+++ /dev/null
-/* Shared library add-on to iptables to add MARK target support. */
-#include <stdbool.h>
-#include <stdio.h>
-#include <string.h>
-#include <stdlib.h>
-#include <getopt.h>
-
-#include <xtables.h>
-#include <linux/netfilter/x_tables.h>
-#include <linux/netfilter/xt_MARK.h>
-
-enum {
- F_MARK = 1 << 0,
-};
-
-/* Function which prints out usage message. */
-static void MARK_help(void)
-{
- printf(
-"MARK target options:\n"
-" --set-mark value Set nfmark value\n"
-" --and-mark value Binary AND the nfmark with value\n"
-" --or-mark value Binary OR the nfmark with value\n"
-" --copy-xid Set nfmark to be the connection xid (PlanetLab specific)\n"
-);
-}
-
-static const struct option MARK_opts[] = {
- { "set-mark", 1, NULL, '1' },
- { "and-mark", 1, NULL, '2' },
- { "or-mark", 1, NULL, '3' },
- { "copy-xid", 1, 0, '4' },
- { .name = NULL }
-};
-
-static const struct option mark_tg_opts[] = {
- {.name = "set-xmark", .has_arg = true, .val = 'X'},
- {.name = "set-mark", .has_arg = true, .val = '='},
- {.name = "and-mark", .has_arg = true, .val = '&'},
- {.name = "or-mark", .has_arg = true, .val = '|'},
- {.name = "xor-mark", .has_arg = true, .val = '^'},
- {.name = "copy-xid", .has_arg = true, .val = '%'},
- { .name = NULL }
-};
-
-static void mark_tg_help(void)
-{
- printf(
-"MARK target options:\n"
-" --set-xmark value[/mask] Clear bits in mask and XOR value into nfmark\n"
-" --set-mark value[/mask] Clear bits in mask and OR value into nfmark\n"
-" --and-mark bits Binary AND the nfmark with bits\n"
-" --or-mark bits Binary OR the nfmark with bits\n"
-" --copy-xid Set nfmark to be the connection xid (PlanetLab specific)\n"
-" --xor-mask bits Binary XOR the nfmark with bits\n"
-"\n");
-}
-
-/* Function which parses command options; returns true if it
- ate an option */
-static int
-MARK_parse_v0(int c, char **argv, int invert, unsigned int *flags,
- const void *entry, struct xt_entry_target **target)
-{
- struct xt_mark_target_info *markinfo
- = (struct xt_mark_target_info *)(*target)->data;
-
- switch (c) {
- case '1':
- if (string_to_number_l(optarg, 0, 0,
- &markinfo->mark))
- exit_error(PARAMETER_PROBLEM, "Bad MARK value `%s'", optarg);
- if (*flags)
- exit_error(PARAMETER_PROBLEM,
- "MARK target: Can't specify --set-mark twice");
- *flags = 1;
- break;
- case '2':
- exit_error(PARAMETER_PROBLEM,
- "MARK target: kernel too old for --and-mark");
- case '3':
- exit_error(PARAMETER_PROBLEM,
- "MARK target: kernel too old for --or-mark");
- default:
- return 0;
- }
-
- return 1;
-}
-
-static void MARK_check(unsigned int flags)
-{
- if (!flags)
- exit_error(PARAMETER_PROBLEM,
- "MARK target: Parameter --set/and/or-mark"
- " is required");
-}
-
-/* Function which parses command options; returns true if it
- ate an option */
-static int
-MARK_parse_v1(int c, char **argv, int invert, unsigned int *flags,
- const void *entry, struct xt_entry_target **target)
-{
- struct xt_mark_target_info_v1 *markinfo
- = (struct xt_mark_target_info_v1 *)(*target)->data;
-
- switch (c) {
- case '1':
- markinfo->mode = XT_MARK_SET;
- break;
- case '2':
- markinfo->mode = XT_MARK_AND;
- break;
- case '3':
- markinfo->mode = XT_MARK_OR;
- break;
- case '4':
- markinfo->mode = IPT_MARK_COPYXID;
- break;
- default:
- return 0;
- }
-
- if (string_to_number_l(optarg, 0, 0, &markinfo->mark))
- exit_error(PARAMETER_PROBLEM, "Bad MARK value `%s'", optarg);
-
- if (*flags)
- exit_error(PARAMETER_PROBLEM,
- "MARK target: Can't specify --set-mark twice");
-
- *flags = 1;
- return 1;
-}
-
-static int mark_tg_parse(int c, char **argv, int invert, unsigned int *flags,
- const void *entry, struct xt_entry_target **target)
-{
- struct xt_mark_tginfo2 *info = (void *)(*target)->data;
- unsigned int value, mask = ~0U;
- char *end;
-
- switch (c) {
- case 'X': /* --set-xmark */
- case '=': /* --set-mark */
- param_act(P_ONE_ACTION, "MARK", *flags & F_MARK);
- param_act(P_NO_INVERT, "MARK", "--set-xmark/--set-mark", invert);
- if (!strtonum(optarg, &end, &value, 0, ~0U))
- param_act(P_BAD_VALUE, "MARK", "--set-xmark/--set-mark", optarg);
- if (*end == '/')
- if (!strtonum(end + 1, &end, &mask, 0, ~0U))
- param_act(P_BAD_VALUE, "MARK", "--set-xmark/--set-mark", optarg);
- if (*end != '\0')
- param_act(P_BAD_VALUE, "MARK", "--set-xmark/--set-mark", optarg);
- info->mark = value;
- info->mask = mask;
-
- if (c == '=')
- info->mask = value | mask;
- break;
-
- case '&': /* --and-mark */
- param_act(P_ONE_ACTION, "MARK", *flags & F_MARK);
- param_act(P_NO_INVERT, "MARK", "--and-mark", invert);
- if (!strtonum(optarg, NULL, &mask, 0, ~0U))
- param_act(P_BAD_VALUE, "MARK", "--and-mark", optarg);
- info->mark = 0;
- info->mask = ~mask;
- break;
-
- case '|': /* --or-mark */
- param_act(P_ONE_ACTION, "MARK", *flags & F_MARK);
- param_act(P_NO_INVERT, "MARK", "--or-mark", invert);
- if (!strtonum(optarg, NULL, &value, 0, ~0U))
- param_act(P_BAD_VALUE, "MARK", "--or-mark", optarg);
- info->mark = value;
- info->mask = value;
- break;
-
- case '^': /* --xor-mark */
- param_act(P_ONE_ACTION, "MARK", *flags & F_MARK);
- param_act(P_NO_INVERT, "MARK", "--xor-mark", invert);
- if (!strtonum(optarg, NULL, &value, 0, ~0U))
- param_act(P_BAD_VALUE, "MARK", "--xor-mark", optarg);
- info->mark = value;
- info->mask = 0;
- break;
-
- case '%': /* --copy-xid */
- param_act(P_ONE_ACTION, "MARK", *flags & F_MARK);
- info->mark = ~0U; /* Consistency check */
- info->mask = mask;
- break;
-
- default:
- return false;
- }
-
- *flags |= F_MARK;
- return true;
-}
-
-static void mark_tg_check(unsigned int flags)
-{
- if (flags == 0)
- exit_error(PARAMETER_PROBLEM, "MARK: One of the --set-xmark, "
- "--{and,or,xor,set}-mark, or --copy-xid options is required");
-}
-
-static void
-print_mark(unsigned long mark)
-{
- printf("0x%lx ", mark);
-}
-
-/* Prints out the targinfo. */
-static void MARK_print_v0(const void *ip,
- const struct xt_entry_target *target, int numeric)
-{
- const struct xt_mark_target_info *markinfo =
- (const struct xt_mark_target_info *)target->data;
- printf("MARK set ");
- print_mark(markinfo->mark);
-}
-
-/* Saves the union ipt_targinfo in parsable form to stdout. */
-static void MARK_save_v0(const void *ip, const struct xt_entry_target *target)
-{
- const struct xt_mark_target_info *markinfo =
- (const struct xt_mark_target_info *)target->data;
-
- printf("--set-mark ");
- print_mark(markinfo->mark);
-}
-
-/* Prints out the targinfo. */
-static void MARK_print_v1(const void *ip, const struct xt_entry_target *target,
- int numeric)
-{
- const struct xt_mark_target_info_v1 *markinfo =
- (const struct xt_mark_target_info_v1 *)target->data;
-
- switch (markinfo->mode) {
- case XT_MARK_SET:
- printf("MARK set ");
- break;
- case XT_MARK_AND:
- printf("MARK and ");
- break;
- case XT_MARK_OR:
- printf("MARK or ");
- break;
- case IPT_MARK_COPYXID:
- printf("MARK copyxid ");
- break;
- }
- print_mark(markinfo->mark);
-}
-
-static void mark_tg_print(const void *ip, const struct xt_entry_target *target,
- int numeric)
-{
- const struct xt_mark_tginfo2 *info = (const void *)target->data;
-
- if (info->mark == ~0U)
- printf("MARK copy-xid");
- else if (info->mark == 0)
- printf("MARK and 0x%x ", (unsigned int)(u_int32_t)~info->mask);
- else if (info->mark == info->mask)
- printf("MARK or 0x%x ", info->mark);
- else if (info->mask == 0)
- printf("MARK xor 0x%x ", info->mark);
- else
- printf("MARK xset 0x%x/0x%x ", info->mark, info->mask);
-}
-
-/* Saves the union ipt_targinfo in parsable form to stdout. */
-static void MARK_save_v1(const void *ip, const struct xt_entry_target *target)
-{
- const struct xt_mark_target_info_v1 *markinfo =
- (const struct xt_mark_target_info_v1 *)target->data;
-
- switch (markinfo->mode) {
- case XT_MARK_SET:
- printf("--set-mark ");
- break;
- case XT_MARK_AND:
- printf("--and-mark ");
- break;
- case XT_MARK_OR:
- printf("--or-mark ");
- break;
- case IPT_MARK_COPYXID:
- printf("--copy-xid ");
- break;
- }
- print_mark(markinfo->mark);
-}
-
-static void mark_tg_save(const void *ip, const struct xt_entry_target *target)
-{
- const struct xt_mark_tginfo2 *info = (const void *)target->data;
-
- if (info->mark==~0U)
- printf("--copy-xid 0x0");
- else
- printf("--set-xmark 0x%x/0x%x ", info->mark, info->mask);
-}
-
-static struct xtables_target mark_target_v0 = {
- .family = AF_INET,
- .name = "MARK",
- .version = XTABLES_VERSION,
- .revision = 0,
- .size = XT_ALIGN(sizeof(struct xt_mark_target_info)),
- .userspacesize = XT_ALIGN(sizeof(struct xt_mark_target_info)),
- .help = MARK_help,
- .parse = MARK_parse_v0,
- .final_check = MARK_check,
- .print = MARK_print_v0,
- .save = MARK_save_v0,
- .extra_opts = MARK_opts,
-};
-
-static struct xtables_target mark_target_v1 = {
- .family = AF_INET,
- .name = "MARK",
- .version = XTABLES_VERSION,
- .revision = 1,
- .size = XT_ALIGN(sizeof(struct xt_mark_target_info_v1)),
- .userspacesize = XT_ALIGN(sizeof(struct xt_mark_target_info_v1)),
- .help = MARK_help,
- .parse = MARK_parse_v1,
- .final_check = MARK_check,
- .print = MARK_print_v1,
- .save = MARK_save_v1,
- .extra_opts = MARK_opts,
-};
-
-static struct xtables_target mark_target6_v0 = {
- .family = AF_INET6,
- .name = "MARK",
- .version = XTABLES_VERSION,
- .revision = 0,
- .size = XT_ALIGN(sizeof(struct xt_mark_target_info)),
- .userspacesize = XT_ALIGN(sizeof(struct xt_mark_target_info)),
- .help = MARK_help,
- .parse = MARK_parse_v0,
- .final_check = MARK_check,
- .print = MARK_print_v0,
- .save = MARK_save_v0,
- .extra_opts = MARK_opts,
-};
-
-static struct xtables_target mark_tg_reg_v2 = {
- .version = XTABLES_VERSION,
- .name = "MARK",
- .revision = 2,
- .family = AF_UNSPEC,
- .size = XT_ALIGN(sizeof(struct xt_mark_tginfo2)),
- .userspacesize = XT_ALIGN(sizeof(struct xt_mark_tginfo2)),
- .help = mark_tg_help,
- .parse = mark_tg_parse,
- .final_check = mark_tg_check,
- .print = mark_tg_print,
- .save = mark_tg_save,
- .extra_opts = mark_tg_opts,
-};
-
-void _init(void)
-{
- xtables_register_target(&mark_target_v0);
- xtables_register_target(&mark_target_v1);
- xtables_register_target(&mark_target6_v0);
- xtables_register_target(&mark_tg_reg_v2);
-}
git://git.onelab.eu / iptables.git / blobdiff