diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-01-28 12:35:41 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-01-28 12:35:41 +0100 |
commit | 1c317dafa986699127d08951037869f9669e3b25 (patch) | |
tree | cc0892af02bc90098c7d3c1391ed89da9e305a53 /extensions | |
parent | 983196ceb4d3bb7b6d3cf6da18bb6d5a5eafb347 (diff) | |
parent | 2fda8fcef0f3c321fb03953b8ecc424a2bad4476 (diff) |
Merge branch 'stable' into 'master'
Diffstat (limited to 'extensions')
-rw-r--r-- | extensions/libip6t_DNPT.c | 19 | ||||
-rw-r--r-- | extensions/libip6t_SNPT.c | 19 |
2 files changed, 38 insertions, 0 deletions
diff --git a/extensions/libip6t_DNPT.c b/extensions/libip6t_DNPT.c index 7439816c..703adf60 100644 --- a/extensions/libip6t_DNPT.c +++ b/extensions/libip6t_DNPT.c @@ -1,4 +1,5 @@ #include <stdio.h> +#include <string.h> #include <xtables.h> #include <linux/netfilter_ipv6/ip6_tables.h> #include <linux/netfilter_ipv6/ip6t_NPT.h> @@ -53,6 +54,23 @@ static void DNPT_print(const void *ip, const struct xt_entry_target *target, npt->dst_pfx_len); } +static void DNPT_save(const void *ip, const struct xt_entry_target *target) +{ + static const struct in6_addr zero_addr; + const struct ip6t_npt_tginfo *info = (const void *)target->data; + + if (memcmp(&info->src_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 || + info->src_pfx_len != 0) + printf("--src-pfx %s/%u ", + xtables_ip6addr_to_numeric(&info->src_pfx.in6), + info->src_pfx_len); + if (memcmp(&info->dst_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 || + info->dst_pfx_len != 0) + printf("--dst-pfx %s/%u ", + xtables_ip6addr_to_numeric(&info->dst_pfx.in6), + info->dst_pfx_len); +} + static struct xtables_target snpt_tg_reg = { .name = "DNPT", .version = XTABLES_VERSION, @@ -62,6 +80,7 @@ static struct xtables_target snpt_tg_reg = { .help = DNPT_help, .x6_parse = DNPT_parse, .print = DNPT_print, + .save = DNPT_save, .x6_options = DNPT_options, }; diff --git a/extensions/libip6t_SNPT.c b/extensions/libip6t_SNPT.c index 26a86c56..7ed80b20 100644 --- a/extensions/libip6t_SNPT.c +++ b/extensions/libip6t_SNPT.c @@ -1,4 +1,5 @@ #include <stdio.h> +#include <string.h> #include <xtables.h> #include <linux/netfilter_ipv6/ip6_tables.h> #include <linux/netfilter_ipv6/ip6t_NPT.h> @@ -53,6 +54,23 @@ static void SNPT_print(const void *ip, const struct xt_entry_target *target, npt->dst_pfx_len); } +static void SNPT_save(const void *ip, const struct xt_entry_target *target) +{ + static const struct in6_addr zero_addr; + const struct ip6t_npt_tginfo *info = (const void *)target->data; + + if (memcmp(&info->src_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 || + info->src_pfx_len != 0) + printf("--src-pfx %s/%u ", + xtables_ip6addr_to_numeric(&info->src_pfx.in6), + info->src_pfx_len); + if (memcmp(&info->dst_pfx.in6, &zero_addr, sizeof(zero_addr)) != 0 || + info->dst_pfx_len != 0) + printf("--dst-pfx %s/%u ", + xtables_ip6addr_to_numeric(&info->dst_pfx.in6), + info->dst_pfx_len); +} + static struct xtables_target snpt_tg_reg = { .name = "SNPT", .version = XTABLES_VERSION, @@ -62,6 +80,7 @@ static struct xtables_target snpt_tg_reg = { .help = SNPT_help, .x6_parse = SNPT_parse, .print = SNPT_print, + .save = SNPT_save, .x6_options = SNPT_options, }; |