1e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdio.h> 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <netdb.h> 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <string.h> 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdlib.h> 55d9678ad3eabc34ac40dfe055d7f6a8e44445a5aJan Engelhardt#include <xtables.h> 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <iptables.h> 74e41854423b529d3107c23b85434d50a75d08057Jan Engelhardt#include <limits.h> /* INT_MAX in ip_tables.h */ 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <linux/netfilter_ipv4/ip_tables.h> 9e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy#include <linux/netfilter/nf_nat.h> 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 119f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardtenum { 129f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt O_TO_SRC = 0, 139f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt O_RANDOM, 149f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt O_PERSISTENT, 15f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt O_X_TO_SRC, 16f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt F_TO_SRC = 1 << O_TO_SRC, 17f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt F_RANDOM = 1 << O_RANDOM, 18f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt F_X_TO_SRC = 1 << O_X_TO_SRC, 199f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt}; 20ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond 21e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Source NAT data consists of a multi-range, indicating where to map 22e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher to. */ 23e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct ipt_natinfo 24e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 25193df8ee3507f0c02762c88a16916c4ea950bd99Yasuyuki KOZAKAI struct xt_entry_target t; 26e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy struct nf_nat_ipv4_multi_range_compat mr; 27e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 28e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 291d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_help(void) 30e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 31e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf( 328b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt"SNAT target options:\n" 3358e9118dc61c9ff656c0140c429f0fa892c36ac5Jan Engelhardt" --to-source [<ipaddr>[-<ipaddr>]][:port[-port]]\n" 34e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher" Address to map source to.\n" 35467fa9fe70f08342a50b859ddd431c848a956679Patrick McHardy"[--random] [--persistent]\n"); 36e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 37e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 389f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardtstatic const struct xt_option_entry SNAT_opts[] = { 399f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt {.name = "to-source", .id = O_TO_SRC, .type = XTTYPE_STRING, 409f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt .flags = XTOPT_MAND | XTOPT_MULTI}, 419f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt {.name = "random", .id = O_RANDOM, .type = XTTYPE_NONE}, 429f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt {.name = "persistent", .id = O_PERSISTENT, .type = XTTYPE_NONE}, 439f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt XTOPT_TABLEEND, 44e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 45e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 46e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic struct ipt_natinfo * 47e62f426c7ead7c0025d15860df97426db6509942Patrick McHardyappend_range(struct ipt_natinfo *info, const struct nf_nat_ipv4_range *range) 48e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 49e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int size; 50e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 51e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* One rangesize already in struct ipt_natinfo */ 528b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt size = XT_ALIGN(sizeof(*info) + info->mr.rangesize * sizeof(*range)); 53e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 54e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info = realloc(info, size); 55e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!info) 561829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(OTHER_PROBLEM, "Out of memory\n"); 57e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 58228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell info->t.u.target_size = size; 59e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.range[info->mr.rangesize] = *range; 60e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.rangesize++; 61e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 62e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return info; 63e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 64e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 65e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Ranges expected in network order. */ 66193df8ee3507f0c02762c88a16916c4ea950bd99Yasuyuki KOZAKAIstatic struct xt_entry_target * 679f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardtparse_to(const char *orig_arg, int portok, struct ipt_natinfo *info) 68e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 69e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy struct nf_nat_ipv4_range range; 709f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt char *arg, *colon, *dash, *error; 71bd9438420d92c41a5cf20a53b7a18d3ddea4216dJan Engelhardt const struct in_addr *ip; 72e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 739f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt arg = strdup(orig_arg); 749f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt if (arg == NULL) 759f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt xtables_error(RESOURCE_PROBLEM, "strdup"); 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&range, 0, sizeof(range)); 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher colon = strchr(arg, ':'); 78e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 79e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon) { 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int port; 81e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!portok) 831829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 845a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy "Need TCP, UDP, SCTP or DCCP with port specification"); 85e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 86e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy range.flags |= NF_NAT_RANGE_PROTO_SPECIFIED; 87e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 88e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher port = atoi(colon+1); 89a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (port <= 0 || port > 65535) 901829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 91e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", colon+1); 92e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 93de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte error = strchr(colon+1, ':'); 94de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte if (error) 951829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 96de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte "Invalid port:port syntax - use dash\n"); 97de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte 98e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(colon, '-'); 99e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!dash) { 100e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port 101e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = range.max.tcp.port 102e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = htons(port); 103e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int maxport; 105e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 106e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher maxport = atoi(dash + 1); 107a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (maxport <= 0 || maxport > 65535) 1081829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", dash+1); 110e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (maxport < port) 111e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* People are stupid. */ 1121829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 113e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port range `%s' funky\n", colon+1); 114e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port = htons(port); 115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max.tcp.port = htons(maxport); 116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Starts with a colon? No IP info...*/ 1189f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt if (colon == arg) { 1199f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt free(arg); 120e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 1219f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt } 122e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *colon = '\0'; 123e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 124e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 125e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy range.flags |= NF_NAT_RANGE_MAP_IPS; 126e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(arg, '-'); 127e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon && dash && dash > colon) 128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = NULL; 129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) 131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *dash = '\0'; 132e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1331e01b0b82f70b0b11dcfbced485dbe7aeac4fb8cJan Engelhardt ip = xtables_numeric_to_ipaddr(arg); 134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 1351829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, "Bad IP address \"%s\"\n", 136e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher arg); 137e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min_ip = ip->s_addr; 138e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) { 1391e01b0b82f70b0b11dcfbced485dbe7aeac4fb8cJan Engelhardt ip = xtables_numeric_to_ipaddr(dash+1); 140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 1411829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, "Bad IP address \"%s\"\n", 142e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash+1); 143e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = ip->s_addr; 144e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else 145e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = range.min_ip; 146e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1479f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt free(arg); 148e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 149e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1519f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardtstatic void SNAT_parse(struct xt_option_call *cb) 152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1539f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt const struct ipt_entry *entry = cb->xt_entry; 1549f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt struct ipt_natinfo *info = (void *)(*cb->target); 155e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int portok; 156e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 157e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (entry->ip.proto == IPPROTO_TCP 15836d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_UDP 1595a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy || entry->ip.proto == IPPROTO_SCTP 1605a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy || entry->ip.proto == IPPROTO_DCCP 16136d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_ICMP) 162e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 1; 163e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else 164e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 0; 165e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1669f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt xtables_option_parse(cb); 1679f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt switch (cb->entry->id) { 1689f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt case O_TO_SRC: 169f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt if (cb->xflags & F_X_TO_SRC) { 1708cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (!kernel_version) 1718cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester get_kernel_version(); 1728cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (kernel_version > LINUX_VERSION(2, 6, 10)) 1731829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 174e82d031af24c8155357c6f2d2b2e236bd6cf67e4Jan Engelhardt "SNAT: Multiple --to-source not supported"); 1758cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester } 1769f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt *cb->target = parse_to(cb->arg, portok, info); 177f25b2355e889290879c8cecad3dd24ec0c384fb8Jan Engelhardt cb->xflags |= F_X_TO_SRC; 1789f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt break; 1799f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt case O_PERSISTENT: 180e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy info->mr.range[0].flags |= NF_NAT_RANGE_PERSISTENT; 1819f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt break; 182e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 183e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 184e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1853964023f8640b60456373825b326b91badd7a058Jan Engelhardtstatic void SNAT_fcheck(struct xt_fcheck_call *cb) 1863964023f8640b60456373825b326b91badd7a058Jan Engelhardt{ 1873964023f8640b60456373825b326b91badd7a058Jan Engelhardt static const unsigned int f = F_TO_SRC | F_RANDOM; 188e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy struct nf_nat_ipv4_multi_range_compat *mr = cb->data; 1893964023f8640b60456373825b326b91badd7a058Jan Engelhardt 1903964023f8640b60456373825b326b91badd7a058Jan Engelhardt if ((cb->xflags & f) == f) 191e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy mr->range[0].flags |= NF_NAT_RANGE_PROTO_RANDOM; 1923964023f8640b60456373825b326b91badd7a058Jan Engelhardt} 1933964023f8640b60456373825b326b91badd7a058Jan Engelhardt 194e62f426c7ead7c0025d15860df97426db6509942Patrick McHardystatic void print_range(const struct nf_nat_ipv4_range *r) 195e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 196e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (r->flags & NF_NAT_RANGE_MAP_IPS) { 197e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct in_addr a; 198e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 199e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->min_ip; 200e44ea7faa17c10c68f14f5338a7cc6e3291a0ce7Jan Engelhardt printf("%s", xtables_ipaddr_to_numeric(&a)); 201e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max_ip != r->min_ip) { 202e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->max_ip; 203e44ea7faa17c10c68f14f5338a7cc6e3291a0ce7Jan Engelhardt printf("-%s", xtables_ipaddr_to_numeric(&a)); 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 205e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 206e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (r->flags & NF_NAT_RANGE_PROTO_SPECIFIED) { 207e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(":"); 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("%hu", ntohs(r->min.tcp.port)); 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max.tcp.port != r->min.tcp.port) 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("-%hu", ntohs(r->max.tcp.port)); 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2141d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_print(const void *ip, const struct xt_entry_target *target, 2151d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt int numeric) 216e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 21769f564e3890976461de0016cd81171ff8bfa8353Jan Engelhardt const struct ipt_natinfo *info = (const void *)target; 218e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 219e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 22073866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" to:"); 221e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 222e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 223e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (info->mr.range[i].flags & NF_NAT_RANGE_PROTO_RANDOM) 22473866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" random"); 225e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (info->mr.range[i].flags & NF_NAT_RANGE_PERSISTENT) 22673866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" persistent"); 227e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 228e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 229e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2301d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_save(const void *ip, const struct xt_entry_target *target) 231e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 23269f564e3890976461de0016cd81171ff8bfa8353Jan Engelhardt const struct ipt_natinfo *info = (const void *)target; 233e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 234e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 23673866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" --to-source "); 237e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 238e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (info->mr.range[i].flags & NF_NAT_RANGE_PROTO_RANDOM) 23973866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" --random"); 240e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy if (info->mr.range[i].flags & NF_NAT_RANGE_PERSISTENT) 24173866357e4a7a0fdc1b293bf8863fee2bd56da9eJan Engelhardt printf(" --persistent"); 242e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2458b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardtstatic struct xtables_target snat_tg_reg = { 2468caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .name = "SNAT", 2478b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt .version = XTABLES_VERSION, 24803d99486d8283552705b58dc55b6085dffc38792Jan Engelhardt .family = NFPROTO_IPV4, 249e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy .size = XT_ALIGN(sizeof(struct nf_nat_ipv4_multi_range_compat)), 250e62f426c7ead7c0025d15860df97426db6509942Patrick McHardy .userspacesize = XT_ALIGN(sizeof(struct nf_nat_ipv4_multi_range_compat)), 2511d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .help = SNAT_help, 2529f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt .x6_parse = SNAT_parse, 2533964023f8640b60456373825b326b91badd7a058Jan Engelhardt .x6_fcheck = SNAT_fcheck, 2541d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .print = SNAT_print, 2551d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .save = SNAT_save, 2569f4a637ee5856e8f260e3f3867782ed5584e00f9Jan Engelhardt .x6_options = SNAT_opts, 257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 258e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 259e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid _init(void) 260e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2618b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt xtables_register_target(&snat_tg_reg); 262e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 263