1*a71a9546SAutomerger Merge Worker /* Shared library add-on to iptables to add comment match support.
2*a71a9546SAutomerger Merge Worker *
3*a71a9546SAutomerger Merge Worker * ChangeLog
4*a71a9546SAutomerger Merge Worker * 2003-05-13: Brad Fisher <[email protected]>
5*a71a9546SAutomerger Merge Worker * Initial comment match
6*a71a9546SAutomerger Merge Worker * 2004-05-12: Brad Fisher <[email protected]>
7*a71a9546SAutomerger Merge Worker * Port to patch-o-matic-ng
8*a71a9546SAutomerger Merge Worker */
9*a71a9546SAutomerger Merge Worker #include <stdio.h>
10*a71a9546SAutomerger Merge Worker #include <xtables.h>
11*a71a9546SAutomerger Merge Worker #include <linux/netfilter/xt_comment.h>
12*a71a9546SAutomerger Merge Worker
13*a71a9546SAutomerger Merge Worker enum {
14*a71a9546SAutomerger Merge Worker O_COMMENT = 0,
15*a71a9546SAutomerger Merge Worker };
16*a71a9546SAutomerger Merge Worker
comment_help(void)17*a71a9546SAutomerger Merge Worker static void comment_help(void)
18*a71a9546SAutomerger Merge Worker {
19*a71a9546SAutomerger Merge Worker printf(
20*a71a9546SAutomerger Merge Worker "comment match options:\n"
21*a71a9546SAutomerger Merge Worker "--comment COMMENT Attach a comment to a rule\n");
22*a71a9546SAutomerger Merge Worker }
23*a71a9546SAutomerger Merge Worker
24*a71a9546SAutomerger Merge Worker static const struct xt_option_entry comment_opts[] = {
25*a71a9546SAutomerger Merge Worker {.name = "comment", .id = O_COMMENT, .type = XTTYPE_STRING,
26*a71a9546SAutomerger Merge Worker .flags = XTOPT_MAND | XTOPT_PUT,
27*a71a9546SAutomerger Merge Worker XTOPT_POINTER(struct xt_comment_info, comment)},
28*a71a9546SAutomerger Merge Worker XTOPT_TABLEEND,
29*a71a9546SAutomerger Merge Worker };
30*a71a9546SAutomerger Merge Worker
31*a71a9546SAutomerger Merge Worker static void
comment_print(const void * ip,const struct xt_entry_match * match,int numeric)32*a71a9546SAutomerger Merge Worker comment_print(const void *ip, const struct xt_entry_match *match, int numeric)
33*a71a9546SAutomerger Merge Worker {
34*a71a9546SAutomerger Merge Worker struct xt_comment_info *commentinfo = (void *)match->data;
35*a71a9546SAutomerger Merge Worker
36*a71a9546SAutomerger Merge Worker commentinfo->comment[XT_MAX_COMMENT_LEN-1] = '\0';
37*a71a9546SAutomerger Merge Worker printf(" /* %s */", commentinfo->comment);
38*a71a9546SAutomerger Merge Worker }
39*a71a9546SAutomerger Merge Worker
40*a71a9546SAutomerger Merge Worker /* Saves the union ipt_matchinfo in parsable form to stdout. */
41*a71a9546SAutomerger Merge Worker static void
comment_save(const void * ip,const struct xt_entry_match * match)42*a71a9546SAutomerger Merge Worker comment_save(const void *ip, const struct xt_entry_match *match)
43*a71a9546SAutomerger Merge Worker {
44*a71a9546SAutomerger Merge Worker struct xt_comment_info *commentinfo = (void *)match->data;
45*a71a9546SAutomerger Merge Worker
46*a71a9546SAutomerger Merge Worker commentinfo->comment[XT_MAX_COMMENT_LEN-1] = '\0';
47*a71a9546SAutomerger Merge Worker printf(" --comment");
48*a71a9546SAutomerger Merge Worker xtables_save_string(commentinfo->comment);
49*a71a9546SAutomerger Merge Worker }
50*a71a9546SAutomerger Merge Worker
comment_xlate(struct xt_xlate * xl,const struct xt_xlate_mt_params * params)51*a71a9546SAutomerger Merge Worker static int comment_xlate(struct xt_xlate *xl,
52*a71a9546SAutomerger Merge Worker const struct xt_xlate_mt_params *params)
53*a71a9546SAutomerger Merge Worker {
54*a71a9546SAutomerger Merge Worker struct xt_comment_info *commentinfo = (void *)params->match->data;
55*a71a9546SAutomerger Merge Worker char comment[XT_MAX_COMMENT_LEN + sizeof("\\\"\\\"")];
56*a71a9546SAutomerger Merge Worker
57*a71a9546SAutomerger Merge Worker commentinfo->comment[XT_MAX_COMMENT_LEN - 1] = '\0';
58*a71a9546SAutomerger Merge Worker snprintf(comment, sizeof(comment), "\"%s\"", commentinfo->comment);
59*a71a9546SAutomerger Merge Worker
60*a71a9546SAutomerger Merge Worker xt_xlate_add_comment(xl, comment);
61*a71a9546SAutomerger Merge Worker
62*a71a9546SAutomerger Merge Worker return 1;
63*a71a9546SAutomerger Merge Worker }
64*a71a9546SAutomerger Merge Worker
65*a71a9546SAutomerger Merge Worker static struct xtables_match comment_match = {
66*a71a9546SAutomerger Merge Worker .family = NFPROTO_UNSPEC,
67*a71a9546SAutomerger Merge Worker .name = "comment",
68*a71a9546SAutomerger Merge Worker .version = XTABLES_VERSION,
69*a71a9546SAutomerger Merge Worker .size = XT_ALIGN(sizeof(struct xt_comment_info)),
70*a71a9546SAutomerger Merge Worker .userspacesize = XT_ALIGN(sizeof(struct xt_comment_info)),
71*a71a9546SAutomerger Merge Worker .help = comment_help,
72*a71a9546SAutomerger Merge Worker .print = comment_print,
73*a71a9546SAutomerger Merge Worker .save = comment_save,
74*a71a9546SAutomerger Merge Worker .x6_parse = xtables_option_parse,
75*a71a9546SAutomerger Merge Worker .x6_options = comment_opts,
76*a71a9546SAutomerger Merge Worker .xlate = comment_xlate,
77*a71a9546SAutomerger Merge Worker };
78*a71a9546SAutomerger Merge Worker
_init(void)79*a71a9546SAutomerger Merge Worker void _init(void)
80*a71a9546SAutomerger Merge Worker {
81*a71a9546SAutomerger Merge Worker xtables_register_match(&comment_match);
82*a71a9546SAutomerger Merge Worker }
83