From 93b29cdf73e1edafc437138cb88c4bcd69d6a3c1 Mon Sep 17 00:00:00 2001 From: laforge Date: Wed, 8 Jan 2003 09:14:20 +0000 Subject: apply ipv6 hoplimit (hl match, HL target) patch (Maciej Soltysiak ) --- extensions/libip6t_HL.c | 164 ++++++++++++++++++++++++++++++++++++++++++++ extensions/libip6t_hl.c | 177 ++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 341 insertions(+) create mode 100644 extensions/libip6t_HL.c create mode 100644 extensions/libip6t_hl.c (limited to 'extensions') diff --git a/extensions/libip6t_HL.c b/extensions/libip6t_HL.c new file mode 100644 index 0000000..7c24915 --- /dev/null +++ b/extensions/libip6t_HL.c @@ -0,0 +1,164 @@ +/* + * IPv6 Hop Limit Target module + * Maciej Soltysiak + * Based on HW's ttl target + * This program is distributed under the terms of GNU GPL + */ + +#include +#include +#include +#include +#include + +#include +#include + +#define IP6T_HL_USED 1 + +static void init(struct ip6t_entry_target *t, unsigned int *nfcache) +{ +} + +static void help(void) +{ + printf( +"HL target v%s options\n" +" --hl-set value Set HL to \n" +" --hl-dec value Decrement HL by \n" +" --hl-inc value Increment HL by \n" +, IPTABLES_VERSION); +} + +static int parse(int c, char **argv, int invert, unsigned int *flags, + const struct ip6t_entry *entry, + struct ip6t_entry_target **target) +{ + struct ip6t_HL_info *info = (struct ip6t_HL_info *) (*target)->data; + u_int8_t value; + + if (*flags & IP6T_HL_USED) { + exit_error(PARAMETER_PROBLEM, + "Can't specify HL option twice"); + } + + if (!optarg) + exit_error(PARAMETER_PROBLEM, + "HL: You must specify a value"); + + if (check_inverse(optarg, &invert, NULL, 0)) + exit_error(PARAMETER_PROBLEM, + "HL: unexpected `!'"); + + value = atoi(optarg); + + switch (c) { + + case '1': + info->mode = IP6T_HL_SET; + break; + + case '2': + if (value == 0) { + exit_error(PARAMETER_PROBLEM, + "HL: decreasing by 0?"); + } + + info->mode = IP6T_HL_DEC; + break; + + case '3': + if (value == 0) { + exit_error(PARAMETER_PROBLEM, + "HL: increasing by 0?"); + } + + info->mode = IP6T_HL_INC; + break; + + default: + return 0; + + } + + info->hop_limit = value; + *flags |= IP6T_HL_USED; + + return 1; +} + +static void final_check(unsigned int flags) +{ + if (!(flags & IP6T_HL_USED)) + exit_error(PARAMETER_PROBLEM, + "HL: You must specify an action"); +} + +static void save(const struct ip6t_ip6 *ip, + const struct ip6t_entry_target *target) +{ + const struct ip6t_HL_info *info = + (struct ip6t_HL_info *) target->data; + + switch (info->mode) { + case IP6T_HL_SET: + printf("--hl-set "); + break; + case IP6T_HL_DEC: + printf("--hl-dec "); + break; + + case IP6T_HL_INC: + printf("--hl-inc "); + break; + } + printf("%u ", info->hop_limit); +} + +static void print(const struct ip6t_ip6 *ip, + const struct ip6t_entry_target *target, int numeric) +{ + const struct ip6t_HL_info *info = + (struct ip6t_HL_info *) target->data; + + printf("HL "); + switch (info->mode) { + case IP6T_HL_SET: + printf("set to "); + break; + case IP6T_HL_DEC: + printf("decrement by "); + break; + case IP6T_HL_INC: + printf("increment by "); + break; + } + printf("%u ", info->hop_limit); +} + +static struct option opts[] = { + { "hl-set", 1, 0, '1' }, + { "hl-dec", 1, 0, '2' }, + { "hl-inc", 1, 0, '3' }, + { 0 } +}; + +static +struct ip6tables_target HL = { NULL, + "HL", + IPTABLES_VERSION, + IP6T_ALIGN(sizeof(struct ip6t_HL_info)), + IP6T_ALIGN(sizeof(struct ip6t_HL_info)), + &help, + &init, + &parse, + &final_check, + &print, + &save, + opts +}; + +void _init(void) +{ + register_target6(&HL); +} diff --git a/extensions/libip6t_hl.c b/extensions/libip6t_hl.c new file mode 100644 index 0000000..36f9331 --- /dev/null +++ b/extensions/libip6t_hl.c @@ -0,0 +1,177 @@ +/* + * IPv6 Hop Limit matching module + * Maciej Soltysiak + * Based on HW's ttl match + * This program is released under the terms of GNU GPL + */ + +#include +#include +#include +#include +#include + +#include +#include + +static void help(void) +{ + printf( +"HL match v%s options:\n" +" --hl-eq value Match hop limit value\n" +" --hl-lt value Match HL < value\n" +" --hl-gt value Match HL > value\n" +, IPTABLES_VERSION); +} + +static void init(struct ip6t_entry_match *m, unsigned int *nfcache) +{ + /* caching not yet implemented */ + *nfcache |= NFC_UNKNOWN; +} + +static int parse(int c, char **argv, int invert, unsigned int *flags, + const struct ip6t_entry *entry, unsigned int *nfcache, + struct ip6t_entry_match **match) +{ + struct ip6t_hl_info *info = (struct ip6t_hl_info *) (*match)->data; + u_int8_t value; + + check_inverse(optarg, &invert, &optind, 0); + value = atoi(argv[optind-1]); + + if (*flags) + exit_error(PARAMETER_PROBLEM, + "Can't specify HL option twice"); + + if (!optarg) + exit_error(PARAMETER_PROBLEM, + "hl: You must specify a value"); + switch (c) { + case '2': + if (invert) + info->mode = IP6T_HL_NE; + else + info->mode = IP6T_HL_EQ; + + /* is 0 allowed? */ + info->hop_limit = value; + *flags = 1; + + break; + case '3': + if (invert) + exit_error(PARAMETER_PROBLEM, + "hl: unexpected `!'"); + + info->mode = IP6T_HL_LT; + info->hop_limit = value; + *flags = 1; + + break; + case '4': + if (invert) + exit_error(PARAMETER_PROBLEM, + "hl: unexpected `!'"); + + info->mode = IP6T_HL_GT; + info->hop_limit = value; + *flags = 1; + + break; + default: + return 0; + + } + + return 1; +} + +static void final_check(unsigned int flags) +{ + if (!flags) + exit_error(PARAMETER_PROBLEM, + "HL match: You must specify one of " + "`--hl-eq', `--hl-lt', `--hl-gt"); +} + +static void print(const struct ip6t_ip6 *ip, + const struct ip6t_entry_match *match, + int numeric) +{ + const struct ip6t_hl_info *info = + (struct ip6t_hl_info *) match->data; + + printf("HL match "); + switch (info->mode) { + case IP6T_HL_EQ: + printf("HL == "); + break; + case IP6T_HL_NE: + printf("HL != "); + break; + case IP6T_HL_LT: + printf("HL < "); + break; + case IP6T_HL_GT: + printf("HL > "); + break; + } + printf("%u ", info->hop_limit); +} + +static void save(const struct ip6t_ip6 *ip, + const struct ip6t_entry_match *match) +{ + const struct ip6t_hl_info *info = + (struct ip6t_hl_info *) match->data; + + switch (info->mode) { + case IP6T_HL_EQ: + printf("--hl-eq "); + break; + case IP6T_HL_NE: + printf("! --hl-eq "); + break; + case IP6T_HL_LT: + printf("--hl-lt "); + break; + case IP6T_HL_GT: + printf("--hl-gt "); + break; + default: + /* error */ + break; + } + printf("%u ", info->hop_limit); +} + +static struct option opts[] = { + { "hl", 1, 0, '2' }, + { "hl-eq", 1, 0, '2'}, + { "hl-lt", 1, 0, '3'}, + { "hl-gt", 1, 0, '4'}, + { 0 } +}; + +static +struct ip6tables_match hl = { + NULL, + "hl", + IPTABLES_VERSION, + IP6T_ALIGN(sizeof(struct ip6t_hl_info)), + IP6T_ALIGN(sizeof(struct ip6t_hl_info)), + &help, + &init, + &parse, + &final_check, + &print, + &save, + opts +}; + + +void _init(void) +{ + register_match6(&hl); +} -- cgit v1.2.3