diff options
author | Harald Welte <laforge@gnumonks.org> | 2002-02-17 21:32:32 +0000 |
---|---|---|
committer | Harald Welte <laforge@gnumonks.org> | 2002-02-17 21:32:32 +0000 |
commit | 385a1dd0f3b01fc0fbd6bcdee9796e0240ea77c1 (patch) | |
tree | d7f7c0fb31a35925c4c0d0bd494d6cbf8e98c468 | |
parent | 96d960594e7db97568e478be884f205034d3a32f (diff) |
add ECN target support
-rw-r--r-- | extensions/libipt_ECN.c | 125 | ||||
-rw-r--r-- | include/linux/netfilter_ipv4/ipt_ECN.h | 25 |
2 files changed, 150 insertions, 0 deletions
diff --git a/extensions/libipt_ECN.c b/extensions/libipt_ECN.c new file mode 100644 index 00000000..63c280ed --- /dev/null +++ b/extensions/libipt_ECN.c @@ -0,0 +1,125 @@ +/* Shared library add-on to iptables for ECN, $Version$ + * + * (C) 2002 by Harald Welte <laforge@gnumonks.org> + * + * This program is distributed under the terms of GNU GPL v2, 1991 + * + * libipt_ECN.c borrowed heavily from libipt_DSCP.c + * + * $Id$ + */ +#include <stdio.h> +#include <string.h> +#include <stdlib.h> +#include <getopt.h> + +#include <iptables.h> +#include <linux/netfilter_ipv4/ip_tables.h> +#include <linux/netfilter_ipv4/ipt_ECN.h> + +static void init(struct ipt_entry_target *t, unsigned int *nfcache) +{ +} + +static void help(void) +{ + printf( +"ECN target options\n" +" --ecn-remove Remove all ECN bits which may be present\n" +" in the IPv4 header\n" +); +} + +static struct option opts[] = { + { "ecn-remove", 1, 0, 'F' }, + { 0 } +}; + +static int +parse(int c, char **argv, int invert, unsigned int *flags, + const struct ipt_entry *entry, + struct ipt_entry_target **target) +{ + struct ipt_ECN_info *finfo + = (struct ipt_ECN_info *)(*target)->data; + + switch (c) { + case 'F': + if (*flags) + exit_error(PARAMETER_PROBLEM, + "ECN target: Only use --ecn-remove ONCE!"); + einfo->operation = IPT_ECN_OP_REMOVE; + *flags = 1; + break; + + default: + return 0; + } + + return 1; +} + +static void +final_check(unsigned int flags) +{ + if (!flags) + exit_error(PARAMETER_PROBLEM, + "ECN target: Parameter --ecn-remove is required"); +} + +/* Prints out the targinfo. */ +static void +print(const struct ipt_ip *ip, + const struct ipt_entry_target *target, + int numeric) +{ + const struct ipt_ECN_info *einfo = + (const struct ipt_ECN_info *)target->data; + + printf("ECN "); + + switch (einfo->operation) { + case IPT_ECN_OP_REMOVE: + printf("remove "); + break; + default: + printf("unsupported_ecn_operation "); + break; + } +} + +/* Saves the union ipt_targinfo in parsable form to stdout. */ +static void +save(const struct ipt_ip *ip, const struct ipt_entry_target *target) +{ + const struct ipt_ECN_info *einfo = + (const struct ipt_ECN_info *)target->data; + + switch (einfo->operation) { + case IPT_ECN_OP_REMOVE: + printf("--ecn-remove "); + break; + default: + } +} + +static +struct iptables_target ecn += { NULL, + "ECN", + NETFILTER_VERSION, + IPT_ALIGN(sizeof(struct ipt_ECN_info)), + IPT_ALIGN(sizeof(struct ipt_ECN_info)), + &help, + &init, + &parse, + &final_check, + &print, + &save, + opts +}; + +void _init(void) +{ + register_target(&ecn); +} diff --git a/include/linux/netfilter_ipv4/ipt_ECN.h b/include/linux/netfilter_ipv4/ipt_ECN.h new file mode 100644 index 00000000..1a02de76 --- /dev/null +++ b/include/linux/netfilter_ipv4/ipt_ECN.h @@ -0,0 +1,25 @@ +/* Header file for iptables ipt_ECN target + * + * (C) 2002 by Harald Welte <laforge@gnumonks.org> + * + * This software is distributed under GNU GPL v2, 1991 + * + * ipt_ECN.h,v 1.1 2002/02/17 21:30:16 laforge Exp +*/ +#ifndef _IPT_DSCP_H +#define _IPT_DSCP_H +#include <linux/netfilter_ipv4/ipt_DSCP.h> + +#define IPT_ECN_MASK (~IPT_DSCP_MASK) + +enum ipt_ecn_operation { + IPT_ECN_OP_NONE = 0, + IPT_ECN_OP_REMOVE, +}; +#define IPT_ECN_OP_MAX IPT_ECN_OP_REMOVE + +struct ipt_ECN_info { + enum ipt_ecn_operation operation; +}; + +#endif /* _IPT_ECN_H */ |