iprule.c revision 3123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5
1aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger/* 2aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * iprule.c "ip rule". 3aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 4aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * This program is free software; you can redistribute it and/or 5aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * modify it under the terms of the GNU General Public License 6aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * as published by the Free Software Foundation; either version 7aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 2 of the License, or (at your option) any later version. 8aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 9aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> 10aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 11aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 12aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * Changes: 13aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * 14aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger * Rani Assaf <rani@magic.metawire.com> 980929: resolve addresses 15aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger */ 16aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 17aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <stdio.h> 18aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <stdlib.h> 19aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <unistd.h> 20aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <syslog.h> 21aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <fcntl.h> 22aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <sys/socket.h> 23aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <netinet/in.h> 24aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <netinet/ip.h> 25aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <arpa/inet.h> 26aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include <string.h> 273123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf#include <linux/fib_rules.h> 28aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 29aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include "rt_names.h" 30aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger#include "utils.h" 3134e9564753075c756f96597e7aa57f969a403aafPatrick McHardy#include "ip_common.h" 32aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 33351efcde4e62967362a10b29f3b701cfecd7cdfcshemmingerextern struct rtnl_handle rth; 34351efcde4e62967362a10b29f3b701cfecd7cdfcshemminger 35aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemmingerstatic void usage(void) __attribute__((noreturn)); 36aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 37aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemmingerstatic void usage(void) 38aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger{ 3950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger fprintf(stderr, "Usage: ip rule [ list | add | del | flush ] SELECTOR ACTION\n"); 403123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf fprintf(stderr, "SELECTOR := [ not ] [ from PREFIX ] [ to PREFIX ] [ tos TOS ] [ fwmark FWMARK ]\n"); 41aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, " [ dev STRING ] [ pref NUMBER ]\n"); 42526afe400887be9b3168ef3c92c6b6ec3e184f5fnet[shemminger]!shemminger fprintf(stderr, "ACTION := [ table TABLE_ID ]\n"); 43aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, " [ prohibit | reject | unreachable ]\n"); 44aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, " [ realms [SRCREALM/]DSTREALM ]\n"); 45aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, "TABLE_ID := [ local | main | default | NUMBER ]\n"); 46aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger exit(-1); 47aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger} 48aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 4950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemmingerstatic int print_rule(const struct sockaddr_nl *who, struct nlmsghdr *n, 506dc9f016347441fbf94cf851c054b0f45ba32c1cosdl.net!shemminger void *arg) 51aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger{ 52aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger FILE *fp = (FILE*)arg; 53aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger struct rtmsg *r = NLMSG_DATA(n); 54aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger int len = n->nlmsg_len; 55aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger int host_len = -1; 5634e9564753075c756f96597e7aa57f969a403aafPatrick McHardy __u32 table; 57aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger struct rtattr * tb[RTA_MAX+1]; 58aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger char abuf[256]; 59aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger SPRINT_BUF(b1); 60aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 61aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (n->nlmsg_type != RTM_NEWRULE) 62aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 0; 63aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 64aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger len -= NLMSG_LENGTH(sizeof(*r)); 65aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (len < 0) 66aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return -1; 67aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 68aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger parse_rtattr(tb, RTA_MAX, RTM_RTA(r), len); 69aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 70aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (r->rtm_family == AF_INET) 71aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger host_len = 32; 72aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger else if (r->rtm_family == AF_INET6) 73aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger host_len = 128; 74aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger else if (r->rtm_family == AF_DECnet) 75aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger host_len = 16; 76aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger else if (r->rtm_family == AF_IPX) 77aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger host_len = 80; 78aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 79aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_PRIORITY]) 80aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "%u:\t", *(unsigned*)RTA_DATA(tb[RTA_PRIORITY])); 81aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger else 82aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "0:\t"); 83aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 843123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf if (r->rtm_flags & FIB_RULE_INVERT) 853123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf fprintf(fp, "not "); 863123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf 87aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_SRC]) { 88aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (r->rtm_src_len != host_len) { 89aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "from %s/%u ", rt_addr_n2a(r->rtm_family, 90aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_PAYLOAD(tb[RTA_SRC]), 91aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_DATA(tb[RTA_SRC]), 92aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger abuf, sizeof(abuf)), 93aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger r->rtm_src_len 94aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger ); 95aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else { 96aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "from %s ", format_host(r->rtm_family, 97aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_PAYLOAD(tb[RTA_SRC]), 98aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_DATA(tb[RTA_SRC]), 99aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger abuf, sizeof(abuf)) 100aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger ); 101aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 102aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (r->rtm_src_len) { 103aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "from 0/%d ", r->rtm_src_len); 104aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else { 105aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "from all "); 106aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 107aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 108aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_DST]) { 109aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (r->rtm_dst_len != host_len) { 110aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "to %s/%u ", rt_addr_n2a(r->rtm_family, 111aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_PAYLOAD(tb[RTA_DST]), 112aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_DATA(tb[RTA_DST]), 113aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger abuf, sizeof(abuf)), 114aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger r->rtm_dst_len 115aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger ); 116aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else { 117aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "to %s ", format_host(r->rtm_family, 118aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_PAYLOAD(tb[RTA_DST]), 119aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_DATA(tb[RTA_DST]), 120aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger abuf, sizeof(abuf))); 121aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 122aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (r->rtm_dst_len) { 123aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "to 0/%d ", r->rtm_dst_len); 124aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 125aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 126aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (r->rtm_tos) { 127aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger SPRINT_BUF(b1); 128aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "tos %s ", rtnl_dsfield_n2a(r->rtm_tos, b1, sizeof(b1))); 129aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 130aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_PROTOINFO]) { 1314fb466f9446d42fe3591520bf1b1e9ab7ee54f71org[shemminger]!shemminger fprintf(fp, "fwmark %#x ", *(__u32*)RTA_DATA(tb[RTA_PROTOINFO])); 132aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 133aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 134aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_IIF]) { 135aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "iif %s ", (char*)RTA_DATA(tb[RTA_IIF])); 136aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 137aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 13834e9564753075c756f96597e7aa57f969a403aafPatrick McHardy table = rtm_get_table(r, tb); 13934e9564753075c756f96597e7aa57f969a403aafPatrick McHardy if (table) 14034e9564753075c756f96597e7aa57f969a403aafPatrick McHardy fprintf(fp, "lookup %s ", rtnl_rttable_n2a(table, b1, sizeof(b1))); 141aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 142aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_FLOW]) { 143aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 to = *(__u32*)RTA_DATA(tb[RTA_FLOW]); 144aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 from = to>>16; 145aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger to &= 0xFFFF; 146aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (from) { 147aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "realms %s/", 148aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger rtnl_rtrealm_n2a(from, b1, sizeof(b1))); 149aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 150aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "%s ", 151aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger rtnl_rtrealm_n2a(to, b1, sizeof(b1))); 152aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 153aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 154aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (r->rtm_type == RTN_NAT) { 155aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (tb[RTA_GATEWAY]) { 156aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "map-to %s ", 157aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger format_host(r->rtm_family, 158aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_PAYLOAD(tb[RTA_GATEWAY]), 159aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger RTA_DATA(tb[RTA_GATEWAY]), 160aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger abuf, sizeof(abuf))); 161aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else 162aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "masquerade"); 163aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (r->rtm_type != RTN_UNICAST) 164aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "%s", rtnl_rtntype_n2a(r->rtm_type, b1, sizeof(b1))); 165aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 166aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(fp, "\n"); 167aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fflush(fp); 168aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 0; 169aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger} 170aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 17150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemmingerstatic int iprule_list(int argc, char **argv) 172aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger{ 173aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger int af = preferred_family; 174aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 175aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (af == AF_UNSPEC) 176aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger af = AF_INET; 177aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 178aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (argc > 0) { 1790284dcde32ccb3181c04f449ea41a0502fb91f07net[shemminger]!shemminger fprintf(stderr, "\"ip rule show\" does not take any arguments.\n"); 180aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return -1; 181aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 182aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 183aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_wilddump_request(&rth, af, RTM_GETRULE) < 0) { 184aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger perror("Cannot send dump request"); 185aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 1; 186aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 187aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 188aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_dump_filter(&rth, print_rule, stdout, NULL, NULL) < 0) { 189aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, "Dump terminated\n"); 190aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 1; 191aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 192aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 193aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 0; 194aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger} 195aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 196aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 19750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemmingerstatic int iprule_modify(int cmd, int argc, char **argv) 198aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger{ 199aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger int table_ok = 0; 200aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger struct { 201aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger struct nlmsghdr n; 202aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger struct rtmsg r; 203aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger char buf[1024]; 204aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } req; 205aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 206aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger memset(&req, 0, sizeof(req)); 207aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 208aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.n.nlmsg_type = cmd; 209aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtmsg)); 210aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.n.nlmsg_flags = NLM_F_REQUEST; 211aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_family = preferred_family; 212aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_protocol = RTPROT_BOOT; 213aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_scope = RT_SCOPE_UNIVERSE; 214aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_table = 0; 215aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_type = RTN_UNSPEC; 2163123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf req.r.rtm_flags = 0; 217aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 218aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (cmd == RTM_NEWRULE) { 219aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.n.nlmsg_flags |= NLM_F_CREATE|NLM_F_EXCL; 220aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_type = RTN_UNICAST; 221aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 222aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 223aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger while (argc > 0) { 2243123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf if (strcmp(*argv, "not") == 0) { 2253123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf req.r.rtm_flags |= FIB_RULE_INVERT; 2263123a0ccdd6b2f0b30c9e7d87c4a698577b3e5a5Thomas Graf } else if (strcmp(*argv, "from") == 0) { 227aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger inet_prefix dst; 228aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 229aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger get_prefix(&dst, *argv, req.r.rtm_family); 230aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_src_len = dst.bitlen; 231aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr_l(&req.n, sizeof(req), RTA_SRC, &dst.data, dst.bytelen); 232aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (strcmp(*argv, "to") == 0) { 233aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger inet_prefix dst; 234aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 235aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger get_prefix(&dst, *argv, req.r.rtm_family); 236aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_dst_len = dst.bitlen; 237aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr_l(&req.n, sizeof(req), RTA_DST, &dst.data, dst.bytelen); 238aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(*argv, "preference") == 0 || 239aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger matches(*argv, "order") == 0 || 240aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger matches(*argv, "priority") == 0) { 241aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 pref; 242aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 243aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (get_u32(&pref, *argv, 0)) 244aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("preference value is invalid\n", *argv); 245aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr32(&req.n, sizeof(req), RTA_PRIORITY, pref); 246aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (strcmp(*argv, "tos") == 0) { 247aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 tos; 248aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 249aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_dsfield_a2n(&tos, *argv)) 250aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("TOS value is invalid\n", *argv); 251aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_tos = tos; 252aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (strcmp(*argv, "fwmark") == 0) { 253aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 fwmark; 254aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 2554fb466f9446d42fe3591520bf1b1e9ab7ee54f71org[shemminger]!shemminger if (get_u32(&fwmark, *argv, 0)) 256aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("fwmark value is invalid\n", *argv); 257aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr32(&req.n, sizeof(req), RTA_PROTOINFO, fwmark); 258aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(*argv, "realms") == 0) { 259aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger __u32 realm; 260aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 261aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (get_rt_realms(&realm, *argv)) 262aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("invalid realms\n", *argv); 263aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr32(&req.n, sizeof(req), RTA_FLOW, realm); 264aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(*argv, "table") == 0 || 265aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger strcmp(*argv, "lookup") == 0) { 266f332d169246447bd5e258ac03d5ee840a70adb1eshemminger __u32 tid; 267aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 268aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_rttable_a2n(&tid, *argv)) 269aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("invalid table ID\n", *argv); 27034e9564753075c756f96597e7aa57f969a403aafPatrick McHardy if (tid < 256) 27134e9564753075c756f96597e7aa57f969a403aafPatrick McHardy req.r.rtm_table = tid; 27234e9564753075c756f96597e7aa57f969a403aafPatrick McHardy else { 27334e9564753075c756f96597e7aa57f969a403aafPatrick McHardy req.r.rtm_table = RT_TABLE_UNSPEC; 27434e9564753075c756f96597e7aa57f969a403aafPatrick McHardy addattr32(&req.n, sizeof(req), RTA_TABLE, tid); 27534e9564753075c756f96597e7aa57f969a403aafPatrick McHardy } 276aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger table_ok = 1; 277aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (strcmp(*argv, "dev") == 0 || 278aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger strcmp(*argv, "iif") == 0) { 279aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 280aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr_l(&req.n, sizeof(req), RTA_IIF, *argv, strlen(*argv)+1); 281aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (strcmp(*argv, "nat") == 0 || 282aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger matches(*argv, "map-to") == 0) { 283aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 284526afe400887be9b3168ef3c92c6b6ec3e184f5fnet[shemminger]!shemminger fprintf(stderr, "Warning: route NAT is deprecated\n"); 285aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger addattr32(&req.n, sizeof(req), RTA_GATEWAY, get_addr32(*argv)); 286aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_type = RTN_NAT; 287aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else { 288aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger int type; 289aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 290aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (strcmp(*argv, "type") == 0) { 291aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger NEXT_ARG(); 292aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 293aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (matches(*argv, "help") == 0) 294aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger usage(); 295aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_rtntype_a2n(&type, *argv)) 296aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger invarg("Failed to parse rule type", *argv); 297aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_type = type; 298aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 299aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger argc--; 300aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger argv++; 301aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } 302aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 303aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (req.r.rtm_family == AF_UNSPEC) 304aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_family = AF_INET; 305aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 306aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (!table_ok && cmd == RTM_NEWRULE) 307aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger req.r.rtm_table = RT_TABLE_MAIN; 308aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 309aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (rtnl_talk(&rth, &req.n, 0, 0, NULL, NULL, NULL) < 0) 310aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 2; 311aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 312aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return 0; 313aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger} 314aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 31550772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 31650772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemmingerstatic int flush_rule(const struct sockaddr_nl *who, struct nlmsghdr *n, void *arg) 31750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger{ 318b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger struct rtnl_handle rth2; 31950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger struct rtmsg *r = NLMSG_DATA(n); 32050772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger int len = n->nlmsg_len; 32150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger struct rtattr * tb[RTA_MAX+1]; 32250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 32350772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger len -= NLMSG_LENGTH(sizeof(*r)); 32450772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (len < 0) 32550772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return -1; 32650772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 32750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger parse_rtattr(tb, RTA_MAX, RTM_RTA(r), len); 32850772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 32950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (tb[RTA_PRIORITY]) { 33050772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger n->nlmsg_type = RTM_DELRULE; 33150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger n->nlmsg_flags = NLM_F_REQUEST; 33250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 333b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger if (rtnl_open(&rth2, 0) < 0) 334b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger return -1; 335b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger 336b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger if (rtnl_talk(&rth2, n, 0, 0, NULL, NULL, NULL) < 0) 33750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return -2; 338b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger 339b77caeba0e8809c8e3d22d0cbea42e41f5522fdfshemminger rtnl_close(&rth2); 34050772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger } 34150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 34250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return 0; 34350772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger} 34450772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 34550772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemmingerstatic int iprule_flush(int argc, char **argv) 34650772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger{ 34750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger int af = preferred_family; 34850772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 34950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (af == AF_UNSPEC) 35050772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger af = AF_INET; 35150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 35250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (argc > 0) { 353660818498d0f5a3f52c05355a3e82c23f670fcc1shemminger fprintf(stderr, "\"ip rule flush\" does not allow arguments\n"); 35450772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return -1; 35550772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger } 35650772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 35750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (rtnl_wilddump_request(&rth, af, RTM_GETRULE) < 0) { 35850772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger perror("Cannot send dump request"); 35950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return 1; 36050772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger } 36150772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 36250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger if (rtnl_dump_filter(&rth, flush_rule, NULL, NULL, NULL) < 0) { 36350772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger fprintf(stderr, "Flush terminated\n"); 36450772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return 1; 36550772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger } 36650772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 36750772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return 0; 36850772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger} 36950772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger 370aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemmingerint do_iprule(int argc, char **argv) 371aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger{ 372aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger if (argc < 1) { 373aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return iprule_list(0, NULL); 374aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(argv[0], "list") == 0 || 375aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger matches(argv[0], "lst") == 0 || 376aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger matches(argv[0], "show") == 0) { 377aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return iprule_list(argc-1, argv+1); 378aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(argv[0], "add") == 0) { 379aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return iprule_modify(RTM_NEWRULE, argc-1, argv+1); 380aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(argv[0], "delete") == 0) { 381aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger return iprule_modify(RTM_DELRULE, argc-1, argv+1); 38250772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger } else if (matches(argv[0], "flush") == 0) { 38350772dc51ac02239958e1ebcdb21277fcdf133a7osdl.net!shemminger return iprule_flush(argc-1, argv+1); 384aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger } else if (matches(argv[0], "help") == 0) 385aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger usage(); 386aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 387aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger fprintf(stderr, "Command \"%s\" is unknown, try \"ip rule help\".\n", *argv); 388aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger exit(-1); 389aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger} 390aba5acdfdb347d2c21fc67d613d83d4430ca3937osdl.org!shemminger 391