blob: 81c096f9c46f6a8840e3613965e94ff8104c840d [file] [log] [blame]
/*
* Shared library add-on to iptables to add tos match support
*
* Copyright © CC Computer Consultants GmbH, 2007
* Contact: Jan Engelhardt <jengelh@computergmbh.de>
*/
#include <getopt.h>
#include <netdb.h>
#include <stdbool.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <xtables.h>
#include <linux/netfilter/xt_dscp.h>
#include "tos_values.c"
struct ipt_tos_info {
uint8_t tos;
uint8_t invert;
};
enum {
O_TOS = 1 << 0,
};
static const struct xt_option_entry tos_mt_opts_v0[] = {
{.name = "tos", .id = O_TOS, .type = XTTYPE_TOSMASK,
.flags = XTOPT_INVERT | XTOPT_MAND, .max = 0xFF},
XTOPT_TABLEEND,
};
static const struct xt_option_entry tos_mt_opts[] = {
{.name = "tos", .id = O_TOS, .type = XTTYPE_TOSMASK,
.flags = XTOPT_INVERT | XTOPT_MAND, .max = 0x3F},
XTOPT_TABLEEND,
};
static void tos_mt_help(void)
{
const struct tos_symbol_info *symbol;
printf(
"tos match options:\n"
"[!] --tos value[/mask] Match Type of Service/Priority field value\n"
"[!] --tos symbol Match TOS field (IPv4 only) by symbol\n"
" Accepted symbolic names for value are:\n");
for (symbol = tos_symbol_names; symbol->name != NULL; ++symbol)
printf(" (0x%02x) %2u %s\n",
symbol->value, symbol->value, symbol->name);
printf("\n");
}
static void tos_mt_parse_v0(struct xt_option_call *cb)
{
struct ipt_tos_info *info = cb->data;
xtables_option_parse(cb);
if (cb->val.tos_mask != 0xFF)
xtables_error(PARAMETER_PROBLEM, "tos: Your kernel is "
"too old to support anything besides /0xFF "
"as a mask.");
info->tos = cb->val.tos_value;
if (cb->invert)
info->invert = true;
}
static void tos_mt_parse(struct xt_option_call *cb)
{
struct xt_tos_match_info *info = cb->data;
xtables_option_parse(cb);
info->tos_value = cb->val.tos_value;
info->tos_mask = cb->val.tos_mask;
if (cb->invert)
info->invert = true;
}
static void tos_mt_print_v0(const void *ip, const struct xt_entry_match *match,
int numeric)
{
const struct ipt_tos_info *info = (const void *)match->data;
printf(" tos match ");
if (info->invert)
printf("!");
if (numeric || !tos_try_print_symbolic("", info->tos, 0x3F))
printf("0x%02x", info->tos);
}
static void tos_mt_print(const void *ip, const struct xt_entry_match *match,
int numeric)
{
const struct xt_tos_match_info *info = (const void *)match->data;
printf(" tos match");
if (info->invert)
printf("!");
if (numeric ||
!tos_try_print_symbolic("", info->tos_value, info->tos_mask))
printf("0x%02x/0x%02x", info->tos_value, info->tos_mask);
}
static void tos_mt_save_v0(const void *ip, const struct xt_entry_match *match)
{
const struct ipt_tos_info *info = (const void *)match->data;
if (info->invert)
printf(" !");
printf(" --tos 0x%02x", info->tos);
}
static void tos_mt_save(const void *ip, const struct xt_entry_match *match)
{
const struct xt_tos_match_info *info = (const void *)match->data;
if (info->invert)
printf(" !");
printf(" --tos 0x%02x/0x%02x", info->tos_value, info->tos_mask);
}
static struct xtables_match tos_mt_reg[] = {
{
.version = XTABLES_VERSION,
.name = "tos",
.family = NFPROTO_IPV4,
.revision = 0,
.size = XT_ALIGN(sizeof(struct ipt_tos_info)),
.userspacesize = XT_ALIGN(sizeof(struct ipt_tos_info)),
.help = tos_mt_help,
.print = tos_mt_print_v0,
.save = tos_mt_save_v0,
.x6_parse = tos_mt_parse_v0,
.x6_options = tos_mt_opts_v0,
},
{
.version = XTABLES_VERSION,
.name = "tos",
.family = NFPROTO_UNSPEC,
.revision = 1,
.size = XT_ALIGN(sizeof(struct xt_tos_match_info)),
.userspacesize = XT_ALIGN(sizeof(struct xt_tos_match_info)),
.help = tos_mt_help,
.print = tos_mt_print,
.save = tos_mt_save,
.x6_parse = tos_mt_parse,
.x6_options = tos_mt_opts,
},
};
void _init(void)
{
xtables_register_matches(tos_mt_reg, ARRAY_SIZE(tos_mt_reg));
}