libip6t_SNPT.c revision 0c3753b1d4226a6e7bea9619415cf40cadee1e58 
1/*
2 * Copyright (c) 2012-2013 Patrick McHardy <kaber@trash.net>
3 */
4
5#include <stdio.h>
6#include <string.h>
7#include <xtables.h>
8#include <linux/netfilter_ipv6/ip6_tables.h>
9#include <linux/netfilter_ipv6/ip6t_NPT.h>
10
11enum {
12	O_SRC_PFX	= 1 << 0,
13	O_DST_PFX	= 1 << 1,
14};
15
16static const struct xt_option_entry SNPT_options[] = {
17	{ .name = "src-pfx", .id = O_SRC_PFX, .type = XTTYPE_HOSTMASK,
18	  .flags = XTOPT_MAND },
19	{ .name = "dst-pfx", .id = O_DST_PFX, .type = XTTYPE_HOSTMASK,
20	  .flags = XTOPT_MAND },
21	{ }
22};
23
24static void SNPT_help(void)
25{
26	printf("SNPT target options:"
27	       "\n"
28	       " --src-pfx prefix/length\n"
29	       " --dst-pfx prefix/length\n"
30	       "\n");
31}
32
33static void SNPT_parse(struct xt_option_call *cb)
34{
35	struct ip6t_npt_tginfo *npt = cb->data;
36
37	xtables_option_parse(cb);
38	switch (cb->entry->id) {
39	case O_SRC_PFX:
40		npt->src_pfx = cb->val.haddr;
41		npt->src_pfx_len = cb->val.hlen;
42		break;
43	case O_DST_PFX:
44		npt->dst_pfx = cb->val.haddr;
45		npt->dst_pfx_len = cb->val.hlen;
46		break;
47	}
48}
49
50static void SNPT_print(const void *ip, const struct xt_entry_target *target,
51		       int numeric)
52{
53	const struct ip6t_npt_tginfo *npt = (const void *)target->data;
54
55	printf("src-pfx %s/%u ", xtables_ip6addr_to_numeric(&npt->src_pfx.in6),
56				 npt->src_pfx_len);
57	printf("dst-pfx %s/%u ", xtables_ip6addr_to_numeric(&npt->dst_pfx.in6),
58				 npt->dst_pfx_len);
59}
60
61static void SNPT_save(const void *ip, const struct xt_entry_target *target)
62{
63	static const struct in6_addr zero_addr;
64	const struct ip6t_npt_tginfo *info = (const void *)target->data;
65
66	if (memcmp(&info->src_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 ||
67	    info->src_pfx_len != 0)
68		printf("--src-pfx %s/%u ",
69		       xtables_ip6addr_to_numeric(&info->src_pfx.in6),
70		       info->src_pfx_len);
71	if (memcmp(&info->dst_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 ||
72	    info->dst_pfx_len != 0)
73		printf("--dst-pfx %s/%u ",
74		       xtables_ip6addr_to_numeric(&info->dst_pfx.in6),
75		       info->dst_pfx_len);
76}
77
78static struct xtables_target snpt_tg_reg = {
79	.name		= "SNPT",
80	.version	= XTABLES_VERSION,
81	.family		= NFPROTO_IPV6,
82	.size		= XT_ALIGN(sizeof(struct ip6t_npt_tginfo)),
83	.userspacesize	= offsetof(struct ip6t_npt_tginfo, adjustment),
84	.help		= SNPT_help,
85	.x6_parse	= SNPT_parse,
86	.print		= SNPT_print,
87	.save		= SNPT_save,
88	.x6_options	= SNPT_options,
89};
90
91void _init(void)
92{
93	xtables_register_target(&snpt_tg_reg);
94}
95