[deliverable/linux.git] / net / netfilter / xt_realm.c

/* IP tables module for matching the routing realm
 *
 * (C) 2003 by Sampsa Ranta <sampsa@netsonic.fi>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/netdevice.h>
#include <net/route.h>

#include <linux/netfilter_ipv4.h>
#include <linux/netfilter/xt_realm.h>
#include <linux/netfilter/x_tables.h>

MODULE_AUTHOR("Sampsa Ranta <sampsa@netsonic.fi>");
MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("X_tables realm match");
MODULE_ALIAS("ipt_realm");

static int
match(const struct sk_buff *skb,
      const struct net_device *in,
      const struct net_device *out,
      const struct xt_match *match,
      const void *matchinfo,
      int offset,
      unsigned int protoff,
      int *hotdrop)
{
	const struct xt_realm_info *info = matchinfo;
	struct dst_entry *dst = skb->dst;

	return (info->id == (dst->tclassid & info->mask)) ^ info->invert;
}

static struct xt_match realm_match = {
	.name		= "realm",
	.match		= match,
	.matchsize	= sizeof(struct xt_realm_info),
	.hooks		= (1 << NF_IP_POST_ROUTING) | (1 << NF_IP_FORWARD) |
			  (1 << NF_IP_LOCAL_OUT) | (1 << NF_IP_LOCAL_IN),
	.family		= AF_INET,
	.me		= THIS_MODULE
};

static int __init xt_realm_init(void)
{
	return xt_register_match(&realm_match);
}

static void __exit xt_realm_fini(void)
{
	xt_unregister_match(&realm_match);
}

module_init(xt_realm_init);
module_exit(xt_realm_fini);
Commit	Line	Data
	1	/* IP tables module for matching the routing realm
	2	*
	3	* (C) 2003 by Sampsa Ranta <sampsa@netsonic.fi>
	4	*
	5	* This program is free software; you can redistribute it and/or modify
	6	* it under the terms of the GNU General Public License version 2 as
	7	* published by the Free Software Foundation.
	8	*/
	9
	10	#include <linux/module.h>
	11	#include <linux/skbuff.h>
	12	#include <linux/netdevice.h>
	13	#include <net/route.h>
	14
	15	#include <linux/netfilter_ipv4.h>
	16	#include <linux/netfilter/xt_realm.h>
	17	#include <linux/netfilter/x_tables.h>
	18
	19	MODULE_AUTHOR("Sampsa Ranta <sampsa@netsonic.fi>");
	20	MODULE_LICENSE("GPL");
	21	MODULE_DESCRIPTION("X_tables realm match");
	22	MODULE_ALIAS("ipt_realm");
	23
	24	static int
	25	match(const struct sk_buff *skb,
	26	const struct net_device *in,
	27	const struct net_device *out,
	28	const struct xt_match *match,
	29	const void *matchinfo,
	30	int offset,
	31	unsigned int protoff,
	32	int *hotdrop)
	33	{
	34	const struct xt_realm_info *info = matchinfo;
	35	struct dst_entry *dst = skb->dst;
	36
	37	return (info->id == (dst->tclassid & info->mask)) ^ info->invert;
	38	}
	39
	40	static struct xt_match realm_match = {
	41	.name = "realm",
	42	.match = match,
	43	.matchsize = sizeof(struct xt_realm_info),
	44	.hooks = (1 << NF_IP_POST_ROUTING) \| (1 << NF_IP_FORWARD) \|
	45	(1 << NF_IP_LOCAL_OUT) \| (1 << NF_IP_LOCAL_IN),
	46	.family = AF_INET,
	47	.me = THIS_MODULE
	48	};
	49
	50	static int __init xt_realm_init(void)
	51	{
	52	return xt_register_match(&realm_match);
	53	}
	54
	55	static void __exit xt_realm_fini(void)
	56	{
	57	xt_unregister_match(&realm_match);
	58	}
	59
	60	module_init(xt_realm_init);
	61	module_exit(xt_realm_fini);