packit Service d1fe03
	.revision      = 0,
Packit Service d1fe03
	.size          = XT_ALIGN(sizeof(struct xt_synproxy_info)),
Packit Service d1fe03
	.userspacesize = XT_ALIGN(sizeof(struct xt_synproxy_info)),
Packit Service d1fe03
	.help          = SYNPROXY_help,
Packit Service d1fe03
	.print         = SYNPROXY_print,
Packit Service d1fe03
	.save          = SYNPROXY_save,
Packit Service d1fe03
	.x6_parse      = SYNPROXY_parse,
Packit Service d1fe03
	.x6_fcheck     = SYNPROXY_check,
Packit Service d1fe03
	.x6_options    = SYNPROXY_opts,
Packit Service d1fe03
	.xlate         = SYNPROXY_xlate,
Packit Service d1fe03
};
Packit Service d1fe03
Packit Service d1fe03
void _init(void)
Packit Service d1fe03
{
Packit Service d1fe03
	xtables_register_target(&synproxy_tg_reg);
Packit Service d1fe03
}