libxt_set.h revision d40f1628c3717daebc437a398a285e371b5b6f7f 
1#ifndef _LIBXT_SET_H
2#define _LIBXT_SET_H
3
4#include <unistd.h>
5#include <sys/types.h>
6#include <sys/socket.h>
7#include <errno.h>
8
9#ifdef DEBUG
10#define DEBUGP(x, args...) fprintf(stderr, x , ## args)
11#else
12#define DEBUGP(x, args...)
13#endif
14
15static int
16get_version(unsigned *version)
17{
18	int res, sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
19	struct ip_set_req_version req_version;
20	socklen_t size = sizeof(req_version);
21
22	if (sockfd < 0)
23		xtables_error(OTHER_PROBLEM,
24			      "Can't open socket to ipset.\n");
25
26	req_version.op = IP_SET_OP_VERSION;
27	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req_version, &size);
28	if (res != 0)
29		xtables_error(OTHER_PROBLEM,
30			      "Kernel module xt_set is not loaded in.\n");
31
32	*version = req_version.version;
33
34	return sockfd;
35}
36
37static void
38get_set_byid(char *setname, ip_set_id_t idx)
39{
40	struct ip_set_req_get_set req;
41	socklen_t size = sizeof(struct ip_set_req_get_set);
42	int res, sockfd;
43
44	sockfd = get_version(&req.version);
45	req.op = IP_SET_OP_GET_BYINDEX;
46	req.set.index = idx;
47	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
48	close(sockfd);
49
50	if (res != 0)
51		xtables_error(OTHER_PROBLEM,
52			"Problem when communicating with ipset, errno=%d.\n",
53			errno);
54	if (size != sizeof(struct ip_set_req_get_set))
55		xtables_error(OTHER_PROBLEM,
56			"Incorrect return size from kernel during ipset lookup, "
57			"(want %zu, got %zu)\n",
58			sizeof(struct ip_set_req_get_set), (size_t)size);
59	if (req.set.name[0] == '\0')
60		xtables_error(PARAMETER_PROBLEM,
61			"Set with index %i in kernel doesn't exist.\n", idx);
62
63	strncpy(setname, req.set.name, IPSET_MAXNAMELEN);
64}
65
66static void
67get_set_byname(const char *setname, struct xt_set_info *info)
68{
69	struct ip_set_req_get_set req;
70	socklen_t size = sizeof(struct ip_set_req_get_set);
71	int res, sockfd;
72
73	sockfd = get_version(&req.version);
74	req.op = IP_SET_OP_GET_BYNAME;
75	strncpy(req.set.name, setname, IPSET_MAXNAMELEN);
76	req.set.name[IPSET_MAXNAMELEN - 1] = '\0';
77	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
78	close(sockfd);
79
80	if (res != 0)
81		xtables_error(OTHER_PROBLEM,
82			"Problem when communicating with ipset, errno=%d.\n",
83			errno);
84	if (size != sizeof(struct ip_set_req_get_set))
85		xtables_error(OTHER_PROBLEM,
86			"Incorrect return size from kernel during ipset lookup, "
87			"(want %zu, got %zu)\n",
88			sizeof(struct ip_set_req_get_set), (size_t)size);
89	if (req.set.index == IPSET_INVALID_ID)
90		xtables_error(PARAMETER_PROBLEM,
91			      "Set %s doesn't exist.\n", setname);
92
93	info->index = req.set.index;
94}
95
96static void
97parse_dirs_v0(const char *opt_arg, struct xt_set_info_v0 *info)
98{
99	char *saved = strdup(opt_arg);
100	char *ptr, *tmp = saved;
101	int i = 0;
102
103	while (i < (IPSET_DIM_MAX - 1) && tmp != NULL) {
104		ptr = strsep(&tmp, ",");
105		if (strncmp(ptr, "src", 3) == 0)
106			info->u.flags[i++] |= IPSET_SRC;
107		else if (strncmp(ptr, "dst", 3) == 0)
108			info->u.flags[i++] |= IPSET_DST;
109		else
110			xtables_error(PARAMETER_PROBLEM,
111				"You must spefify (the comma separated list of) 'src' or 'dst'.");
112	}
113
114	if (tmp)
115		xtables_error(PARAMETER_PROBLEM,
116			      "Can't be more src/dst options than %i.",
117			      IPSET_DIM_MAX - 1);
118
119	free(saved);
120}
121
122static void
123parse_dirs(const char *opt_arg, struct xt_set_info *info)
124{
125	char *saved = strdup(opt_arg);
126	char *ptr, *tmp = saved;
127	int i = 0;
128
129	while (i < (IPSET_DIM_MAX - 1) && tmp != NULL) {
130		info->dim++;
131		ptr = strsep(&tmp, ",");
132		if (strncmp(ptr, "src", 3) == 0)
133			info->flags |= (1 << info->dim);
134		else if (strncmp(ptr, "dst", 3) != 0)
135			xtables_error(PARAMETER_PROBLEM,
136				"You must spefify (the comma separated list of) 'src' or 'dst'.");
137	}
138
139	if (tmp)
140		xtables_error(PARAMETER_PROBLEM,
141			      "Can't be more src/dst options than %i.",
142			      IPSET_DIM_MAX - 1);
143
144	free(saved);
145}
146
147#endif /*_LIBXT_SET_H*/
148