libipq.c revision 803f33c0e9cb458cf7989f3826e9baba8da19e2f
1e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * libipq.c 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * IPQ userspace library. 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Please note that this library is still developmental, and there may 7e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * be some API changes. 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 9e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * This program is free software; you can redistribute it and/or modify 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * it under the terms of the GNU General Public License as published by 11e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * the Free Software Foundation; either version 2 of the License, or 12e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * (at your option) any later version. 13e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 14e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * This program is distributed in the hope that it will be useful, 15e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * but WITHOUT ANY WARRANTY; without even the implied warranty of 16e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 17e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * GNU General Public License for more details. 18e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 19e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 20e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdlib.h> 22e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <stdio.h> 23e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <string.h> 24e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <unistd.h> 257e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 26e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#include <libipq/libipq.h> 27e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 28e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/**************************************************************************** 29e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 30e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Private interface 31e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 32e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ****************************************************************************/ 33e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 34e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherenum { 35e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_NONE = 0, 36e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_IMPL, 37e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_HANDLE, 38e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_SOCKET, 39e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_BIND, 40e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_BUFFER, 41e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_RECV, 42e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_NLEOF, 43e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_ADDRLEN, 44e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_STRUNC, 45e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_RTRUNC, 46e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_NLRECV, 47e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_SEND, 48e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_SUPP, 49e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher IPQ_ERR_RECVBUF 50e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 51e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher#define IPQ_MAXERR IPQ_ERR_RECVBUF 52e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 53e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct ipq_errmap_t { 54e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int errcode; 55e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher char *message; 56e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} ipq_errmap[] = { 57e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_NONE, "Unknown error" }, 58e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_IMPL, "Implementation error" }, 59e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_HANDLE, "Unable to create netlink handle" }, 60e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_SOCKET, "Unable to create netlink socket" }, 61e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_BIND, "Unable to bind netlink socket" }, 62e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_BUFFER, "Unable to allocate buffer" }, 63e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_RECV, "Failed to receive netlink message" }, 64e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_NLEOF, "Received EOF on netlink socket" }, 65e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_ADDRLEN, "Invalid peer address length" }, 66e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_STRUNC, "Sent message truncated" }, 67e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_RTRUNC, "Received message truncated" }, 68e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_NLRECV, "Received error from netlink" }, 69e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_SEND, "Failed to send netlink message" }, 70e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_SUPP, "Operation not supported" }, 71e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher { IPQ_ERR_RECVBUF, "Receive buffer size invalid" } 72e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 73e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 74e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int ipq_errno = IPQ_ERR_NONE; 75e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_sendto(const struct ipq_handle *h, 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const void *msg, size_t len); 787e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 79e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_recvfrom(const struct ipq_handle *h, 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned char *buf, size_t len); 817e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_sendmsg(const struct ipq_handle *h, 83e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const struct msghdr *msg, 84e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int flags); 857e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 86e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic char *ipq_strerror(int errcode); 87e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 88e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_sendto(const struct ipq_handle *h, 89e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const void *msg, size_t len) 90e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 91e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int status = sendto(h->fd, msg, len, 0, 92e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher (struct sockaddr *)&h->peer, sizeof(h->peer)); 93e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (status < 0) 94e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_SEND; 957e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell return status; 96e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 97e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 98e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_sendmsg(const struct ipq_handle *h, 99e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const struct msghdr *msg, 100e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int flags) 101e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 102e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int status = sendmsg(h->fd, msg, flags); 103e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (status < 0) 104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_SEND; 1057e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell return status; 106e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 108e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic ssize_t ipq_netlink_recvfrom(const struct ipq_handle *h, 109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned char *buf, size_t len) 110e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 111e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int addrlen, status; 112e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct nlmsghdr *nlh; 1137e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 114e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (len < sizeof(struct nlmsgerr)) { 115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_RECVBUF; 116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return -1; 117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 118e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher addrlen = sizeof(h->peer); 119e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher status = recvfrom(h->fd, buf, len, 0, 120e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher (struct sockaddr *)&h->peer, &addrlen); 121e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (status < 0) { 122e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_RECV; 123e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return status; 124e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 125e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (addrlen != sizeof(h->peer)) { 126e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_RECV; 127e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return -1; 128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (status == 0) { 130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_NLEOF; 131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return -1; 132e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nlh = (struct nlmsghdr *)buf; 134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (nlh->nlmsg_flags & MSG_TRUNC || nlh->nlmsg_len > status) { 135e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_RTRUNC; 136e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return -1; 137e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 138e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return status; 139e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic char *ipq_strerror(int errcode) 142e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 143e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (errcode < 0 || errcode > IPQ_MAXERR) 144e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errcode = IPQ_ERR_IMPL; 145e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return ipq_errmap[errcode].message; 146e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 147e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 148e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/**************************************************************************** 149e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Public interface 151e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ****************************************************************************/ 153e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1547e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell/* 155e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Create and initialise an ipq handle. 156e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * FIXME: implement flags. 157e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 158e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct ipq_handle *ipq_create_handle(u_int32_t flags) 159e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 160e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int status; 161e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct ipq_handle *h; 1627e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 163e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h = (struct ipq_handle *)malloc(sizeof(struct ipq_handle)); 164e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (h == NULL) { 165e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_HANDLE; 166e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 167e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 168e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(h, 0, sizeof(struct ipq_handle)); 169e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->fd = socket(PF_NETLINK, SOCK_RAW, NETLINK_FIREWALL); 170e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (h->fd == -1) { 171e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_SOCKET; 172e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher close(h->fd); 173e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(h); 174e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 175e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 176e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&h->local, 0, sizeof(struct sockaddr_nl)); 177e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->local.nl_family = AF_NETLINK; 178e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->local.nl_pid = getpid(); 179e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->local.nl_groups = 0; 180e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher status = bind(h->fd, (struct sockaddr *)&h->local, sizeof(h->local)); 181e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (status == -1) { 182e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_errno = IPQ_ERR_BIND; 183e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher close(h->fd); 184e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(h); 185e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 186e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 187e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&h->peer, 0, sizeof(struct sockaddr_nl)); 188e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->peer.nl_family = AF_NETLINK; 189e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->peer.nl_pid = 0; 190e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->peer.nl_groups = 0; 191e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 192e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 193e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 194e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* 1957e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell * No error condition is checked here at this stage, but it may happen 196e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * if/when reliable messaging is implemented. 197e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 198e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_destroy_handle(struct ipq_handle *h) 199e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 200e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (h) { 201e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher close(h->fd); 202e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(h); 203e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 205e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 206e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 207e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_set_mode(const struct ipq_handle *h, 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher u_int8_t mode, size_t range) 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct { 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct nlmsghdr nlh; 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_peer_msg_t pm; 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } req; 2147e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 215e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&req, 0, sizeof(req)); 216e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.nlh.nlmsg_len = NLMSG_LENGTH(sizeof(req)); 217e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.nlh.nlmsg_flags = NLM_F_REQUEST; 218e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.nlh.nlmsg_type = IPQM_MODE; 219e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.nlh.nlmsg_pid = h->local.nl_pid; 220e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.pm.msg.mode.value = mode; 221e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher req.pm.msg.mode.range = range; 222e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return ipq_netlink_sendto(h, (void *)&req, req.nlh.nlmsg_len); 223e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 224e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 225e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Note: timeout is not yet implemented */ 226e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherssize_t ipq_read(const struct ipq_handle *h, 227e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned char *buf, size_t len, int timeout) 228e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 229e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return ipq_netlink_recvfrom(h, buf, len); 230e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 231e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 232e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_message_type(const unsigned char *buf) 233e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 234e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return ((struct nlmsghdr*)buf)->nlmsg_type; 235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 236e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 237e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_get_msgerr(const unsigned char *buf) 238e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct nlmsghdr *h = (struct nlmsghdr *)buf; 240e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct nlmsgerr *err = (struct nlmsgerr*)NLMSG_DATA(h); 241e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return -err->error; 242e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucheripq_packet_msg_t *ipq_get_packet(const unsigned char *buf) 245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 246e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NLMSG_DATA((struct nlmsghdr *)(buf)); 247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 248e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 249e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_set_verdict(const struct ipq_handle *h, 250803f33c0e9cb458cf7989f3826e9baba8da19e2fRusty Russell ipq_id_t id, 251e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int verdict, 252e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher size_t data_len, 253e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned char *buf) 254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 255e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned char nvecs; 256e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher size_t tlen; 257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct nlmsghdr nlh; 258e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher ipq_peer_msg_t pm; 259e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct iovec iov[3]; 260e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct msghdr msg; 261e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 262e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&nlh, 0, sizeof(nlh)); 263e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nlh.nlmsg_flags = NLM_F_REQUEST; 264e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nlh.nlmsg_type = IPQM_VERDICT; 265e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nlh.nlmsg_pid = h->local.nl_pid; 266e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher memset(&pm, 0, sizeof(pm)); 267e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher pm.msg.verdict.value = verdict; 268e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher pm.msg.verdict.id = id; 269e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher pm.msg.verdict.data_len = data_len; 270e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[0].iov_base = &nlh; 271e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[0].iov_len = sizeof(nlh); 272e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[1].iov_base = ± 273e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[1].iov_len = sizeof(pm); 274e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher tlen = sizeof(nlh) + sizeof(pm); 275e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nvecs = 2; 276e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (data_len && buf) { 277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[2].iov_base = buf; 278e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher iov[2].iov_len = data_len; 279e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher tlen += data_len; 280e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nvecs++; 281e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 282e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_name = (void *)&h->peer; 283e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_namelen = sizeof(h->peer); 284e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_iov = iov; 285e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_iovlen = nvecs; 286e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_control = NULL; 287e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_controllen = 0; 288e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher msg.msg_flags = 0; 289e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher nlh.nlmsg_len = tlen; 290e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return ipq_netlink_sendmsg(h, &msg, 0); 291e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 292e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 293e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Not implemented yet */ 294e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint ipq_ctl(const struct ipq_handle *h, int request, ...) 295e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 296e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 297e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 298e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 299e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid ipq_perror(const char *s) 300e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 301e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (s) 302e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher fputs(s, stderr); 303e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else 304e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher fputs("ERROR", stderr); 305e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (ipq_errno) 306e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher fprintf(stderr, ": %s", ipq_strerror(ipq_errno)); 307e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (errno) 308e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher fprintf(stderr, ": %s", strerror(errno)); 309e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher fputc('\n', stderr); 310e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 311