Home | History | Annotate | Download | only in extensions
      1 /*
      2  * Copyright (c) 2012-2013 Patrick McHardy <kaber (at) trash.net>
      3  */
      4 
      5 #include <stdio.h>
      6 #include <string.h>
      7 #include <xtables.h>
      8 #include <linux/netfilter_ipv6/ip6_tables.h>
      9 #include <linux/netfilter_ipv6/ip6t_NPT.h>
     10 
     11 enum {
     12 	O_SRC_PFX	= 1 << 0,
     13 	O_DST_PFX	= 1 << 1,
     14 };
     15 
     16 static const struct xt_option_entry SNPT_options[] = {
     17 	{ .name = "src-pfx", .id = O_SRC_PFX, .type = XTTYPE_HOSTMASK,
     18 	  .flags = XTOPT_MAND },
     19 	{ .name = "dst-pfx", .id = O_DST_PFX, .type = XTTYPE_HOSTMASK,
     20 	  .flags = XTOPT_MAND },
     21 	{ }
     22 };
     23 
     24 static void SNPT_help(void)
     25 {
     26 	printf("SNPT target options:"
     27 	       "\n"
     28 	       " --src-pfx prefix/length\n"
     29 	       " --dst-pfx prefix/length\n"
     30 	       "\n");
     31 }
     32 
     33 static void SNPT_parse(struct xt_option_call *cb)
     34 {
     35 	struct ip6t_npt_tginfo *npt = cb->data;
     36 
     37 	xtables_option_parse(cb);
     38 	switch (cb->entry->id) {
     39 	case O_SRC_PFX:
     40 		npt->src_pfx = cb->val.haddr;
     41 		npt->src_pfx_len = cb->val.hlen;
     42 		break;
     43 	case O_DST_PFX:
     44 		npt->dst_pfx = cb->val.haddr;
     45 		npt->dst_pfx_len = cb->val.hlen;
     46 		break;
     47 	}
     48 }
     49 
     50 static void SNPT_print(const void *ip, const struct xt_entry_target *target,
     51 		       int numeric)
     52 {
     53 	const struct ip6t_npt_tginfo *npt = (const void *)target->data;
     54 
     55 	printf("src-pfx %s/%u ", xtables_ip6addr_to_numeric(&npt->src_pfx.in6),
     56 				 npt->src_pfx_len);
     57 	printf("dst-pfx %s/%u ", xtables_ip6addr_to_numeric(&npt->dst_pfx.in6),
     58 				 npt->dst_pfx_len);
     59 }
     60 
     61 static void SNPT_save(const void *ip, const struct xt_entry_target *target)
     62 {
     63 	static const struct in6_addr zero_addr;
     64 	const struct ip6t_npt_tginfo *info = (const void *)target->data;
     65 
     66 	if (memcmp(&info->src_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 ||
     67 	    info->src_pfx_len != 0)
     68 		printf("--src-pfx %s/%u ",
     69 		       xtables_ip6addr_to_numeric(&info->src_pfx.in6),
     70 		       info->src_pfx_len);
     71 	if (memcmp(&info->dst_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 ||
     72 	    info->dst_pfx_len != 0)
     73 		printf("--dst-pfx %s/%u ",
     74 		       xtables_ip6addr_to_numeric(&info->dst_pfx.in6),
     75 		       info->dst_pfx_len);
     76 }
     77 
     78 static struct xtables_target snpt_tg_reg = {
     79 	.name		= "SNPT",
     80 	.version	= XTABLES_VERSION,
     81 	.family		= NFPROTO_IPV6,
     82 	.size		= XT_ALIGN(sizeof(struct ip6t_npt_tginfo)),
     83 	.userspacesize	= offsetof(struct ip6t_npt_tginfo, adjustment),
     84 	.help		= SNPT_help,
     85 	.x6_parse	= SNPT_parse,
     86 	.print		= SNPT_print,
     87 	.save		= SNPT_save,
     88 	.x6_options	= SNPT_options,
     89 };
     90 
     91 void _init(void)
     92 {
     93 	xtables_register_target(&snpt_tg_reg);
     94 }
     95