libip6t_mh.c revision b85256b07a2939d712a2547bc151653eae511909 
1/* Shared library add-on to ip6tables to add mobility header support. */
2/*
3 * Copyright (C)2006 USAGI/WIDE Project
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Author:
10 *	Masahide NAKAMURA @USAGI <masahide.nakamura.cz@hitachi.com>
11 *
12 * Based on libip6t_{icmpv6,udp}.c
13 */
14#include <stdio.h>
15#include <netdb.h>
16#include <string.h>
17#include <stdlib.h>
18#include <getopt.h>
19#include <ip6tables.h>
20#include <linux/netfilter_ipv6/ip6_tables.h>
21#include <linux/netfilter_ipv6/ip6t_mh.h>
22
23struct mh_name {
24	const char *name;
25	u_int8_t type;
26};
27
28static const struct mh_name mh_names[] = {
29	{ "binding-refresh-request", 0, },
30	/* Alias */ { "brr", 0, },
31	{ "home-test-init", 1, },
32	/* Alias */ { "hoti", 1, },
33	{ "careof-test-init", 2, },
34	/* Alias */ { "coti", 2, },
35	{ "home-test", 3, },
36	/* Alias */ { "hot", 3, },
37	{ "careof-test", 4, },
38	/* Alias */ { "cot", 4, },
39	{ "binding-update", 5, },
40	/* Alias */ { "bu", 5, },
41	{ "binding-acknowledgement", 6, },
42	/* Alias */ { "ba", 6, },
43	{ "binding-error", 7, },
44	/* Alias */ { "be", 7, },
45};
46
47static void print_types_all(void)
48{
49	unsigned int i;
50	printf("Valid MH types:");
51
52	for (i = 0; i < sizeof(mh_names)/sizeof(struct mh_name); i++) {
53		if (i && mh_names[i].type == mh_names[i-1].type)
54			printf(" (%s)", mh_names[i].name);
55		else
56			printf("\n%s", mh_names[i].name);
57	}
58	printf("\n");
59}
60
61static void help(void)
62{
63	printf(
64"MH v%s options:\n"
65" --mh-type [!] type[:type]	match mh type\n",
66IPTABLES_VERSION);
67	print_types_all();
68}
69
70static void init(struct xt_entry_match *m, unsigned int *nfcache)
71{
72	struct ip6t_mh *mhinfo = (struct ip6t_mh *)m->data;
73
74	mhinfo->types[1] = 0xFF;
75}
76
77static unsigned int name_to_type(const char *name)
78{
79	int namelen = strlen(name);
80	unsigned int limit = sizeof(mh_names)/sizeof(struct mh_name);
81	unsigned int match = limit;
82	unsigned int i;
83
84	for (i = 0; i < limit; i++) {
85		if (strncasecmp(mh_names[i].name, name, namelen) == 0) {
86			int len = strlen(mh_names[i].name);
87			if (match == limit || len == namelen)
88				match = i;
89		}
90	}
91
92	if (match != limit) {
93		return mh_names[match].type;
94	} else {
95		unsigned int number;
96
97		if (string_to_number(name, 0, 255, &number) == -1)
98			exit_error(PARAMETER_PROBLEM,
99				   "Invalid MH type `%s'\n", name);
100		return number;
101	}
102}
103
104static void parse_mh_types(const char *mhtype, u_int8_t *types)
105{
106	char *buffer;
107	char *cp;
108
109	buffer = strdup(mhtype);
110	if ((cp = strchr(buffer, ':')) == NULL)
111		types[0] = types[1] = name_to_type(buffer);
112	else {
113		*cp = '\0';
114		cp++;
115
116		types[0] = buffer[0] ? name_to_type(buffer) : 0;
117		types[1] = cp[0] ? name_to_type(cp) : 0xFF;
118
119		if (types[0] > types[1])
120			exit_error(PARAMETER_PROBLEM,
121				   "Invalid MH type range (min > max)");
122	}
123	free(buffer);
124}
125
126#define MH_TYPES 0x01
127
128static int parse(int c, char **argv, int invert, unsigned int *flags,
129		 const struct ip6t_entry *entry,
130		 unsigned int *nfcache,
131		 struct xt_entry_match **match)
132{
133	struct ip6t_mh *mhinfo = (struct ip6t_mh *)(*match)->data;
134
135	switch (c) {
136	case '1':
137		if (*flags & MH_TYPES)
138			exit_error(PARAMETER_PROBLEM,
139				   "Only one `--mh-type' allowed");
140		check_inverse(optarg, &invert, &optind, 0);
141		parse_mh_types(argv[optind-1], mhinfo->types);
142		if (invert)
143			mhinfo->invflags |= IP6T_MH_INV_TYPE;
144		*flags |= MH_TYPES;
145		break;
146
147	default:
148		return 0;
149	}
150
151	return 1;
152}
153
154/* Final check; we don't care. */
155static void final_check(unsigned int flags)
156{
157}
158
159static const char *type_to_name(u_int8_t type)
160{
161	unsigned int i;
162
163	for (i = 0; i < sizeof(mh_names)/sizeof(struct mh_name); i++) {
164		if (mh_names[i].type == type)
165			return mh_names[i].name;
166	}
167
168	return NULL;
169}
170
171static void print_type(u_int8_t type, int numeric)
172{
173	const char *name;
174	if (numeric || !(name = type_to_name(type)))
175		printf("%u", type);
176	else
177		printf("%s", name);
178}
179
180static void print_types(u_int8_t min, u_int8_t max, int invert, int numeric)
181{
182	const char *inv = invert ? "!" : "";
183
184	if (min != 0 || max != 0xFF || invert) {
185		if (min == max) {
186			printf("%s", inv);
187			print_type(min, numeric);
188		} else {
189			printf("%s", inv);
190			print_type(min, numeric);
191			printf(":");
192			print_type(max, numeric);
193		}
194		printf(" ");
195	}
196}
197
198static void print(const struct ip6t_ip6 *ip,
199		  const struct xt_entry_match *match,
200		  int numeric)
201{
202	const struct ip6t_mh *mhinfo = (struct ip6t_mh *)match->data;
203
204	printf("mh ");
205	print_types(mhinfo->types[0], mhinfo->types[1],
206		    mhinfo->invflags & IP6T_MH_INV_TYPE,
207		    numeric);
208	if (mhinfo->invflags & ~IP6T_MH_INV_MASK)
209		printf("Unknown invflags: 0x%X ",
210		       mhinfo->invflags & ~IP6T_MH_INV_MASK);
211}
212
213static void save(const struct ip6t_ip6 *ip, const struct xt_entry_match *match)
214{
215	const struct ip6t_mh *mhinfo = (struct ip6t_mh *)match->data;
216
217	if (mhinfo->types[0] == 0 && mhinfo->types[1] == 0xFF)
218		return;
219
220	if (mhinfo->invflags & IP6T_MH_INV_TYPE)
221		printf("! ");
222
223	if (mhinfo->types[0] != mhinfo->types[1])
224		printf("--mh-type %u:%u ", mhinfo->types[0], mhinfo->types[1]);
225	else
226		printf("--mh-type %u ", mhinfo->types[0]);
227}
228
229static struct option opts[] = {
230	{ "mh-type", 1, 0, '1' },
231	{0}
232};
233
234static struct ip6tables_match mh = {
235	.name		= "mh",
236	.version	= IPTABLES_VERSION,
237	.size		= IP6T_ALIGN(sizeof(struct ip6t_mh)),
238	.userspacesize	= IP6T_ALIGN(sizeof(struct ip6t_mh)),
239	.help		= &help,
240	.init		= &init,
241	.parse		= &parse,
242	.final_check	= &final_check,
243	.print		= &print,
244	.save		= &save,
245	.extra_opts	= opts,
246};
247
248void _init(void)
249{
250	register_match6(&mh);
251}
252