diff options
author | laforge <laforge> | 2002-02-17 19:54:42 +0000 |
---|---|---|
committer | laforge <laforge> | 2002-02-17 19:54:42 +0000 |
commit | b43d5de639e2c5284fa91823ace760744b2fc2eb (patch) | |
tree | 757169f4b2ac26fa19cca7700b79bb7cd6573aaa | |
parent | b7486e89984013977e396dc805342b6df9bc3a25 (diff) |
add DSCP target support
-rw-r--r-- | extensions/libipt_DSCP.c | 140 | ||||
-rw-r--r-- | include/linux/netfilter_ipv4/ipt_DSCP.h | 18 |
2 files changed, 158 insertions, 0 deletions
diff --git a/extensions/libipt_DSCP.c b/extensions/libipt_DSCP.c new file mode 100644 index 0000000..4ac8960 --- /dev/null +++ b/extensions/libipt_DSCP.c @@ -0,0 +1,140 @@ +/* Shared library add-on to iptables for DSCP + * + * (C) 2000- 2002 by Matthew G. Marsh <mgm@paktronix.com>, + * Harald Welte <laforge@gnumonks.org> + * + * This program is distributed under the terms of GNU GPL v2, 1991 + * + * libipt_DSCP.c borrowed heavily from libipt_TOS.c + * + */ +#include <stdio.h> +#include <string.h> +#include <stdlib.h> +#include <getopt.h> + +#include <iptables.h> +#include <linux/netfilter_ipv4/ip_tables.h> +#include <linux/netfilter_ipv4/ipt_DSCP.h> + +struct finfo { + struct ipt_entry_target t; + u_int8_t dscp; +}; + +static void init(struct ipt_entry_target *t, unsigned int *nfcache) +{ +} + +static void help(void) +{ + printf( +"DSCP target options\n" +" --set-dscp value Set DSCP field in packet header to value\n" +" This value can be in decimal (ex: 32)\n" +" or in hex (ex: 0x20)\n" +); +} + +static struct option opts[] = { + { "set-dscp", 1, 0, 'F' }, + { 0 } +}; + +static void +parse_dscp(const unsigned char *s, struct ipt_DSCP_info *finfo) +{ + unsigned int dscp; + + if (string_to_number(s, 0, 255, &dscp) == -1) + exit_error(PARAMETER_PROBLEM, + "Invalid dscp `%s'\n", s); + + if (dscp & ~IPT_DSCP_MASK) { + exit_error(PARAMETER_PROBLEM, + "DSCP `%d` out of range\n", dscp); + + finfo->dscp = (u_int8_t )ftos; + return; +} + +static int +parse(int c, char **argv, int invert, unsigned int *flags, + const struct ipt_entry *entry, + struct ipt_entry_target **target) +{ + struct ipt_DSCP_info *finfo + = (struct ipt_DSCP_info *)(*target)->data; + + switch (c) { + case 'F': + if (*flags) + exit_error(PARAMETER_PROBLEM, + "DSCP target: Only use --set-dscp ONCE!"); + parse_dscp(optarg, finfo); + *flags = 1; + break; + + default: + return 0; + } + + return 1; +} + +static void +final_check(unsigned int flags) +{ + if (!flags) + exit_error(PARAMETER_PROBLEM, + "DSCP target: Parameter --set-dscp is required"); +} + +static void +print_dscp(u_int8_t ftos, int numeric) +{ + printf("0x%02x ", dscp); +} + +/* Prints out the targinfo. */ +static void +print(const struct ipt_ip *ip, + const struct ipt_entry_target *target, + int numeric) +{ + const struct ipt_DSCP_info *finfo = + (const struct ipt_DSCP_info *)target->data; + printf("DSCP set "); + print_dscp(finfo->ftos, numeric); +} + +/* Saves the union ipt_targinfo in parsable form to stdout. */ +static void +save(const struct ipt_ip *ip, const struct ipt_entry_target *target) +{ + const struct ipt_DSCP_info *finfo = + (const struct ipt_DSCP_info *)target->data; + + printf("--set-dscp 0x%02x ", finfo->ftos); +} + +static +struct iptables_target dscp += { NULL, + "DSCP", + NETFILTER_VERSION, + IPT_ALIGN(sizeof(struct ipt_DSCP_info)), + IPT_ALIGN(sizeof(struct ipt_DSCP_info)), + &help, + &init, + &parse, + &final_check, + &print, + &save, + opts +}; + +void _init(void) +{ + register_target(&dscp); +} diff --git a/include/linux/netfilter_ipv4/ipt_DSCP.h b/include/linux/netfilter_ipv4/ipt_DSCP.h new file mode 100644 index 0000000..439ffe9 --- /dev/null +++ b/include/linux/netfilter_ipv4/ipt_DSCP.h @@ -0,0 +1,18 @@ +/* Set DSCP field + * + * (C) 2000-2002 by Matthew G. Marsh <mgm@paktronix.com> + * Harald Welte <laforge@gnumonks.org> + * + * This software is distributed under GNU GPL v2, 1991 + * + * ipt_DSCP.h borrowed heavily from ipt_TOS.h 11/09/2000 +*/ +#ifndef _IPT_DSCP_H +#define _IPT_DSCP_H + +#define IPT_DSCP_MASK 0x4f + +struct ipt_DSCP_info { + u_int8_t dscp; +}; + |