18d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* Code to convert iptables-save format to xml format, 28d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * (C) 2006 Ufo Mechanic <azez@ufomechanic.net> 34598ed7d3e22d74ffaad7948ddc3455ac9aa7576Maciej Żenczykowski * based on iptables-restore (C) 2000-2002 by Harald Welte <laforge@gnumonks.org> 48d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * based on previous code from Rusty Russell <rusty@linuxcare.com.au> 58d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * 68d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * This code is distributed under the terms of GNU GPL v2 78d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez */ 88d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 98d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <getopt.h> 108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <sys/errno.h> 118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <string.h> 128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <stdio.h> 138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <stdlib.h> 148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include <stdarg.h> 158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include "iptables.h" 168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#include "libiptc/libiptc.h" 174598ed7d3e22d74ffaad7948ddc3455ac9aa7576Maciej Żenczykowski#include "xtables-multi.h" 184dcdc9b3f8f42eb3b5a1d12e1b3d2fc1e2675725Jamal Hadi Salim#include <xtables.h> 198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#ifdef DEBUG 218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define DEBUGP(x, args...) fprintf(stderr, x, ## args) 228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#else 238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define DEBUGP(x, args...) 248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#endif 258d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 26e78c69c8146c5dcd096ba13ac03d7a7bb90e3ea7Lutz Jaenicke#ifndef IPTABLES_MULTI 27e78c69c8146c5dcd096ba13ac03d7a7bb90e3ea7Lutz Jaenickeint line = 0; 28e78c69c8146c5dcd096ba13ac03d7a7bb90e3ea7Lutz Jaenicke#endif 298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 305dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salimstruct xtables_globals iptables_xml_globals = { 315dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim .option_offset = 0, 325dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim .program_version = IPTABLES_VERSION, 335dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim .program_name = "iptables-xml", 345dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim}; 355dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim#define prog_name iptables_xml_globals.program_name 365dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim#define prog_vers iptables_xml_globals.program_version 375dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim 388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void print_usage(const char *name, const char *version) 398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez __attribute__ ((noreturn)); 408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int verbose = 0; 428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* Whether to combine actions of sequential rules with identical conditions */ 438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int combine = 0; 448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* Keeping track of external matches and targets. */ 458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic struct option options[] = { 46ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardy {"verbose", 0, NULL, 'v'}, 47ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardy {"combine", 0, NULL, 'c'}, 48ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardy {"help", 0, NULL, 'h'}, 499ee386a1b6d7704b259460152c959ab0e79e02aaMax Kellermann { .name = NULL } 508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez}; 518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezprint_usage(const char *name, const char *version) 548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez fprintf(stderr, "Usage: %s [-c] [-v] [-h]\n" 568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez " [--combine ]\n" 578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez " [ --verbose ]\n" " [ --help ]\n", name); 588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 62e78c69c8146c5dcd096ba13ac03d7a7bb90e3ea7Lutz Jaenickestatic int 638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezparse_counters(char *string, struct ipt_counters *ctr) 648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 650195836374cd195b13e0653ec9355a8ecd174313Jan Engelhardt __u64 *pcnt, *bcnt; 66b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy 67b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy if (string != NULL) { 68b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy pcnt = &ctr->pcnt; 69b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy bcnt = &ctr->bcnt; 708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return (sscanf 718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez (string, "[%llu:%llu]", 72b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy (unsigned long long *)pcnt, 73b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy (unsigned long long *)bcnt) == 2); 74b73691f9e67149deefbc2d2115d66dfc62264333Patrick McHardy } else 758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return (0 == 2); 768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* global new argv and argc */ 798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic char *newargv[255]; 807a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardtstatic unsigned int newargc = 0; 818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic char *oldargv[255]; 837a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardtstatic unsigned int oldargc = 0; 848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* arg meta data, were they quoted, frinstance */ 868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int newargvattr[255]; 878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define IPT_CHAIN_MAXNAMELEN IPT_TABLE_MAXNAMELEN 89ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardystatic char closeActionTag[IPT_TABLE_MAXNAMELEN + 1]; 90ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardystatic char closeRuleTag[IPT_TABLE_MAXNAMELEN + 1]; 91ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardystatic char curTable[IPT_TABLE_MAXNAMELEN + 1]; 92ddffcfbe3c97d1eb81d497261ff376cd336974b3Patrick McHardystatic char curChain[IPT_CHAIN_MAXNAMELEN + 1]; 938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 94dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardtstruct chain { 958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *chain; 968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *policy; 978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez struct ipt_counters count; 988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int created; 99dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt}; 1008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define maxChains 10240 /* max chains per table */ 102dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardtstatic struct chain chains[maxChains]; 1038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int nextChain = 0; 1048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* funCtion adding one argument to newargv, updating newargc 1068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * returns true if argument added, false otherwise */ 1078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int 1088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezadd_argv(char *what, int quoted) 1098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 1108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("add_argv: %d %s\n", newargc, what); 1112c69b55e55f2efc5a334b87ccdceaa9de0ecb658Jan Engelhardt if (what && newargc + 1 < ARRAY_SIZE(newargv)) { 1128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargv[newargc] = strdup(what); 1138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargvattr[newargc] = quoted; 1148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargc++; 1158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 1; 1168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else 1178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 0; 1188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 1198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 1218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezfree_argv(void) 1228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 1237a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardt unsigned int i; 1248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1258d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (i = 0; i < newargc; i++) { 1268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free(newargv[i]); 1278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargv[i] = NULL; 1288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargc = 0; 1308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (i = 0; i < oldargc; i++) { 1328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free(oldargv[i]); 1338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez oldargv[i] = NULL; 1348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1358d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez oldargc = 0; 1368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 1378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* save parsed rule for comparison with next rule 1398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez to perform action agregation on duplicate conditions */ 1408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 1418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezsave_argv(void) 1428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 1437a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardt unsigned int i; 1448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (i = 0; i < oldargc; i++) 1468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free(oldargv[i]); 1478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez oldargc = newargc; 1488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargc = 0; 1498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (i = 0; i < oldargc; i++) { 1508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez oldargv[i] = newargv[i]; 1518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargv[i] = NULL; 1528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 1548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* like puts but with xml encoding */ 1568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 1578d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezxmlEncode(char *text) 1588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 1598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (text && *text) { 1608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if ((unsigned char) (*text) >= 127) 1618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("&#%d;", (unsigned char) (*text)); 1628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else if (*text == '&') 1638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("&"); 1648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else if (*text == '<') 1658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("<"); 1668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else if (*text == '>') 1678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">"); 1688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else if (*text == '"') 1698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("""); 1708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else 1718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez putchar(*text); 1728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez text++; 1738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 1758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* Output text as a comment, avoiding a double hyphen */ 1778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 1788d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezxmlCommentEscape(char *comment) 1798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 1808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int h_count = 0; 1818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (comment && *comment) { 1838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (*comment == '-') { 1848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez h_count++; 1858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (h_count >= 2) { 1868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez h_count = 0; 1878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez putchar(' '); 1888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez putchar('*'); 1908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* strip trailing newline */ 1928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (*comment == '\n' && *(comment + 1) == 0); 1938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else 1948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez putchar(*comment); 1958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez comment++; 1968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 1978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 1988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 1998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2008d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezxmlComment(char *comment) 2018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("<!-- "); 2038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlCommentEscape(comment); 2048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" -->\n"); 2058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2088d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezxmlAttrS(char *name, char *value) 2098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s=\"", name); 2118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlEncode(value); 2128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("\" "); 2138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2168d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezxmlAttrI(char *name, long long int num) 2178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s=\"%lld\" ", name, num); 2198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2229ee386a1b6d7704b259460152c959ab0e79e02aaMax KellermanncloseChain(void) 2238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (curChain[0] == 0) 2258d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return; 2268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (closeActionTag[0]) 2288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s\n", closeActionTag); 2298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeActionTag[0] = 0; 2308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (closeRuleTag[0]) 2318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s\n", closeRuleTag); 2328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeRuleTag[0] = 0; 2338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (curChain[0]) 2348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" </chain>\n"); 2358d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez curChain[0] = 0; 2368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez //lastRule[0]=0; 2378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2408d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezopenChain(char *chain, char *policy, struct ipt_counters *ctr, char close) 2418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeChain(); 2438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strncpy(curChain, chain, IPT_CHAIN_MAXNAMELEN); 2458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez curChain[IPT_CHAIN_MAXNAMELEN] = '\0'; 2468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" <chain "); 2488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("name", curChain); 2498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (strcmp(policy, "-") != 0) 2508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("policy", policy); 2518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrI("packet-count", (unsigned long long) ctr->pcnt); 2528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrI("byte-count", (unsigned long long) ctr->bcnt); 2538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (close) { 2548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%c", close); 2558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez curChain[0] = 0; 2568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 2578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 2588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int 2618d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezexistsChain(char *chain) 2628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* open a saved chain */ 2648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int c = 0; 2658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (0 == strcmp(curChain, chain)) 2678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 1; 2688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (c = 0; c < nextChain; c++) 2698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (chains[c].chain && strcmp(chains[c].chain, chain) == 0) 2708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 1; 2718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 0; 2728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2758d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezneedChain(char *chain) 2768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* open a saved chain */ 2788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int c = 0; 2798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (0 == strcmp(curChain, chain)) 2818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return; 2828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (c = 0; c < nextChain; c++) 2848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (chains[c].chain && strcmp(chains[c].chain, chain) == 0) { 2858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez openChain(chains[c].chain, chains[c].policy, 2868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez &(chains[c].count), '\0'); 2878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* And, mark it as done so we don't create 2888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez an empty chain at table-end time */ 2898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chains[c].created = 1; 2908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 2918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 2928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 2938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 2948d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezsaveChain(char *chain, char *policy, struct ipt_counters *ctr) 2958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 2968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (nextChain >= maxChains) { 2971829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 2988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "%s: line %u chain name invalid\n", 2995dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line); 3008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 3018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez }; 3028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chains[nextChain].chain = strdup(chain); 3038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chains[nextChain].policy = strdup(policy); 3048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chains[nextChain].count = *ctr; 3058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chains[nextChain].created = 0; 3068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez nextChain++; 3078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 3088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 3109ee386a1b6d7704b259460152c959ab0e79e02aaMax KellermannfinishChains(void) 3118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 3128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int c; 3138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (c = 0; c < nextChain; c++) 3158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!chains[c].created) { 3168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez openChain(chains[c].chain, chains[c].policy, 3178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez &(chains[c].count), '/'); 3188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free(chains[c].chain); 3198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free(chains[c].policy); 3208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 3218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez nextChain = 0; 3228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 3238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 3259ee386a1b6d7704b259460152c959ab0e79e02aaMax KellermanncloseTable(void) 3268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 3278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeChain(); 3288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez finishChains(); 3298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (curTable[0]) 3308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" </table>\n"); 3318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez curTable[0] = 0; 3328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 3338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 3358d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezopenTable(char *table) 3368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 3378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeTable(); 3388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strncpy(curTable, table, IPT_TABLE_MAXNAMELEN); 3408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez curTable[IPT_TABLE_MAXNAMELEN] = '\0'; 3418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" <table "); 3438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("name", curTable); 3448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 3458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 3468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez// is char* -j --jump -g or --goto 3488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int 3498d3eccb19a9c6fc006193d633b985205e350b9c5Amin AzezisTarget(char *arg) 3508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 3518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return ((arg) 3528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && (strcmp((arg), "-j") == 0 || strcmp((arg), "--jump") == 0 3538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp((arg), "-g") == 0 3548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp((arg), "--goto") == 0)); 3558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 3568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3578e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott// is it a terminating target like -j ACCEPT, etc 3588e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott// (or I guess -j SNAT in nat table, but we don't check for that yet 3598e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicottstatic int 3608e52815a55692d657aeca7f8ecf656cd65dcfce0Sam LiddicottisTerminatingTarget(char *arg) 3618e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott{ 3628e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott return ((arg) 3638e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott && (strcmp((arg), "ACCEPT") == 0 3648e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((arg), "DROP") == 0 3658e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((arg), "QUEUE") == 0 3668e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((arg), "RETURN") == 0)); 3678e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott} 3688e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott 3698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez// part=-1 means do conditions, part=1 means do rules, part=0 means do both 3708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 3718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezdo_rule_part(char *leveltag1, char *leveltag2, int part, int argc, 3728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *argv[], int argvattr[]) 3738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 3748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int arg = 1; // ignore leading -A 3758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char invert_next = 0; 3768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *spacer = ""; // space when needed to assemble arguments 3778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *level1 = NULL; 3788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *level2 = NULL; 3798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *leveli1 = " "; 3808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *leveli2 = " "; 3818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define CLOSE_LEVEL(LEVEL) \ 3838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez do { \ 3848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (level ## LEVEL) printf("</%s>\n", \ 3858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez (leveltag ## LEVEL)?(leveltag ## LEVEL):(level ## LEVEL)); \ 3868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level ## LEVEL=NULL;\ 3878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } while(0) 3888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#define OPEN_LEVEL(LEVEL,TAG) \ 3908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez do {\ 3918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level ## LEVEL=TAG;\ 3928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (leveltag ## LEVEL) {\ 3938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s<%s ", (leveli ## LEVEL), \ 3948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez (leveltag ## LEVEL));\ 3958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("type", (TAG)); \ 3968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else printf("%s<%s ", (leveli ## LEVEL), (level ## LEVEL)); \ 3978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } while(0) 3988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 3998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (part == 1) { /* skip */ 4008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* use argvattr to tell which arguments were quoted 4018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez to avoid comparing quoted arguments, like comments, to -j, */ 4028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (arg < argc && (argvattr[arg] || !isTarget(argv[arg]))) 4038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez arg++; 4048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 4058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 4068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* Before we start, if the first arg is -[^-] and not -m or -j or -g 4078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez then start a dummy <match> tag for old style built-in matches. 4088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez We would do this in any case, but no need if it would be empty */ 4098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (arg < argc && argv[arg][0] == '-' && !isTarget(argv[arg]) 4108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && strcmp(argv[arg], "-m") != 0) { 4118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(1, "match"); 4128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 4138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 4148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (arg < argc) { 4158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // If ! is followed by -* then apply to that else output as data 4168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // Stop, if we need to 4178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (part == -1 && !argvattr[arg] && (isTarget(argv[arg]))) { 4188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 4198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (!argvattr[arg] && strcmp(argv[arg], "!") == 0) { 4208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if ((arg + 1) < argc && argv[arg + 1][0] == '-') 4218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez invert_next = '!'; 4228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else 4238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s%s", spacer, argv[arg]); 4248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez spacer = " "; 4258d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (!argvattr[arg] && isTarget(argv[arg]) 4268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && existsChain(argv[arg + 1]) 4278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && (2 + arg >= argc)) { 4288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!((1 + arg) < argc)) 4298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // no args to -j, -m or -g, ignore & finish loop 4308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 4318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(2); 4328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (level1) 4338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s", leveli1); 4348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(1); 4358d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez spacer = ""; 4368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez invert_next = 0; 4378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (strcmp(argv[arg], "-g") == 0 4388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp(argv[arg], "--goto") == 0) { 4398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* goto user chain */ 4408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(1, "goto"); 4418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 4428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez arg++; 4438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(2, argv[arg]); 4448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("/>\n"); 4458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level2 = NULL; 4468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 4478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* call user chain */ 4488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(1, "call"); 4498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 4508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez arg++; 4518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(2, argv[arg]); 4528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("/>\n"); 4538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level2 = NULL; 4548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 4558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (!argvattr[arg] 4568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && (isTarget(argv[arg]) 4578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp(argv[arg], "-m") == 0 4588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp(argv[arg], "--module") == 0)) { 4598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!((1 + arg) < argc)) 4608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // no args to -j, -m or -g, ignore & finish loop 4618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 4628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(2); 4638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (level1) 4648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s", leveli1); 4658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(1); 4668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez spacer = ""; 4678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez invert_next = 0; 4688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez arg++; 4698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(1, (argv[arg])); 4708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // Optimize case, can we close this tag already? 4718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if ((arg + 1) >= argc || (!argvattr[arg + 1] 4728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && (isTarget(argv[arg + 1]) 4738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp(argv[arg + 1], 4748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "-m") == 0 4758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || strcmp(argv[arg + 1], 4768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "--module") == 4778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 0))) { 4788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" />\n"); 4798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level1 = NULL; 4808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 4818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 4828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 4838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (!argvattr[arg] && argv[arg][0] == '-') { 4848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *tag; 4858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(2); 4868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // Skip past any - 4878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez tag = argv[arg]; 4888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (*tag == '-' && *tag) 4898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez tag++; 4908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 4918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez spacer = ""; 4928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez OPEN_LEVEL(2, tag); 4938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (invert_next) 4948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" invert=\"1\""); 4958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez invert_next = 0; 4968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 4978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // Optimize case, can we close this tag already? 4988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!((arg + 1) < argc) 4998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || (argv[arg + 1][0] == '-' /* NOT QUOTED */ )) { 5008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" />\n"); 5018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez level2 = NULL; 5028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 5038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">"); 5048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { // regular data 5068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *spaces = strchr(argv[arg], ' '); 5078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s", spacer); 5088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (spaces || argvattr[arg]) 5098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("""); 5108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // if argv[arg] contains a space, enclose in quotes 5118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlEncode(argv[arg]); 5128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (spaces || argvattr[arg]) 5138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("""); 5148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez spacer = " "; 5158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez arg++; 5178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(2); 5198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (level1) 5208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s", leveli1); 5218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez CLOSE_LEVEL(1); 5228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 5238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic int 5259ee386a1b6d7704b259460152c959ab0e79e02aaMax KellermanncompareRules(void) 5268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 5278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* compare arguments up to -j or -g for match. 5288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez NOTE: We don't want to combine actions if there were no criteria 5298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez in each rule, or rules didn't have an action 5308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez NOTE: Depends on arguments being in some kind of "normal" order which 5318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez is the case when processing the ACTUAL output of actual iptables-save 5328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez rather than a file merely in a compatable format */ 5338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5347a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardt unsigned int old = 0; 5357a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardt unsigned int new = 0; 5368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int compare = 0; 5388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (new < newargc && old < oldargc) { 5408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (isTarget(oldargv[old]) && isTarget(newargv[new])) { 5418e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott /* if oldarg was a terminating action then it makes no sense 5428e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott * to combine further actions into the same xml */ 5438e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott if (((strcmp((oldargv[old]), "-j") == 0 5448e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((oldargv[old]), "--jump") == 0) 5458e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott && old+1 < oldargc 5468e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott && isTerminatingTarget(oldargv[old+1]) ) 5478e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((oldargv[old]), "-g") == 0 5488e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott || strcmp((oldargv[old]), "--goto") == 0 ) { 5498e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott /* Previous rule had terminating action */ 5508e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott compare = 0; 5518e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott } else { 5528e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott compare = 1; 5538e52815a55692d657aeca7f8ecf656cd65dcfce0Sam Liddicott } 5548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 5558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // break when old!=new 5578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (strcmp(oldargv[old], newargv[new]) != 0) { 5588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez compare = 0; 5598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 5608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez old++; 5638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez new++; 5648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // We won't match unless both rules had a target. 5668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez // This means we don't combine target-less rules, which is good 5678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return compare == 1; 5698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 5708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez/* has a nice parsed rule starting with -A */ 5728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezstatic void 5738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezdo_rule(char *pcnt, char *bcnt, int argc, char *argv[], int argvattr[]) 5748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 5758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* are these conditions the same as the previous rule? 5768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * If so, skip arg straight to -j or -g */ 5778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (combine && argc > 2 && !isTarget(argv[2]) && compareRules()) { 5788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlComment("Combine action from next rule"); 5798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 5808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (closeActionTag[0]) { 5828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s\n", closeActionTag); 5838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeActionTag[0] = 0; 5848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (closeRuleTag[0]) { 5868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("%s\n", closeRuleTag); 5878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeRuleTag[0] = 0; 5888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 5898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" <rule "); 5918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez //xmlAttrS("table",curTable); // not needed in full mode 5928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez //xmlAttrS("chain",argv[1]); // not needed in full mode 5938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (pcnt) 5948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("packet-count", pcnt); 5958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (bcnt) 5968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlAttrS("byte-count", bcnt); 5978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(">\n"); 5988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 5998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strncpy(closeRuleTag, " </rule>\n", IPT_TABLE_MAXNAMELEN); 6008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeRuleTag[IPT_TABLE_MAXNAMELEN] = '\0'; 6018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* no point in writing out condition if there isn't one */ 6038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (argc >= 3 && !isTarget(argv[2])) { 6048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" <conditions>\n"); 6058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez do_rule_part(NULL, NULL, -1, argc, argv, argvattr); 6068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" </conditions>\n"); 6078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* Write out the action */ 6108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez //do_rule_part("action","arg",1,argc,argv,argvattr); 6118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!closeActionTag[0]) { 6128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" <actions>\n"); 6138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strncpy(closeActionTag, " </actions>\n", 6148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez IPT_TABLE_MAXNAMELEN); 6158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeActionTag[IPT_TABLE_MAXNAMELEN] = '\0'; 6168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez do_rule_part(NULL, NULL, 1, argc, argv, argvattr); 6188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 6198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#ifdef IPTABLES_MULTI 6218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezint 622e78c69c8146c5dcd096ba13ac03d7a7bb90e3ea7Lutz Jaenickeiptables_xml_main(int argc, char *argv[]) 6238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#else 6248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezint 6258d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azezmain(int argc, char *argv[]) 6268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez#endif 6278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez{ 6288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char buffer[10240]; 6298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int c; 6308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez FILE *in; 6318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line = 0; 6338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6344dcdc9b3f8f42eb3b5a1d12e1b3d2fc1e2675725Jamal Hadi Salim xtables_set_params(&iptables_xml_globals); 6358d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while ((c = getopt_long(argc, argv, "cvh", options, NULL)) != -1) { 6368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez switch (c) { 6378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez case 'c': 6388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez combine = 1; 6398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 6408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez case 'v': 6418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("xptables-xml\n"); 6428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez verbose = 1; 6438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 6448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez case 'h': 645dacafa55379fd98212031d8c559096c91d7ce93bJan Engelhardt print_usage("iptables-xml", IPTABLES_VERSION); 6468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez break; 6478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (optind == argc - 1) { 651a239728ec064666025de2723997d87b176d57fd6Maciej Zenczykowski in = fopen(argv[optind], "re"); 6528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!in) { 6538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez fprintf(stderr, "Can't open %s: %s", argv[optind], 6548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strerror(errno)); 6558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 6568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (optind < argc) { 6588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez fprintf(stderr, "Unknown arguments found on commandline"); 6598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 6608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else 6618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez in = stdin; 6628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("<iptables-rules version=\"1.0\">\n"); 6648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* Grab standard input. */ 6668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez while (fgets(buffer, sizeof(buffer), in)) { 6678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int ret = 0; 6688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line++; 6708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (buffer[0] == '\n') 6728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez continue; 6738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez else if (buffer[0] == '#') { 6748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlComment(buffer); 6758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez continue; 6768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (verbose) { 6798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("<!-- line %d ", line); 6808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez xmlCommentEscape(buffer); 6818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf(" -->\n"); 6828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 6838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if ((strcmp(buffer, "COMMIT\n") == 0) && (curTable[0])) { 6858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("Calling commit\n"); 6868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez closeTable(); 6878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ret = 1; 6888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if ((buffer[0] == '*')) { 6898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* New table */ 6908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *table; 6918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 6928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez table = strtok(buffer + 1, " \t\n"); 6938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("line %u, table '%s'\n", line, table); 6948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!table) { 6951829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 6968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "%s: line %u table name invalid\n", 6975dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line); 6988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 6998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 7008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez openTable(table); 7018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ret = 1; 7038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if ((buffer[0] == ':') && (curTable[0])) { 7048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* New chain. */ 7058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *policy, *chain; 7068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez struct ipt_counters count; 7078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *ctrs; 7088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chain = strtok(buffer + 1, " \t\n"); 7108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("line %u, chain '%s'\n", line, chain); 7118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!chain) { 7121829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 7138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "%s: line %u chain name invalid\n", 7145dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line); 7158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 7168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 7178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("Creating new chain '%s'\n", chain); 7198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez policy = strtok(NULL, " \t\n"); 7218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("line %u, policy '%s'\n", line, policy); 7228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!policy) { 7231829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 7248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "%s: line %u policy invalid\n", 7255dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line); 7268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 7278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 7288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ctrs = strtok(NULL, " \t\n"); 7308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez parse_counters(ctrs, &count); 7318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez saveChain(chain, policy, &count); 7328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ret = 1; 7348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else if (curTable[0]) { 7357a236f4cc685a420c1a782a5db614a93baf37ccfJan Engelhardt unsigned int a; 7368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *ptr = buffer; 7378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *pcnt = NULL; 7388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *bcnt = NULL; 7398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *parsestart; 7408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *chain = NULL; 7418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* the parser */ 7438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char *param_start, *curchar; 7448d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int quote_open, quoted; 7458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* reset the newargv */ 7478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargc = 0; 7488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (buffer[0] == '[') { 7508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* we have counters in our input */ 7518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ptr = strchr(buffer, ']'); 7528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!ptr) 7531829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 7548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "Bad line %u: need ]\n", 7558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line); 7568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez pcnt = strtok(buffer + 1, ":"); 7588d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!pcnt) 7591829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 7608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "Bad line %u: need :\n", 7618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line); 7628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez bcnt = strtok(NULL, "]"); 7648d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!bcnt) 7651829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 7668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "Bad line %u: need ]\n", 7678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line); 7688d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7698d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* start command parsing after counter */ 7708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez parsestart = ptr + 1; 7718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 7728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* start command parsing at start of line */ 7738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez parsestart = buffer; 7748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 7758d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7768d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7778d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* This is a 'real' parser crafted in artist mode 7788d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * not hacker mode. If the author can live with that 7798d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * then so can everyone else */ 7808d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7818d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quote_open = 0; 7828d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* We need to know which args were quoted so we 7838d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez can preserve quote */ 7848d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quoted = 0; 7858d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez param_start = parsestart; 7868d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 7878d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (curchar = parsestart; *curchar; curchar++) { 7888d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (*curchar == '"') { 7898d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* quote_open cannot be true if there 7908d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * was no previous character. Thus, 7918d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez * curchar-1 has to be within bounds */ 7928d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (quote_open && 7938d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez *(curchar - 1) != '\\') { 7948d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quote_open = 0; 7958d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez *curchar = ' '; 7968d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 7978d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quote_open = 1; 7988d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quoted = 1; 7998d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez param_start++; 8008d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8018d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8028d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (*curchar == ' ' 8038d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || *curchar == '\t' || *curchar == '\n') { 8048d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez char param_buffer[1024]; 8058d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez int param_len = curchar - param_start; 8068d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8078d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (quote_open) 8088d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez continue; 8098d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8108d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!param_len) { 8118d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* two spaces? */ 8128d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez param_start++; 8138d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez continue; 8148d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8158d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8168d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* end of one parameter */ 8178d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strncpy(param_buffer, param_start, 8188d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez param_len); 8198d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez *(param_buffer + param_len) = '\0'; 8208d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8218d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* check if table name specified */ 8228d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!strncmp(param_buffer, "-t", 3) 8238d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez || !strncmp(param_buffer, 8248d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "--table", 8)) { 8251829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 8268d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "Line %u seems to have a " 8278d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez "-t table option.\n", 8288d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez line); 8298d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 8308d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8318d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8328d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez add_argv(param_buffer, quoted); 8338d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (newargc >= 2 8348d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez && 0 == 8358d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez strcmp(newargv[newargc - 2], "-A")) 8368d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez chain = newargv[newargc - 1]; 8378d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez quoted = 0; 8388d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez param_start += param_len + 1; 8398d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } else { 8408d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez /* regular character, skip */ 8418d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8428d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8438d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 844c1e04bd1b057151afaf7e6138089f2fe2c1b7d1cMaciej Zenczykowski DEBUGP("calling do_command4(%u, argv, &%s, handle):\n", 8458d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez newargc, curTable); 8468d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8478d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez for (a = 0; a < newargc; a++) 8488d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez DEBUGP("argv[%u]: %s\n", a, newargv[a]); 8498d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8508d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez needChain(chain);// Should we explicitly look for -A 8518d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez do_rule(pcnt, bcnt, newargc, newargv, newargvattr); 8528d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8538d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez save_argv(); 8548d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez ret = 1; 8558d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8568d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (!ret) { 8578d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez fprintf(stderr, "%s: line %u failed\n", 8585dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line); 8598d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 8608d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8618d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8628d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez if (curTable[0]) { 8638d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez fprintf(stderr, "%s: COMMIT expected at line %u\n", 8645dd19de34380c91ad07bbe79a34726e59891cf54Jamal Hadi Salim prog_name, line + 1); 8658d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez exit(1); 8668d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez } 8678d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 868f1afcc896e7f8be3a6419681fd8cdee1d600a3aaJan Engelhardt if (in != NULL) 869f1afcc896e7f8be3a6419681fd8cdee1d600a3aaJan Engelhardt fclose(in); 8708d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez printf("</iptables-rules>\n"); 8718d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez free_argv(); 8728d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez 8738d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez return 0; 8748d3eccb19a9c6fc006193d633b985205e350b9c5Amin Azez} 875