libipt_SNAT.c revision 978e27e8f8c2e49d0528c6c4ae3a56627fbe8492
1e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Shared library add-on to iptables to add source-NAT support. */ 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdio.h> 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <netdb.h> 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <string.h> 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdlib.h> 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <getopt.h> 75d9678ad3eabc34ac40dfe055d7f6a8e44445a5aJan Engelhardt#include <xtables.h> 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <iptables.h> 9e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <linux/netfilter_ipv4/ip_tables.h> 10978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardt#include <net/netfilter/nf_nat.h> 11e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 12ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond#define IPT_SNAT_OPT_SOURCE 0x01 13e656e265bc67a55f6e51aa07118f96c058a97798Patrick McHardy#define IPT_SNAT_OPT_RANDOM 0x02 14ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond 15e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Source NAT data consists of a multi-range, indicating where to map 16e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher to. */ 17e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct ipt_natinfo 18e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 19193df8ee3507f0c02762c88a16916c4ea950bd99Yasuyuki KOZAKAI struct xt_entry_target t; 20978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardt struct nf_nat_multi_range mr; 21e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 22e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 231d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_help(void) 24e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 25e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf( 268b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt"SNAT target options:\n" 27ef399a3033aa860ea1653b9c4306c0e78777e981Patrick McHardy" --to-source <ipaddr>[-<ipaddr>][:port-port]\n" 28e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher" Address to map source to.\n" 298b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt"[--random]\n"); 30e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 31e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 321d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic const struct option SNAT_opts[] = { 33500f483fff529dcd88ec96b9d5054be6cd6363a0Patrick McHardy { "to-source", 1, NULL, '1' }, 34500f483fff529dcd88ec96b9d5054be6cd6363a0Patrick McHardy { "random", 0, NULL, '2' }, 359ee386a1b6d7704b259460152c959ab0e79e02aaMax Kellermann { .name = NULL } 36e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 37e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 38e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic struct ipt_natinfo * 39978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardtappend_range(struct ipt_natinfo *info, const struct nf_nat_range *range) 40e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 41e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int size; 42e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 43e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* One rangesize already in struct ipt_natinfo */ 448b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt size = XT_ALIGN(sizeof(*info) + info->mr.rangesize * sizeof(*range)); 45e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 46e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info = realloc(info, size); 47e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!info) 481829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(OTHER_PROBLEM, "Out of memory\n"); 49e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 50228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell info->t.u.target_size = size; 51e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.range[info->mr.rangesize] = *range; 52e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher info->mr.rangesize++; 53e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 54e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return info; 55e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 56e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 57e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Ranges expected in network order. */ 58193df8ee3507f0c02762c88a16916c4ea950bd99Yasuyuki KOZAKAIstatic struct xt_entry_target * 59e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherparse_to(char *arg, int portok, struct ipt_natinfo *info) 60e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 61978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardt struct nf_nat_range range; 62de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte char *colon, *dash, *error; 63bd9438420d92c41a5cf20a53b7a18d3ddea4216dJan Engelhardt const struct in_addr *ip; 64e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 65e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&range, 0, sizeof(range)); 66e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher colon = strchr(arg, ':'); 67e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 68e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon) { 69e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int port; 70e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 71e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!portok) 721829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 735a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy "Need TCP, UDP, SCTP or DCCP with port specification"); 74e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 75e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.flags |= IP_NAT_RANGE_PROTO_SPECIFIED; 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher port = atoi(colon+1); 78a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (port <= 0 || port > 65535) 791829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", colon+1); 81e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 82de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte error = strchr(colon+1, ':'); 83de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte if (error) 841829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 85de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte "Invalid port:port syntax - use dash\n"); 86de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4dHarald Welte 87e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(colon, '-'); 88e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!dash) { 89e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port 90e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = range.max.tcp.port 91e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher = htons(port); 92e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 93e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int maxport; 94e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 95e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher maxport = atoi(dash + 1); 96a3a9c0d3e3d9df70c5ea2e64ef792e194dbfbde7Yasuyuki KOZAKAI if (maxport <= 0 || maxport > 65535) 971829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 98e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port `%s' not valid\n", dash+1); 99e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (maxport < port) 100e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* People are stupid. */ 1011829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 102e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Port range `%s' funky\n", colon+1); 103e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min.tcp.port = htons(port); 104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max.tcp.port = htons(maxport); 105e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 106e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Starts with a colon? No IP info...*/ 107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon == arg) 108e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *colon = '\0'; 110e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 111e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 112e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.flags |= IP_NAT_RANGE_MAP_IPS; 113e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = strchr(arg, '-'); 114e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (colon && dash && dash > colon) 115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash = NULL; 116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) 118e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *dash = '\0'; 119e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1201e01b0b82f70b0b11dcfbced485dbe7aeac4fb8cJan Engelhardt ip = xtables_numeric_to_ipaddr(arg); 121e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 1221829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, "Bad IP address \"%s\"\n", 123e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher arg); 124e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.min_ip = ip->s_addr; 125e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (dash) { 1261e01b0b82f70b0b11dcfbced485dbe7aeac4fb8cJan Engelhardt ip = xtables_numeric_to_ipaddr(dash+1); 127e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!ip) 1281829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, "Bad IP address \"%s\"\n", 129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher dash+1); 130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = ip->s_addr; 131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else 132e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher range.max_ip = range.min_ip; 133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return &(append_range(info, &range)->t); 135e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 136e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1371d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic int SNAT_parse(int c, char **argv, int invert, unsigned int *flags, 1381d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt const void *e, struct xt_entry_target **target) 139e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 140ac8b2718daf8a79a59b181f6e62495f307ae86b9Yasuyuki KOZAKAI const struct ipt_entry *entry = e; 141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)*target; 142e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int portok; 143e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 144e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (entry->ip.proto == IPPROTO_TCP 14536d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_UDP 1465a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy || entry->ip.proto == IPPROTO_SCTP 1475a942f9501f7ce287e1c37c553eb02a1e269e081Patrick McHardy || entry->ip.proto == IPPROTO_DCCP 14836d870c76621b94d51816d09eb8fd05e0fb0a0abPatrick McHardy || entry->ip.proto == IPPROTO_ICMP) 149e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 1; 150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else 151e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher portok = 0; 152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 153e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher switch (c) { 154e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher case '1': 1550f16c725aadaac7e670d632ecbaea3661ff00827Jan Engelhardt if (xtables_check_inverse(optarg, &invert, NULL, 0)) 1561829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 157e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Unexpected `!' after --to-source"); 158e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 159ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_SOURCE) { 1608cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (!kernel_version) 1618cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester get_kernel_version(); 1628cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester if (kernel_version > LINUX_VERSION(2, 6, 10)) 1631829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 1648cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester "Multiple --to-source not supported"); 1658cf65913bb6353bf0e92eab0669d1c4c53b43623Phil Oester } 166e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher *target = parse_to(optarg, portok, info); 167e656e265bc67a55f6e51aa07118f96c058a97798Patrick McHardy /* WTF do we need this for?? */ 168ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_RANDOM) 169ef399a3033aa860ea1653b9c4306c0e78777e981Patrick McHardy info->mr.range[0].flags |= IP_NAT_RANGE_PROTO_RANDOM; 170ef399a3033aa860ea1653b9c4306c0e78777e981Patrick McHardy *flags |= IPT_SNAT_OPT_SOURCE; 171ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond return 1; 172ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond 173ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond case '2': 174ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (*flags & IPT_SNAT_OPT_SOURCE) { 175ef399a3033aa860ea1653b9c4306c0e78777e981Patrick McHardy info->mr.range[0].flags |= IP_NAT_RANGE_PROTO_RANDOM; 176ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond *flags |= IPT_SNAT_OPT_RANDOM; 177ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond } else 178ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond *flags |= IPT_SNAT_OPT_RANDOM; 179e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 180e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 181e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher default: 182e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 183e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 184e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 185e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1861d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_check(unsigned int flags) 187e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 188ae4b0b3aa70c67f2eff303a3e75834e45c3794a7Eric Leblond if (!(flags & IPT_SNAT_OPT_SOURCE)) 1891829ed482efbc8b390cc760d012b3a4450494e1aJan Engelhardt xtables_error(PARAMETER_PROBLEM, 190e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "You must specify --to-source"); 191e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 192e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 193978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardtstatic void print_range(const struct nf_nat_range *r) 194e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 195e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->flags & IP_NAT_RANGE_MAP_IPS) { 196e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct in_addr a; 197e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 198e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->min_ip; 199e44ea7faa17c10c68f14f5338a7cc6e3291a0ce7Jan Engelhardt printf("%s", xtables_ipaddr_to_numeric(&a)); 200e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max_ip != r->min_ip) { 201e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher a.s_addr = r->max_ip; 202e44ea7faa17c10c68f14f5338a7cc6e3291a0ce7Jan Engelhardt printf("-%s", xtables_ipaddr_to_numeric(&a)); 203e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 205e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->flags & IP_NAT_RANGE_PROTO_SPECIFIED) { 206e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(":"); 207e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("%hu", ntohs(r->min.tcp.port)); 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (r->max.tcp.port != r->min.tcp.port) 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("-%hu", ntohs(r->max.tcp.port)); 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2131d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_print(const void *ip, const struct xt_entry_target *target, 2141d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt int numeric) 215e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 216e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)target; 217e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 218e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 219e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("to:"); 220e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 221e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 222e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(" "); 2239c67defe98f04f72f19dfd09c8030e1de4b8bf0fPatrick McHardy if (info->mr.range[i].flags & IP_NAT_RANGE_PROTO_RANDOM) 2249c67defe98f04f72f19dfd09c8030e1de4b8bf0fPatrick McHardy printf("random "); 225e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 226e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 227e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2281d5b63d12984d12c8d87242179855e17657be16dJan Engelhardtstatic void SNAT_save(const void *ip, const struct xt_entry_target *target) 229e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 230e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipt_natinfo *info = (void *)target; 231e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i = 0; 232e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 233e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < info->mr.rangesize; i++) { 234e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("--to-source "); 235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher print_range(&info->mr.range[i]); 236e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf(" "); 2379c67defe98f04f72f19dfd09c8030e1de4b8bf0fPatrick McHardy if (info->mr.range[i].flags & IP_NAT_RANGE_PROTO_RANDOM) 2389c67defe98f04f72f19dfd09c8030e1de4b8bf0fPatrick McHardy printf("--random "); 239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 240e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 241e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2428b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardtstatic struct xtables_target snat_tg_reg = { 2438caee8b9e34fed4562fcff553197c161fc9d9979Pablo Neira .name = "SNAT", 2448b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt .version = XTABLES_VERSION, 24503d99486d8283552705b58dc55b6085dffc38792Jan Engelhardt .family = NFPROTO_IPV4, 246978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardt .size = XT_ALIGN(sizeof(struct nf_nat_multi_range)), 247978e27e8f8c2e49d0528c6c4ae3a56627fbe8492Jan Engelhardt .userspacesize = XT_ALIGN(sizeof(struct nf_nat_multi_range)), 2481d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .help = SNAT_help, 2491d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .parse = SNAT_parse, 2501d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .final_check = SNAT_check, 2511d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .print = SNAT_print, 2521d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .save = SNAT_save, 2531d5b63d12984d12c8d87242179855e17657be16dJan Engelhardt .extra_opts = SNAT_opts, 254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 255e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 256e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid _init(void) 257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2588b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt xtables_register_target(&snat_tg_reg); 259e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 260