diff options
-rwxr-xr-x | extensions/.ROUTE-test | 2 | ||||
-rw-r--r-- | extensions/libipt_ROUTE.c | 142 |
2 files changed, 144 insertions, 0 deletions
diff --git a/extensions/.ROUTE-test b/extensions/.ROUTE-test new file mode 100755 index 0000000..8b7b3f0 --- /dev/null +++ b/extensions/.ROUTE-test @@ -0,0 +1,2 @@ +#! /bin/sh +[ -f $KERNEL_DIR/net/ipv4/netfilter/ipt_ROUTE.c ] && echo ROUTE diff --git a/extensions/libipt_ROUTE.c b/extensions/libipt_ROUTE.c new file mode 100644 index 0000000..1229c7a --- /dev/null +++ b/extensions/libipt_ROUTE.c @@ -0,0 +1,142 @@ +/* Shared library add-on to iptables to add ROUTE target support. + * Author : Cédric de Launois, <delaunois@info.ucl.ac.be> + */ + +#include <stdio.h> +#include <string.h> +#include <stdlib.h> +#include <getopt.h> + +#include <iptables.h> +#include <linux/netfilter_ipv4/ip_tables.h> +#include <linux/netfilter_ipv4/ipt_ROUTE.h> +#include <net/if.h> + +/* Function which prints out usage message. */ +static void +help(void) +{ + printf( +"ROUTE target v%s options:\n" +" --iface name Send this packet directly through iface name.\n" +" --ifindex index Send this packet directly through iface index.\n" +"\n", +NETFILTER_VERSION); +} + +static struct option opts[] = { + { "iface", 1, 0, '1' }, + { "ifindex", 1, 0, '2' }, + { 0 } +}; + +/* Initialize the target. */ +static void +init(struct ipt_entry_target *t, unsigned int *nfcache) +{ +} + +#define IPT_ROUTE_OPT_IF 0x01 + +/* Function which parses command options; returns true if it + ate an option */ +static int +parse(int c, char **argv, int invert, unsigned int *flags, + const struct ipt_entry *entry, + struct ipt_entry_target **target) +{ + struct ipt_route_target_info *route_info = + (struct ipt_route_target_info*)(*target)->data; + + unsigned int if_index; + + switch (c) { + char *end; + case '1': + if (*flags & IPT_ROUTE_OPT_IF) + exit_error(PARAMETER_PROBLEM, + "Can't specify --iface or --ifindex twice"); + + if (check_inverse(optarg, &invert)) + exit_error(PARAMETER_PROBLEM, + "Unexpected `!' after --iface"); + + if ((if_index = if_nametoindex(optarg))==0) + exit_error(PARAMETER_PROBLEM, + "Unknown interface name %s", optarg); + + route_info->if_index = if_index; + *flags |= IPT_ROUTE_OPT_IF; + break; + + case '2': + if (*flags & IPT_ROUTE_OPT_IF) + exit_error(PARAMETER_PROBLEM, + "Can't specify --iface or --ifindex twice"); + + if (check_inverse(optarg, &invert)) + exit_error(PARAMETER_PROBLEM, + "Unexpected `!' after --ifindex"); + + route_info->if_index = strtoul(optarg, &end, 0); + + if (*end != '\0' || end == optarg) + exit_error(PARAMETER_PROBLEM, "Bad ROUTE ifindex `%s'", optarg); + + *flags |= IPT_ROUTE_OPT_IF; + break; + + default: + return 0; + } + + return 1; +} + +static void +final_check(unsigned int flags) +{ + if (!flags) + exit_error(PARAMETER_PROBLEM, + "ROUTE target: Parameter --iface is required"); +} + +/* Prints out the targinfo. */ +static void +print(const struct ipt_ip *ip, + const struct ipt_entry_target *target, + int numeric) +{ + const struct ipt_route_target_info *route_info + = (const struct ipt_route_target_info *)target->data; + + printf("ROUTE "); + + if (route_info->if_index != 0) { + char buf[IF_NAMESIZE]; + printf("iface %s(%d) ", + if_indextoname(route_info->if_index, buf), + route_info->if_index); + } +} + +static +struct iptables_target route += { NULL, + "ROUTE", + NETFILTER_VERSION, + IPT_ALIGN(sizeof(struct ipt_route_target_info)), + IPT_ALIGN(sizeof(struct ipt_route_target_info)), + &help, + &init, + &parse, + &final_check, + &print, + NULL, /* save */ + opts +}; + +void _init(void) +{ + register_target(&route); +} |