1*a71a9546SAutomerger Merge Worker #include <stdio.h>
2*a71a9546SAutomerger Merge Worker #include <xtables.h>
3*a71a9546SAutomerger Merge Worker #include <linux/netfilter/xt_ipcomp.h>
4*a71a9546SAutomerger Merge Worker
5*a71a9546SAutomerger Merge Worker enum {
6*a71a9546SAutomerger Merge Worker O_compSPI = 0,
7*a71a9546SAutomerger Merge Worker O_compRES,
8*a71a9546SAutomerger Merge Worker };
9*a71a9546SAutomerger Merge Worker
comp_help(void)10*a71a9546SAutomerger Merge Worker static void comp_help(void)
11*a71a9546SAutomerger Merge Worker {
12*a71a9546SAutomerger Merge Worker printf(
13*a71a9546SAutomerger Merge Worker "comp match options:\n"
14*a71a9546SAutomerger Merge Worker "[!] --ipcompspi spi[:spi]\n"
15*a71a9546SAutomerger Merge Worker " match spi (range)\n");
16*a71a9546SAutomerger Merge Worker }
17*a71a9546SAutomerger Merge Worker
18*a71a9546SAutomerger Merge Worker static const struct xt_option_entry comp_opts[] = {
19*a71a9546SAutomerger Merge Worker {.name = "ipcompspi", .id = O_compSPI, .type = XTTYPE_UINT32RC,
20*a71a9546SAutomerger Merge Worker .flags = XTOPT_INVERT | XTOPT_PUT,
21*a71a9546SAutomerger Merge Worker XTOPT_POINTER(struct xt_ipcomp, spis)},
22*a71a9546SAutomerger Merge Worker {.name = "compres", .id = O_compRES, .type = XTTYPE_NONE},
23*a71a9546SAutomerger Merge Worker XTOPT_TABLEEND,
24*a71a9546SAutomerger Merge Worker };
25*a71a9546SAutomerger Merge Worker #undef s
26*a71a9546SAutomerger Merge Worker
comp_parse(struct xt_option_call * cb)27*a71a9546SAutomerger Merge Worker static void comp_parse(struct xt_option_call *cb)
28*a71a9546SAutomerger Merge Worker {
29*a71a9546SAutomerger Merge Worker struct xt_ipcomp *compinfo = cb->data;
30*a71a9546SAutomerger Merge Worker
31*a71a9546SAutomerger Merge Worker xtables_option_parse(cb);
32*a71a9546SAutomerger Merge Worker switch (cb->entry->id) {
33*a71a9546SAutomerger Merge Worker case O_compSPI:
34*a71a9546SAutomerger Merge Worker if (cb->nvals == 1)
35*a71a9546SAutomerger Merge Worker compinfo->spis[1] = compinfo->spis[0];
36*a71a9546SAutomerger Merge Worker if (cb->invert)
37*a71a9546SAutomerger Merge Worker compinfo->invflags |= XT_IPCOMP_INV_SPI;
38*a71a9546SAutomerger Merge Worker break;
39*a71a9546SAutomerger Merge Worker case O_compRES:
40*a71a9546SAutomerger Merge Worker compinfo->hdrres = 1;
41*a71a9546SAutomerger Merge Worker break;
42*a71a9546SAutomerger Merge Worker }
43*a71a9546SAutomerger Merge Worker }
44*a71a9546SAutomerger Merge Worker
45*a71a9546SAutomerger Merge Worker static void
print_spis(const char * name,uint32_t min,uint32_t max,int invert)46*a71a9546SAutomerger Merge Worker print_spis(const char *name, uint32_t min, uint32_t max,
47*a71a9546SAutomerger Merge Worker int invert)
48*a71a9546SAutomerger Merge Worker {
49*a71a9546SAutomerger Merge Worker const char *inv = invert ? "!" : "";
50*a71a9546SAutomerger Merge Worker
51*a71a9546SAutomerger Merge Worker if (min != 0 || max != 0xFFFFFFFF || invert) {
52*a71a9546SAutomerger Merge Worker if (min == max)
53*a71a9546SAutomerger Merge Worker printf("%s:%s%u", name, inv, min);
54*a71a9546SAutomerger Merge Worker else
55*a71a9546SAutomerger Merge Worker printf("%ss:%s%u:%u", name, inv, min, max);
56*a71a9546SAutomerger Merge Worker }
57*a71a9546SAutomerger Merge Worker }
58*a71a9546SAutomerger Merge Worker
comp_print(const void * ip,const struct xt_entry_match * match,int numeric)59*a71a9546SAutomerger Merge Worker static void comp_print(const void *ip, const struct xt_entry_match *match,
60*a71a9546SAutomerger Merge Worker int numeric)
61*a71a9546SAutomerger Merge Worker {
62*a71a9546SAutomerger Merge Worker const struct xt_ipcomp *comp = (struct xt_ipcomp *)match->data;
63*a71a9546SAutomerger Merge Worker
64*a71a9546SAutomerger Merge Worker printf(" comp ");
65*a71a9546SAutomerger Merge Worker print_spis("spi", comp->spis[0], comp->spis[1],
66*a71a9546SAutomerger Merge Worker comp->invflags & XT_IPCOMP_INV_SPI);
67*a71a9546SAutomerger Merge Worker
68*a71a9546SAutomerger Merge Worker if (comp->hdrres)
69*a71a9546SAutomerger Merge Worker printf(" reserved");
70*a71a9546SAutomerger Merge Worker
71*a71a9546SAutomerger Merge Worker if (comp->invflags & ~XT_IPCOMP_INV_MASK)
72*a71a9546SAutomerger Merge Worker printf(" Unknown invflags: 0x%X",
73*a71a9546SAutomerger Merge Worker comp->invflags & ~XT_IPCOMP_INV_MASK);
74*a71a9546SAutomerger Merge Worker }
75*a71a9546SAutomerger Merge Worker
comp_save(const void * ip,const struct xt_entry_match * match)76*a71a9546SAutomerger Merge Worker static void comp_save(const void *ip, const struct xt_entry_match *match)
77*a71a9546SAutomerger Merge Worker {
78*a71a9546SAutomerger Merge Worker const struct xt_ipcomp *compinfo = (struct xt_ipcomp *)match->data;
79*a71a9546SAutomerger Merge Worker
80*a71a9546SAutomerger Merge Worker if (!(compinfo->spis[0] == 0
81*a71a9546SAutomerger Merge Worker && compinfo->spis[1] == 0xFFFFFFFF)) {
82*a71a9546SAutomerger Merge Worker printf("%s --ipcompspi ",
83*a71a9546SAutomerger Merge Worker (compinfo->invflags & XT_IPCOMP_INV_SPI) ? " !" : "");
84*a71a9546SAutomerger Merge Worker if (compinfo->spis[0]
85*a71a9546SAutomerger Merge Worker != compinfo->spis[1])
86*a71a9546SAutomerger Merge Worker printf("%u:%u",
87*a71a9546SAutomerger Merge Worker compinfo->spis[0],
88*a71a9546SAutomerger Merge Worker compinfo->spis[1]);
89*a71a9546SAutomerger Merge Worker else
90*a71a9546SAutomerger Merge Worker printf("%u",
91*a71a9546SAutomerger Merge Worker compinfo->spis[0]);
92*a71a9546SAutomerger Merge Worker }
93*a71a9546SAutomerger Merge Worker
94*a71a9546SAutomerger Merge Worker if (compinfo->hdrres != 0 )
95*a71a9546SAutomerger Merge Worker printf(" --compres");
96*a71a9546SAutomerger Merge Worker }
97*a71a9546SAutomerger Merge Worker
comp_xlate(struct xt_xlate * xl,const struct xt_xlate_mt_params * params)98*a71a9546SAutomerger Merge Worker static int comp_xlate(struct xt_xlate *xl,
99*a71a9546SAutomerger Merge Worker const struct xt_xlate_mt_params *params)
100*a71a9546SAutomerger Merge Worker {
101*a71a9546SAutomerger Merge Worker const struct xt_ipcomp *compinfo =
102*a71a9546SAutomerger Merge Worker (struct xt_ipcomp *)params->match->data;
103*a71a9546SAutomerger Merge Worker
104*a71a9546SAutomerger Merge Worker /* ignore compinfo->hdrres like kernel's xt_ipcomp.c does */
105*a71a9546SAutomerger Merge Worker
106*a71a9546SAutomerger Merge Worker xt_xlate_add(xl, "comp cpi %s",
107*a71a9546SAutomerger Merge Worker compinfo->invflags & XT_IPCOMP_INV_SPI ? "!= " : "");
108*a71a9546SAutomerger Merge Worker if (compinfo->spis[0] != compinfo->spis[1])
109*a71a9546SAutomerger Merge Worker xt_xlate_add(xl, "%u-%u", compinfo->spis[0],
110*a71a9546SAutomerger Merge Worker compinfo->spis[1]);
111*a71a9546SAutomerger Merge Worker else
112*a71a9546SAutomerger Merge Worker xt_xlate_add(xl, "%u", compinfo->spis[0]);
113*a71a9546SAutomerger Merge Worker
114*a71a9546SAutomerger Merge Worker return 1;
115*a71a9546SAutomerger Merge Worker }
116*a71a9546SAutomerger Merge Worker
117*a71a9546SAutomerger Merge Worker static struct xtables_match comp_mt_reg = {
118*a71a9546SAutomerger Merge Worker .name = "ipcomp",
119*a71a9546SAutomerger Merge Worker .version = XTABLES_VERSION,
120*a71a9546SAutomerger Merge Worker .family = NFPROTO_UNSPEC,
121*a71a9546SAutomerger Merge Worker .size = XT_ALIGN(sizeof(struct xt_ipcomp)),
122*a71a9546SAutomerger Merge Worker .userspacesize = XT_ALIGN(sizeof(struct xt_ipcomp)),
123*a71a9546SAutomerger Merge Worker .help = comp_help,
124*a71a9546SAutomerger Merge Worker .print = comp_print,
125*a71a9546SAutomerger Merge Worker .save = comp_save,
126*a71a9546SAutomerger Merge Worker .x6_parse = comp_parse,
127*a71a9546SAutomerger Merge Worker .x6_options = comp_opts,
128*a71a9546SAutomerger Merge Worker .xlate = comp_xlate,
129*a71a9546SAutomerger Merge Worker };
130*a71a9546SAutomerger Merge Worker
131*a71a9546SAutomerger Merge Worker void
_init(void)132*a71a9546SAutomerger Merge Worker _init(void)
133*a71a9546SAutomerger Merge Worker {
134*a71a9546SAutomerger Merge Worker xtables_register_match(&comp_mt_reg);
135*a71a9546SAutomerger Merge Worker };
136*a71a9546SAutomerger Merge Worker
137