/* Copyright 2004 Jozsef Kadlecsik (kadlec@blackhole.kfki.hu) * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA */ #include #include #include #include #include #include #include #include "ipset.h" #define BUFLEN 30; #define OPT_CREATE_FROM 0x01U #define OPT_CREATE_TO 0x02U #define OPT_ADDDEL_PORT 0x01U /* Initialize the create. */ void create_init(void *data) { DP("create INIT"); /* Nothing */ } /* Function which parses command options; returns true if it ate an option */ int create_parse(int c, char *argv[], void *data, unsigned *flags) { struct ip_set_req_portmap_create *mydata = (struct ip_set_req_portmap_create *) data; DP("create_parse"); switch (c) { case '1': parse_port(optarg, &mydata->from); *flags |= OPT_CREATE_FROM; DP("--from %x (%s)", mydata->from, port_tostring(mydata->from, 0)); break; case '2': parse_port(optarg, &mydata->to); *flags |= OPT_CREATE_TO; DP("--to %x (%s)", mydata->to, port_tostring(mydata->to, 0)); break; default: return 0; } return 1; } /* Final check; exit if not ok. */ void create_final(void *data, unsigned int flags) { struct ip_set_req_portmap_create *mydata = (struct ip_set_req_portmap_create *) data; if (flags == 0) { exit_error(PARAMETER_PROBLEM, "Need to specify --from and --to\n"); } else { /* --from --to */ if ((flags & OPT_CREATE_FROM) == 0 || (flags & OPT_CREATE_TO) == 0) exit_error(PARAMETER_PROBLEM, "Need to specify both --from and --to\n"); } DP("from : %x to: %x diff: %d", mydata->from, mydata->to, mydata->to - mydata->from); if (mydata->from > mydata->to) exit_error(PARAMETER_PROBLEM, "From can't be lower than to.\n"); if (mydata->to - mydata->from > MAX_RANGE) exit_error(PARAMETER_PROBLEM, "Range too large. Max is %d ports in range\n", MAX_RANGE+1); } /* Create commandline options */ static struct option create_opts[] = { {"from", 1, 0, '1'}, {"to", 1, 0, '2'}, {0} }; /* Add, del, test parser */ ip_set_ip_t adt_parser(unsigned cmd, const char *optarg, void *data) { struct ip_set_req_portmap *mydata = (struct ip_set_req_portmap *) data; parse_port(optarg, &mydata->port); DP("%s", port_tostring(mydata->port, 0)); return 1; } /* * Print and save */ void initheader(struct set *set, const void *data) { struct ip_set_req_portmap_create *header = (struct ip_set_req_portmap_create *) data; struct ip_set_portmap *map = (struct ip_set_portmap *) set->settype->header; memset(map, 0, sizeof(struct ip_set_portmap)); map->first_port = header->from; map->last_port = header->to; } void printheader(struct set *set, unsigned options) { struct ip_set_portmap *mysetdata = (struct ip_set_portmap *) set->settype->header; printf(" from: %s", port_tostring(mysetdata->first_port, options)); printf(" to: %s\n", port_tostring(mysetdata->last_port, options)); } void printports_sorted(struct set *set, void *data, size_t len, unsigned options) { struct ip_set_portmap *mysetdata = (struct ip_set_portmap *) set->settype->header; u_int32_t addr = mysetdata->first_port; DP("%u -- %u", mysetdata->first_port, mysetdata->last_port); while (addr <= mysetdata->last_port) { if (test_bit(addr - mysetdata->first_port, data)) printf("%s\n", port_tostring(addr, options)); addr++; } } void saveheader(struct set *set, unsigned options) { struct ip_set_portmap *mysetdata = (struct ip_set_portmap *) set->settype->header; printf("-N %s %s --from %s", set->name, set->settype->typename, port_tostring(mysetdata->first_port, options)); printf(" --to %s\n", port_tostring(mysetdata->last_port, options)); } void saveports(struct set *set, void *data, size_t len, unsigned options) { struct ip_set_portmap *mysetdata = (struct ip_set_portmap *) set->settype->header; u_int32_t addr = mysetdata->first_port; while (addr <= mysetdata->last_port) { if (test_bit(addr - mysetdata->first_port, data)) printf("-A %s %s\n", set->name, port_tostring(addr, options)); addr++; } } void usage(void) { printf ("-N set portmap --from PORT --to PORT\n" "-A set PORT\n" "-D set PORT\n" "-T set PORT\n"); } static struct settype settype_portmap = { .typename = SETTYPE_NAME, .protocol_version = IP_SET_PROTOCOL_VERSION, /* Create */ .create_size = sizeof(struct ip_set_req_portmap_create), .create_init = &create_init, .create_parse = &create_parse, .create_final = &create_final, .create_opts = create_opts, /* Add/del/test */ .adt_size = sizeof(struct ip_set_req_portmap), .adt_parser = &adt_parser, /* Printing */ .header_size = sizeof(struct ip_set_portmap), .initheader = &initheader, .printheader = &printheader, .printips = &printports_sorted, /* We only have sorted version */ .printips_sorted = &printports_sorted, .saveheader = &saveheader, .saveips = &saveports, /* Bindings */ .bindip_tostring = &port_tostring, .bindip_parse = &parse_port, .usage = &usage, }; void _init(void) { settype_register(&settype_portmap); }