net/netfilter/xt_MARK.c

   1 /* This is a module which is used for setting the NFMARK field of an skb. */
   2
   3 /* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License version 2 as
   7  * published by the Free Software Foundation.
   8  */
   9
  10 #include <linux/module.h>
  11 #include <linux/skbuff.h>
  12 #include <linux/ip.h>
  13 #include <net/checksum.h>
  14
  15 #include <linux/netfilter/x_tables.h>
  16 #include <linux/netfilter/xt_MARK.h>
  17
  18 MODULE_LICENSE("GPL");
  19 MODULE_AUTHOR("Marc Boucher <marc@mbsi.ca>");
  20 MODULE_DESCRIPTION("ip[6]tables MARK modification module");
  21 MODULE_ALIAS("ipt_MARK");
  22 MODULE_ALIAS("ip6t_MARK");
  23
  24 static unsigned int
  25 target_v0(struct sk_buff **pskb,
  26           const struct net_device *in,
  27           const struct net_device *out,
  28           unsigned int hooknum,
  29           const struct xt_target *target,
  30           const void *targinfo,
  31           void *userinfo)
  32 {
  33         const struct xt_mark_target_info *markinfo = targinfo;
  34
  35         if((*pskb)->nfmark != markinfo->mark)
  36                 (*pskb)->nfmark = markinfo->mark;
  37
  38         return XT_CONTINUE;
  39 }
  40
  41 static unsigned int
  42 target_v1(struct sk_buff **pskb,
  43           const struct net_device *in,
  44           const struct net_device *out,
  45           unsigned int hooknum,
  46           const struct xt_target *target,
  47           const void *targinfo,
  48           void *userinfo)
  49 {
  50         const struct xt_mark_target_info_v1 *markinfo = targinfo;
  51         int mark = 0;
  52
  53         switch (markinfo->mode) {
  54         case XT_MARK_SET:
  55                 mark = markinfo->mark;
  56                 break;
  57
  58         case XT_MARK_AND:
  59                 mark = (*pskb)->nfmark & markinfo->mark;
  60                 break;
  61
  62         case XT_MARK_OR:
  63                 mark = (*pskb)->nfmark | markinfo->mark;
  64                 break;
  65         }
  66
  67         if((*pskb)->nfmark != mark)
  68                 (*pskb)->nfmark = mark;
  69
  70         return XT_CONTINUE;
  71 }
  72
  73
  74 static int
  75 checkentry_v0(const char *tablename,
  76               const void *entry,
  77               const struct xt_target *target,
  78               void *targinfo,
  79               unsigned int targinfosize,
  80               unsigned int hook_mask)
  81 {
  82         struct xt_mark_target_info *markinfo = targinfo;
  83
  84         if (markinfo->mark > 0xffffffff) {
  85                 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
  86                 return 0;
  87         }
  88         return 1;
  89 }
  90
  91 static int
  92 checkentry_v1(const char *tablename,
  93               const void *entry,
  94               const struct xt_target *target,
  95               void *targinfo,
  96               unsigned int targinfosize,
  97               unsigned int hook_mask)
  98 {
  99         struct xt_mark_target_info_v1 *markinfo = targinfo;
 100
 101         if (markinfo->mode != XT_MARK_SET
 102             && markinfo->mode != XT_MARK_AND
 103             && markinfo->mode != XT_MARK_OR) {
 104                 printk(KERN_WARNING "MARK: unknown mode %u\n",
 105                        markinfo->mode);
 106                 return 0;
 107         }
 108         if (markinfo->mark > 0xffffffff) {
 109                 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
 110                 return 0;
 111         }
 112         return 1;
 113 }
 114
 115 static struct xt_target ipt_mark_reg_v0 = {
 116         .name           = "MARK",
 117         .target         = target_v0,
 118         .targetsize     = sizeof(struct xt_mark_target_info),
 119         .table          = "mangle",
 120         .checkentry     = checkentry_v0,
 121         .me             = THIS_MODULE,
 122         .family         = AF_INET,
 123         .revision       = 0,
 124 };
 125
 126 static struct xt_target ipt_mark_reg_v1 = {
 127         .name           = "MARK",
 128         .target         = target_v1,
 129         .targetsize     = sizeof(struct xt_mark_target_info_v1),
 130         .table          = "mangle",
 131         .checkentry     = checkentry_v1,
 132         .me             = THIS_MODULE,
 133         .family         = AF_INET,
 134         .revision       = 1,
 135 };
 136
 137 static struct xt_target ip6t_mark_reg_v0 = {
 138         .name           = "MARK",
 139         .target         = target_v0,
 140         .targetsize     = sizeof(struct xt_mark_target_info),
 141         .table          = "mangle",
 142         .checkentry     = checkentry_v0,
 143         .me             = THIS_MODULE,
 144         .family         = AF_INET6,
 145         .revision       = 0,
 146 };
 147
 148 static int __init xt_mark_init(void)
 149 {
 150         int err;
 151
 152         err = xt_register_target(&ipt_mark_reg_v0);
 153         if (err)
 154                 return err;
 155
 156         err = xt_register_target(&ipt_mark_reg_v1);
 157         if (err)
 158                 xt_unregister_target(&ipt_mark_reg_v0);
 159
 160         err = xt_register_target(&ip6t_mark_reg_v0);
 161         if (err) {
 162                 xt_unregister_target(&ipt_mark_reg_v0);
 163                 xt_unregister_target(&ipt_mark_reg_v1);
 164         }
 165
 166         return err;
 167 }
 168
 169 static void __exit xt_mark_fini(void)
 170 {
 171         xt_unregister_target(&ipt_mark_reg_v0);
 172         xt_unregister_target(&ipt_mark_reg_v1);
 173         xt_unregister_target(&ip6t_mark_reg_v0);
 174 }
 175
 176 module_init(xt_mark_init);
 177 module_exit(xt_mark_fini);