netlink: implement nla_get_in_addr and nla_get_in6_addr
[deliverable/linux.git] / net / ipv4 / netfilter / nft_masq_ipv4.c
CommitLineData
9ba1f726
AB
1/*
2 * Copyright (c) 2014 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License version 2 as
6 * published by the Free Software Foundation.
7 */
8
9#include <linux/kernel.h>
10#include <linux/init.h>
11#include <linux/module.h>
12#include <linux/netlink.h>
13#include <linux/netfilter.h>
14#include <linux/netfilter/nf_tables.h>
15#include <net/netfilter/nf_tables.h>
16#include <net/netfilter/nft_masq.h>
17#include <net/netfilter/ipv4/nf_nat_masquerade.h>
18
19static void nft_masq_ipv4_eval(const struct nft_expr *expr,
20 struct nft_data data[NFT_REG_MAX + 1],
21 const struct nft_pktinfo *pkt)
22{
23 struct nft_masq *priv = nft_expr_priv(expr);
24 struct nf_nat_range range;
25 unsigned int verdict;
26
6b96686e 27 memset(&range, 0, sizeof(range));
9ba1f726
AB
28 range.flags = priv->flags;
29
30 verdict = nf_nat_masquerade_ipv4(pkt->skb, pkt->ops->hooknum,
31 &range, pkt->out);
32
33 data[NFT_REG_VERDICT].verdict = verdict;
34}
35
9ba1f726
AB
36static struct nft_expr_type nft_masq_ipv4_type;
37static const struct nft_expr_ops nft_masq_ipv4_ops = {
38 .type = &nft_masq_ipv4_type,
39 .size = NFT_EXPR_SIZE(sizeof(struct nft_masq)),
40 .eval = nft_masq_ipv4_eval,
8da4cc1b 41 .init = nft_masq_init,
9ba1f726 42 .dump = nft_masq_dump,
7210e4e3 43 .validate = nft_masq_validate,
9ba1f726
AB
44};
45
46static struct nft_expr_type nft_masq_ipv4_type __read_mostly = {
47 .family = NFPROTO_IPV4,
48 .name = "masq",
49 .ops = &nft_masq_ipv4_ops,
50 .policy = nft_masq_policy,
51 .maxattr = NFTA_MASQ_MAX,
52 .owner = THIS_MODULE,
53};
54
55static int __init nft_masq_ipv4_module_init(void)
56{
8da4cc1b
AB
57 int ret;
58
59 ret = nft_register_expr(&nft_masq_ipv4_type);
60 if (ret < 0)
61 return ret;
62
63 nf_nat_masquerade_ipv4_register_notifier();
64
65 return ret;
9ba1f726
AB
66}
67
68static void __exit nft_masq_ipv4_module_exit(void)
69{
70 nft_unregister_expr(&nft_masq_ipv4_type);
8da4cc1b 71 nf_nat_masquerade_ipv4_unregister_notifier();
9ba1f726
AB
72}
73
74module_init(nft_masq_ipv4_module_init);
75module_exit(nft_masq_ipv4_module_exit);
76
77MODULE_LICENSE("GPL");
78MODULE_AUTHOR("Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>");
79MODULE_ALIAS_NFT_AF_EXPR(AF_INET, "masq");
This page took 0.082348 seconds and 5 git commands to generate.