From 702b543494e1c52782ed4f011f13f6085f4fbbf7 Mon Sep 17 00:00:00 2001 From: "Jose M. Guisado Gomez" Date: Mon, 30 Sep 2019 19:28:07 +0200 Subject: extensions: libxt_SYNPROXY: add xlate method This adds translation capabilities when encountering SYNPROXY inside iptables rules. Signed-off-by: Jose M. Guisado Gomez Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_SYNPROXY.c | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) (limited to 'extensions/libxt_SYNPROXY.c') diff --git a/extensions/libxt_SYNPROXY.c b/extensions/libxt_SYNPROXY.c index 475590ea..6a0b913e 100644 --- a/extensions/libxt_SYNPROXY.c +++ b/extensions/libxt_SYNPROXY.c @@ -106,6 +106,28 @@ static void SYNPROXY_save(const void *ip, const struct xt_entry_target *target) printf(" --ecn"); } +static int SYNPROXY_xlate(struct xt_xlate *xl, + const struct xt_xlate_tg_params *params) +{ + const struct xt_synproxy_info *info = + (const struct xt_synproxy_info *)params->target->data; + + xt_xlate_add(xl, "synproxy "); + + if (info->options & XT_SYNPROXY_OPT_SACK_PERM) + xt_xlate_add(xl, "sack-perm "); + if (info->options & XT_SYNPROXY_OPT_TIMESTAMP) + xt_xlate_add(xl, "timestamp "); + if (info->options & XT_SYNPROXY_OPT_WSCALE) + xt_xlate_add(xl, "wscale %u ", info->wscale); + if (info->options & XT_SYNPROXY_OPT_MSS) + xt_xlate_add(xl, "mss %u ", info->mss); + if (info->options & XT_SYNPROXY_OPT_ECN) + xt_xlate_add(xl, "ecn "); + + return 1; +} + static struct xtables_target synproxy_tg_reg = { .family = NFPROTO_UNSPEC, .name = "SYNPROXY", @@ -119,6 +141,7 @@ static struct xtables_target synproxy_tg_reg = { .x6_parse = SYNPROXY_parse, .x6_fcheck = SYNPROXY_check, .x6_options = SYNPROXY_opts, + .xlate = SYNPROXY_xlate, }; void _init(void) -- cgit v1.2.3