Initial revision

1 files changed, 124 insertions, 0 deletions

diff --git a/kernel/linux/net/bridge/netfilter/ebt_vlan.c b/kernel/linux/net/bridge/netfilter/ebt_vlan.c
new file mode 100644
index 0000000..8ad921d
--- /dev/null
+++ b/kernel/linux/net/bridge/netfilter/ebt_vlan.c
@@ -0,0 +1,124 @@
+/*
+ *  ebt_vlan kernelspace
+ *
+ *      Authors:
+ *      Bart De Schuymer <bart.de.schuymer@pandora.be>
+ *      Nick Fedchik <nick@fedchik.org.ua>
+ *
+ *      May, 2002
+ */
+
+#include <linux/netfilter_bridge/ebtables.h>
+#include <linux/netfilter_bridge/ebt_vlan.h>
+#include <linux/if_vlan.h>
+#include <linux/if_ether.h>
+#include <linux/module.h>
+
+static unsigned char debug;
+MODULE_PARM (debug, "0-1b");
+MODULE_PARM_DESC (debug, "debug=1 is turn on debug messages");
+
+static int ebt_filter_vlan (const struct sk_buff *skb,
+			    const struct net_device *in,
+			    const struct net_device *out,
+			    const void *data,
+			    unsigned int datalen,
+			    const struct ebt_counter *c)
+{
+	struct ebt_vlan_info *infostuff = (struct ebt_vlan_info *) data;
+	struct vlan_ethhdr *vlanethhdr =
+	    (struct vlan_ethhdr *) skb->mac.raw;
+	unsigned short v_id;
+	unsigned short v_prio;
+
+	/*
+	 * Calculate 802.1Q VLAN ID and Priority 
+	 * Reserved one bit (13) for CFI 
+	 */
+	v_id = ntohs ((unsigned short) vlanethhdr->h_vlan_TCI) & 0xFFF;
+	v_prio = ntohs ((unsigned short) vlanethhdr->h_vlan_TCI) >> 13;
+
+	/*
+	 * Checking VLANs 
+	 */
+	if (infostuff->bitmask & EBT_VLAN_ID) {	/* Is VLAN ID parsed? */
+		if (!((infostuff->id == v_id)
+		      ^ !!(infostuff->invflags & EBT_VLAN_ID))) 
+		return 1;
+		if (debug)
+			printk (KERN_DEBUG
+				"ebt_vlan: matched ID=%s%d (mask=%X)\n",
+				(infostuff->invflags & EBT_VLAN_ID) ? "!" : "",
+				infostuff->id,
+				(unsigned char) infostuff->bitmask);
+	}
+	/*
+	 * Checking Priority 
+	 */
+	if (infostuff->bitmask & EBT_VLAN_PRIO) {	/* Is VLAN Prio parsed? */
+		if (!( (infostuff->prio == v_prio) 
+		     ^ !!(infostuff->invflags & EBT_VLAN_PRIO))) 
+		return 1;	/* missed */
+		if (debug)
+			printk (KERN_DEBUG
+				"ebt_vlan: matched Prio=%s%d (mask=%X)\n",
+				(infostuff->invflags & EBT_VLAN_PRIO) ? "!" : "",
+				infostuff->prio,
+				(unsigned char) infostuff->bitmask);
+	}
+	/*
+	 * rule matched 
+	 */
+	return 0;
+}
+
+/*
+ * ebt_vlan_check() is called when userspace delivers the table to the kernel, 
+ * * it is called to check that userspace doesn't give a bad table.
+ */
+static int ebt_vlan_check (const char *tablename, unsigned int hooknr,
+			   const struct ebt_entry *e, void *data,
+			   unsigned int datalen)
+{
+	struct ebt_vlan_info *infostuff = (struct ebt_vlan_info *) data;
+
+	if (datalen != sizeof (struct ebt_vlan_info))
+		return -EINVAL;
+
+	if (e->ethproto != __constant_htons (ETH_P_8021Q))
+		return -EINVAL;
+
+	if (infostuff->bitmask & ~EBT_VLAN_MASK) {
+		return -EINVAL;
+	}
+
+	return 0;
+}
+
+static struct ebt_match filter_vlan = {
+	{NULL, NULL}, EBT_VLAN_MATCH, ebt_filter_vlan, ebt_vlan_check,
+	NULL,
+	THIS_MODULE
+};
+
+static int __init init (void)
+{
+	printk (KERN_INFO
+		"ebt_vlan: 802.1Q VLAN matching module for EBTables\n");
+	if (debug)
+		printk (KERN_DEBUG
+			"ebt_vlan: 802.1Q matching debug is on\n");
+	return ebt_register_match (&filter_vlan);
+}
+
+static void __exit fini (void)
+{
+	ebt_unregister_match (&filter_vlan);
+}
+
+module_init (init);
+module_exit (fini);
+EXPORT_NO_SYMBOLS;
+MODULE_AUTHOR ("Nick Fedchik <nick@fedchik.org.ua>");
+MODULE_DESCRIPTION ("802.1Q VLAN matching module for ebtables, v0.1");
+MODULE_LICENSE ("GPL");