2 * Copyright (c) 2014 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License version 2 as
6 * published by the Free Software Foundation.
9 #include <linux/kernel.h>
10 #include <linux/init.h>
11 #include <linux/module.h>
12 #include <linux/netlink.h>
13 #include <linux/netfilter.h>
14 #include <linux/netfilter/nf_tables.h>
15 #include <net/netfilter/nf_nat.h>
16 #include <net/netfilter/nf_tables.h>
17 #include <net/netfilter/nft_redir.h>
19 const struct nla_policy nft_redir_policy
[NFTA_REDIR_MAX
+ 1] = {
20 [NFTA_REDIR_REG_PROTO_MIN
] = { .type
= NLA_U32
},
21 [NFTA_REDIR_REG_PROTO_MAX
] = { .type
= NLA_U32
},
22 [NFTA_REDIR_FLAGS
] = { .type
= NLA_U32
},
24 EXPORT_SYMBOL_GPL(nft_redir_policy
);
26 int nft_redir_validate(const struct nft_ctx
*ctx
,
27 const struct nft_expr
*expr
,
28 const struct nft_data
**data
)
32 err
= nft_chain_validate_dependency(ctx
->chain
, NFT_CHAIN_T_NAT
);
36 return nft_chain_validate_hooks(ctx
->chain
,
37 (1 << NF_INET_PRE_ROUTING
) |
38 (1 << NF_INET_LOCAL_OUT
));
40 EXPORT_SYMBOL_GPL(nft_redir_validate
);
42 int nft_redir_init(const struct nft_ctx
*ctx
,
43 const struct nft_expr
*expr
,
44 const struct nlattr
* const tb
[])
46 struct nft_redir
*priv
= nft_expr_priv(expr
);
49 err
= nft_redir_validate(ctx
, expr
, NULL
);
53 if (tb
[NFTA_REDIR_REG_PROTO_MIN
]) {
54 priv
->sreg_proto_min
=
55 ntohl(nla_get_be32(tb
[NFTA_REDIR_REG_PROTO_MIN
]));
57 err
= nft_validate_input_register(priv
->sreg_proto_min
);
61 if (tb
[NFTA_REDIR_REG_PROTO_MAX
]) {
62 priv
->sreg_proto_max
=
63 ntohl(nla_get_be32(tb
[NFTA_REDIR_REG_PROTO_MAX
]));
65 err
= nft_validate_input_register(priv
->sreg_proto_max
);
69 priv
->sreg_proto_max
= priv
->sreg_proto_min
;
73 if (tb
[NFTA_REDIR_FLAGS
]) {
74 priv
->flags
= ntohl(nla_get_be32(tb
[NFTA_REDIR_FLAGS
]));
75 if (priv
->flags
& ~NF_NAT_RANGE_MASK
)
81 EXPORT_SYMBOL_GPL(nft_redir_init
);
83 int nft_redir_dump(struct sk_buff
*skb
, const struct nft_expr
*expr
)
85 const struct nft_redir
*priv
= nft_expr_priv(expr
);
87 if (priv
->sreg_proto_min
) {
88 if (nla_put_be32(skb
, NFTA_REDIR_REG_PROTO_MIN
,
89 htonl(priv
->sreg_proto_min
)))
91 if (nla_put_be32(skb
, NFTA_REDIR_REG_PROTO_MAX
,
92 htonl(priv
->sreg_proto_max
)))
96 if (priv
->flags
!= 0 &&
97 nla_put_be32(skb
, NFTA_REDIR_FLAGS
, htonl(priv
->flags
)))
105 EXPORT_SYMBOL_GPL(nft_redir_dump
);
107 MODULE_LICENSE("GPL");
108 MODULE_AUTHOR("Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>");