From b6f476c6d955f7a0e914ef701e57551a96985b12 Mon Sep 17 00:00:00 2001 From: "/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org" Date: Tue, 24 Jul 2007 06:47:36 +0000 Subject: Moves libipt_multiport.c to libxt_multiport.c --- extensions/libipt_multiport.c | 512 ------------------------------------------ 1 file changed, 512 deletions(-) delete mode 100644 extensions/libipt_multiport.c (limited to 'extensions/libipt_multiport.c') diff --git a/extensions/libipt_multiport.c b/extensions/libipt_multiport.c deleted file mode 100644 index a21674d..0000000 --- a/extensions/libipt_multiport.c +++ /dev/null @@ -1,512 +0,0 @@ -/* Shared library add-on to iptables to add multiple TCP port support. */ -#include -#include -#include -#include -#include - -#include -#include -/* To ensure that iptables compiles with an old kernel */ -#include "../include/linux/netfilter/xt_multiport.h" - -/* Function which prints out usage message. */ -static void -help(void) -{ - printf( -"multiport v%s options:\n" -" --source-ports port[,port,port...]\n" -" --sports ...\n" -" match source port(s)\n" -" --destination-ports port[,port,port...]\n" -" --dports ...\n" -" match destination port(s)\n" -" --ports port[,port,port]\n" -" match both source and destination port(s)\n" -" NOTE: this kernel does not support port ranges in multiport.\n", -IPTABLES_VERSION); -} - -static void -help_v1(void) -{ - printf( -"multiport v%s options:\n" -" --source-ports [!] port[,port:port,port...]\n" -" --sports ...\n" -" match source port(s)\n" -" --destination-ports [!] port[,port:port,port...]\n" -" --dports ...\n" -" match destination port(s)\n" -" --ports [!] port[,port:port,port]\n" -" match both source and destination port(s)\n", -IPTABLES_VERSION); -} - -static struct option opts[] = { - { "source-ports", 1, 0, '1' }, - { "sports", 1, 0, '1' }, /* synonym */ - { "destination-ports", 1, 0, '2' }, - { "dports", 1, 0, '2' }, /* synonym */ - { "ports", 1, 0, '3' }, - {0} -}; - -static char * -proto_to_name(u_int8_t proto) -{ - switch (proto) { - case IPPROTO_TCP: - return "tcp"; - case IPPROTO_UDP: - return "udp"; - case IPPROTO_UDPLITE: - return "udplite"; - case IPPROTO_SCTP: - return "sctp"; - case IPPROTO_DCCP: - return "dccp"; - default: - return NULL; - } -} - -static unsigned int -parse_multi_ports(const char *portstring, u_int16_t *ports, const char *proto) -{ - char *buffer, *cp, *next; - unsigned int i; - - buffer = strdup(portstring); - if (!buffer) exit_error(OTHER_PROBLEM, "strdup failed"); - - for (cp=buffer, i=0; cp && ipflags[i] = 0; - - for (cp=buffer, i=0; cp && iports[i] = parse_port(cp, proto); - if (range) { - multiinfo->pflags[i] = 1; - multiinfo->ports[++i] = parse_port(range, proto); - if (multiinfo->ports[i-1] >= multiinfo->ports[i]) - exit_error(PARAMETER_PROBLEM, - "invalid portrange specified"); - m <<= 1; - } - } - multiinfo->count = i; - if (cp) exit_error(PARAMETER_PROBLEM, "too many ports specified"); - free(buffer); -} - -/* Initialize the match. */ -static void -init(struct xt_entry_match *m, unsigned int *nfcache) -{ -} - -static const char * -check_proto(u_int16_t pnum, u_int8_t invflags) -{ - char *proto; - - if (invflags & XT_INV_PROTO) - exit_error(PARAMETER_PROBLEM, - "multiport only works with TCP, UDP, UDPLITE, SCTP and DCCP"); - - if ((proto = proto_to_name(pnum)) != NULL) - return proto; - else if (!pnum) - exit_error(PARAMETER_PROBLEM, - "multiport needs `-p tcp', `-p udp', `-p udplite', " - "`-p sctp' or `-p dccp'"); - else - exit_error(PARAMETER_PROBLEM, - "multiport only works with TCP, UDP, UDPLITE, SCTP and DCCP"); -} - -/* Function which parses command options; returns true if it - ate an option */ -static int -__parse(int c, char **argv, int invert, unsigned int *flags, - struct xt_entry_match **match, - u_int16_t pnum, u_int8_t invflags) -{ - const char *proto; - struct xt_multiport *multiinfo - = (struct xt_multiport *)(*match)->data; - - switch (c) { - case '1': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - multiinfo->count = parse_multi_ports(argv[optind-1], - multiinfo->ports, proto); - multiinfo->flags = XT_MULTIPORT_SOURCE; - break; - - case '2': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - multiinfo->count = parse_multi_ports(argv[optind-1], - multiinfo->ports, proto); - multiinfo->flags = XT_MULTIPORT_DESTINATION; - break; - - case '3': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - multiinfo->count = parse_multi_ports(argv[optind-1], - multiinfo->ports, proto); - multiinfo->flags = XT_MULTIPORT_EITHER; - break; - - default: - return 0; - } - - if (invert) - exit_error(PARAMETER_PROBLEM, - "multiport does not support invert"); - - if (*flags) - exit_error(PARAMETER_PROBLEM, - "multiport can only have one option"); - *flags = 1; - return 1; -} - -static int -parse(int c, char **argv, int invert, unsigned int *flags, - const void *e, - unsigned int *nfcache, - struct xt_entry_match **match) -{ - const struct ipt_entry *entry = e; - return __parse(c, argv, invert, flags, match, entry->ip.proto, - entry->ip.invflags); -} - -static int -__parse_v1(int c, char **argv, int invert, unsigned int *flags, - struct xt_entry_match **match, - u_int16_t pnum, u_int8_t invflags) -{ - const char *proto; - struct xt_multiport_v1 *multiinfo - = (struct xt_multiport_v1 *)(*match)->data; - - switch (c) { - case '1': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - parse_multi_ports_v1(argv[optind-1], multiinfo, proto); - multiinfo->flags = XT_MULTIPORT_SOURCE; - break; - - case '2': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - parse_multi_ports_v1(argv[optind-1], multiinfo, proto); - multiinfo->flags = XT_MULTIPORT_DESTINATION; - break; - - case '3': - check_inverse(argv[optind-1], &invert, &optind, 0); - proto = check_proto(pnum, invflags); - parse_multi_ports_v1(argv[optind-1], multiinfo, proto); - multiinfo->flags = XT_MULTIPORT_EITHER; - break; - - default: - return 0; - } - - if (invert) - multiinfo->invert = 1; - - if (*flags) - exit_error(PARAMETER_PROBLEM, - "multiport can only have one option"); - *flags = 1; - return 1; -} - -static int -parse_v1(int c, char **argv, int invert, unsigned int *flags, - const void *e, - unsigned int *nfcache, - struct xt_entry_match **match) -{ - const struct ipt_entry *entry = e; - return __parse_v1(c, argv, invert, flags, match, entry->ip.proto, - entry->ip.invflags); -} - -/* Final check; must specify something. */ -static void -final_check(unsigned int flags) -{ - if (!flags) - exit_error(PARAMETER_PROBLEM, "multiport expection an option"); -} - -static char * -port_to_service(int port, u_int8_t proto) -{ - struct servent *service; - - if ((service = getservbyport(htons(port), proto_to_name(proto)))) - return service->s_name; - - return NULL; -} - -static void -print_port(u_int16_t port, u_int8_t protocol, int numeric) -{ - char *service; - - if (numeric || (service = port_to_service(port, protocol)) == NULL) - printf("%u", port); - else - printf("%s", service); -} - -/* Prints out the matchinfo. */ -static void -__print(const struct xt_entry_match *match, int numeric, u_int16_t proto) -{ - const struct xt_multiport *multiinfo - = (const struct xt_multiport *)match->data; - unsigned int i; - - printf("multiport "); - - switch (multiinfo->flags) { - case XT_MULTIPORT_SOURCE: - printf("sports "); - break; - - case XT_MULTIPORT_DESTINATION: - printf("dports "); - break; - - case XT_MULTIPORT_EITHER: - printf("ports "); - break; - - default: - printf("ERROR "); - break; - } - - for (i=0; i < multiinfo->count; i++) { - printf("%s", i ? "," : ""); - print_port(multiinfo->ports[i], proto, numeric); - } - printf(" "); -} - -static void -print(const void *ip_void, const struct xt_entry_match *match, int numeric) -{ - const struct ipt_ip *ip = ip_void; - __print(match, numeric, ip->proto); -} - -static void -__print_v1(const struct xt_entry_match *match, int numeric, u_int16_t proto) -{ - const struct xt_multiport_v1 *multiinfo - = (const struct xt_multiport_v1 *)match->data; - unsigned int i; - - printf("multiport "); - - switch (multiinfo->flags) { - case XT_MULTIPORT_SOURCE: - printf("sports "); - break; - - case XT_MULTIPORT_DESTINATION: - printf("dports "); - break; - - case XT_MULTIPORT_EITHER: - printf("ports "); - break; - - default: - printf("ERROR "); - break; - } - - if (multiinfo->invert) - printf("! "); - - for (i=0; i < multiinfo->count; i++) { - printf("%s", i ? "," : ""); - print_port(multiinfo->ports[i], proto, numeric); - if (multiinfo->pflags[i]) { - printf(":"); - print_port(multiinfo->ports[++i], proto, numeric); - } - } - printf(" "); -} - -static void -print_v1(const void *ip_void, const struct xt_entry_match *match, int numeric) -{ - const struct ipt_ip *ip = ip_void; - __print_v1(match, numeric, ip->proto); -} - -/* Saves the union ipt_matchinfo in parsable form to stdout. */ -static void __save(const struct xt_entry_match *match, u_int16_t proto) -{ - const struct xt_multiport *multiinfo - = (const struct xt_multiport *)match->data; - unsigned int i; - - switch (multiinfo->flags) { - case XT_MULTIPORT_SOURCE: - printf("--sports "); - break; - - case XT_MULTIPORT_DESTINATION: - printf("--dports "); - break; - - case XT_MULTIPORT_EITHER: - printf("--ports "); - break; - } - - for (i=0; i < multiinfo->count; i++) { - printf("%s", i ? "," : ""); - print_port(multiinfo->ports[i], proto, 1); - } - printf(" "); -} - -static void save(const void *ip_void, const struct xt_entry_match *match) -{ - const struct ipt_ip *ip = ip_void; - __save(match, ip->proto); -} - -static void __save_v1(const struct xt_entry_match *match, u_int16_t proto) -{ - const struct xt_multiport_v1 *multiinfo - = (const struct xt_multiport_v1 *)match->data; - unsigned int i; - - switch (multiinfo->flags) { - case XT_MULTIPORT_SOURCE: - printf("--sports "); - break; - - case XT_MULTIPORT_DESTINATION: - printf("--dports "); - break; - - case XT_MULTIPORT_EITHER: - printf("--ports "); - break; - } - - if (multiinfo->invert) - printf("! "); - - for (i=0; i < multiinfo->count; i++) { - printf("%s", i ? "," : ""); - print_port(multiinfo->ports[i], proto, 1); - if (multiinfo->pflags[i]) { - printf(":"); - print_port(multiinfo->ports[++i], proto, 1); - } - } - printf(" "); -} - -static void save_v1(const void *ip_void, const struct xt_entry_match *match) -{ - const struct ipt_ip *ip = ip_void; - __save_v1(match, ip->proto); -} - -static struct xtables_match multiport = { - .next = NULL, - .family = AF_INET, - .name = "multiport", - .revision = 0, - .version = IPTABLES_VERSION, - .size = XT_ALIGN(sizeof(struct xt_multiport)), - .userspacesize = XT_ALIGN(sizeof(struct xt_multiport)), - .help = &help, - .init = &init, - .parse = &parse, - .final_check = &final_check, - .print = &print, - .save = &save, - .extra_opts = opts -}; - -static struct xtables_match multiport_v1 = { - .next = NULL, - .family = AF_INET, - .name = "multiport", - .version = IPTABLES_VERSION, - .revision = 1, - .size = XT_ALIGN(sizeof(struct xt_multiport_v1)), - .userspacesize = XT_ALIGN(sizeof(struct xt_multiport_v1)), - .help = &help_v1, - .init = &init, - .parse = &parse_v1, - .final_check = &final_check, - .print = &print_v1, - .save = &save_v1, - .extra_opts = opts -}; - -void -_init(void) -{ - xtables_register_match(&multiport); - xtables_register_match(&multiport_v1); -} -- cgit v1.2.3