libipt_SNAT.c revision 40d54756cd8a2705e22b36f7aef03bb2c472a10b
1e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Shared library add-on to iptables to add source-NAT support. */ 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdio.h> 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <netdb.h> 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <string.h> 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdlib.h> 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <getopt.h> 7e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <iptables.h> 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <linux/netfilter_ipv4/ip_tables.h> 940d54756cd8a2705e22b36f7aef03bb2c472a10bPatrick McHardy#include <linux/netfilter/nf_nat.h> 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 11ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#define IPT_SNAT_OPT_SOURCE 0x01 12ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 13ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond# define IPT_SNAT_OPT_RANDOM 0x02 14ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 15ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond 16e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Source NAT data consists of a multi-range, indicating where to map 17e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher to. */ 18e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct ipt_natinfo 19e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 20e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_entry_target t; 21e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ip_nat_multi_range mr; 22e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 23e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 24e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Function which prints out usage message. */ 25e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 26e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherhelp(void) 27e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 28e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf( 29e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher"SNAT v%s options:\n" 30ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond" --to-source <ipaddr>[-<ipaddr>][:port-port]" 31ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 32ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond"[--random]" 33ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 34ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond"\n" 35e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher" Address to map source to.\n" 36e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher" (You can use this more than once)\n\n", 3780fe35d6339b53a12ddaec41885613e4e37ed031Harald WelteIPTABLES_VERSION); 38e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 39e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 40e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic struct option opts[] = { 41e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { "to-source", 1, 0, '1' }, 42ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 43ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond { "random", 0, 0, '2' }, 44ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 45e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { 0 } 46e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 47e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 48e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic struct ipt_natinfo * 49e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherappend_range(struct ipt_natinfo *info, const struct ip_nat_range *range) 50e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 51e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int size; 52e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 53e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* One rangesize already in struct ipt_natinfo */ 54e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher size = IPT_ALIGN(sizeof(*info) + info->mr.rangesize * sizeof(*range)); 55e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 56e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info = realloc(info, size); 57e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!info) 58e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(OTHER_PROBLEM, "Out of memory\n"); 59e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 60228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell info->t.u.target_size = size; 61e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.range[info->mr.rangesize] = *range; 62e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.rangesize++; 63e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 64e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return info; 65e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 66e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 67e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Ranges expected in network order. */ 68e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic struct ipt_entry_target * 69e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherparse_to(char *arg, int portok, struct ipt_natinfo *info) 70e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 71e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ip_nat_range range; 72de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte char *colon, *dash, *error; 73e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct in_addr *ip; 74e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 75e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&range, 0, sizeof(range)); 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher colon = strchr(arg, ':'); 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 78e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon) { 79e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int port; 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 81e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!portok) 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 83e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Need TCP or UDP with port specification"); 84e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 85e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.flags |= IP_NAT_RANGE_PROTO_SPECIFIED; 86e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 87e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher port = atoi(colon+1); 88a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (port <= 0 || port > 65535) 89e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 90e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", colon+1); 91e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 92de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte error = strchr(colon+1, ':'); 93de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte if (error) 94de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte exit_error(PARAMETER_PROBLEM, 95de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte "Invalid port:port syntax - use dash\n"); 96de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte 97e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(colon, '-'); 98e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!dash) { 99e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port 100e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = range.max.tcp.port 101e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = htons(port); 102e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 103e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int maxport; 104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 105e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher maxport = atoi(dash + 1); 106a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (maxport <= 0 || maxport > 65535) 107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 108e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", dash+1); 109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (maxport < port) 110e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* People are stupid. */ 111e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 112e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port range `%s' funky\n", colon+1); 113e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port = htons(port); 114e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max.tcp.port = htons(maxport); 115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Starts with a colon? No IP info...*/ 117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon == arg) 118e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 119e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *colon = '\0'; 120e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 121e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 122e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.flags |= IP_NAT_RANGE_MAP_IPS; 123e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(arg, '-'); 124e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon && dash && dash > colon) 125e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = NULL; 126e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 127e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) 128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *dash = '\0'; 129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ip = dotted_to_addr(arg); 131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 132e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, "Bad IP address `%s'\n", 133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher arg); 134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min_ip = ip->s_addr; 135e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) { 136e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ip = dotted_to_addr(dash+1); 137e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 138e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, "Bad IP address `%s'\n", 139e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash+1); 140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = ip->s_addr; 141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else 142e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = range.min_ip; 143e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 144e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 145e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 146e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 147e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Function which parses command options; returns true if it 148e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ate an option */ 149e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherparse(int c, char **argv, int invert, unsigned int *flags, 151e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const struct ipt_entry *entry, 152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_entry_target **target) 153e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 154e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)*target; 155e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int portok; 156e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 157e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (entry->ip.proto == IPPROTO_TCP 15836d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_UDP 15936d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_ICMP) 160e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 1; 161e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else 162e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 0; 163e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 164e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher switch (c) { 165e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher case '1': 166b77f1dafb9f35752bb9685323bcacb32a0e6ddc5Harald Welte if (check_inverse(optarg, &invert, NULL, 0)) 167e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 168e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Unexpected `!' after --to-source"); 169e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 170ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_SOURCE) { 1718cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (!kernel_version) 1728cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester get_kernel_version(); 1738cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (kernel_version > LINUX_VERSION(2, 6, 10)) 1748cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester exit_error(PARAMETER_PROBLEM, 1758cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester "Multiple --to-source not supported"); 1768cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester } 177e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *target = parse_to(optarg, portok, info); 178ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 179ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_RANDOM) 180ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond info->mr.range[0].flags |= IP_NAT_RANGE_PROTO_RANDOM; 181ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 182ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond *flags = IPT_SNAT_OPT_SOURCE; 183ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond return 1; 184ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond 185ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 186ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond case '2': 187ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_SOURCE) { 188ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond info->mr.range[0].flags |= IP_NAT_RANGE_PROTO_RANDOM; 189ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond *flags |= IPT_SNAT_OPT_RANDOM; 190ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond } else 191ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond *flags |= IPT_SNAT_OPT_RANDOM; 192e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 193ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 194e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 195e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher default: 196e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 197e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 198e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 199e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 200e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Final check; must have specfied --to-source. */ 201e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void final_check(unsigned int flags) 202e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 203ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (!(flags & IPT_SNAT_OPT_SOURCE)) 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher exit_error(PARAMETER_PROBLEM, 205e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "You must specify --to-source"); 206e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 207e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void print_range(const struct ip_nat_range *r) 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->flags & IP_NAT_RANGE_MAP_IPS) { 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct in_addr a; 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->min_ip; 214e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("%s", addr_to_dotted(&a)); 215e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max_ip != r->min_ip) { 216e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->max_ip; 217e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("-%s", addr_to_dotted(&a)); 218e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 219e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 220e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->flags & IP_NAT_RANGE_PROTO_SPECIFIED) { 221e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(":"); 222e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("%hu", ntohs(r->min.tcp.port)); 223e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max.tcp.port != r->min.tcp.port) 224e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("-%hu", ntohs(r->max.tcp.port)); 225e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 226ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#ifdef IP_NAT_RANGE_PROTO_RANDOM 227ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (r->flags & IP_NAT_RANGE_PROTO_RANDOM) { 228ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond printf(" random"); 229ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond } 230ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#endif 231e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 232e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 233e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Prints out the targinfo. */ 234e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherprint(const struct ipt_ip *ip, 236e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const struct ipt_entry_target *target, 237e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int numeric) 238e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)target; 240e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 241e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 242e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("to:"); 243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(" "); 246e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 248e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 249e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Saves the union ipt_targinfo in parsable form to stdout. */ 250e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 251e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchersave(const struct ipt_ip *ip, const struct ipt_entry_target *target) 252e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 253e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)target; 254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 255e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 256e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("--to-source "); 258e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 259e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(" "); 260e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 261e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 262e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2638caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neirastatic struct iptables_target snat = { 2648caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .next = NULL, 2658caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .name = "SNAT", 2668caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .version = IPTABLES_VERSION, 2678caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .size = IPT_ALIGN(sizeof(struct ip_nat_multi_range)), 2688caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .userspacesize = IPT_ALIGN(sizeof(struct ip_nat_multi_range)), 2698caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .help = &help, 2708caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .parse = &parse, 2718caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .final_check = &final_check, 2728caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .print = &print, 2738caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .save = &save, 2748caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .extra_opts = opts 275e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 276e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid _init(void) 278e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 279e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher register_target(&snat); 280e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 281