Blame view
net/netfilter/xt_mac.c
1.75 KB
1da177e4c
|
1 2 3 4 5 6 7 8 9 10 11 12 |
/* Kernel module to match MAC address parameters. */ /* (C) 1999-2001 Paul `Rusty' Russell * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. */ #include <linux/module.h> #include <linux/skbuff.h> |
e5042a290
|
13 |
#include <linux/if_arp.h> |
1da177e4c
|
14 |
#include <linux/if_ether.h> |
d3f4a687f
|
15 |
#include <linux/etherdevice.h> |
1da177e4c
|
16 |
|
2e4e6a17a
|
17 |
#include <linux/netfilter_ipv4.h> |
891350c9d
|
18 |
#include <linux/netfilter_ipv6.h> |
2e4e6a17a
|
19 20 |
#include <linux/netfilter/xt_mac.h> #include <linux/netfilter/x_tables.h> |
1da177e4c
|
21 22 23 |
MODULE_LICENSE("GPL"); MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>"); |
2ae15b64e
|
24 |
MODULE_DESCRIPTION("Xtables: MAC address match"); |
2e4e6a17a
|
25 26 |
MODULE_ALIAS("ipt_mac"); MODULE_ALIAS("ip6t_mac"); |
1da177e4c
|
27 |
|
62fc80510
|
28 |
static bool mac_mt(const struct sk_buff *skb, struct xt_action_param *par) |
1da177e4c
|
29 |
{ |
1d1c397db
|
30 31 |
const struct xt_mac_info *info = par->matchinfo; bool ret; |
e5042a290
|
32 33 |
if (skb->dev == NULL || skb->dev->type != ARPHRD_ETHER) return false; |
1d1c397db
|
34 35 36 37 38 39 40 |
if (skb_mac_header(skb) < skb->head) return false; if (skb_mac_header(skb) + ETH_HLEN > skb->data) return false; ret = compare_ether_addr(eth_hdr(skb)->h_source, info->srcaddr) == 0; ret ^= info->invert; return ret; |
1da177e4c
|
41 |
} |
ab4f21e6f
|
42 43 44 45 46 47 48 49 50 |
static struct xt_match mac_mt_reg __read_mostly = { .name = "mac", .revision = 0, .family = NFPROTO_UNSPEC, .match = mac_mt, .matchsize = sizeof(struct xt_mac_info), .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD), .me = THIS_MODULE, |
1da177e4c
|
51 |
}; |
d3c5ee6d5
|
52 |
static int __init mac_mt_init(void) |
1da177e4c
|
53 |
{ |
ab4f21e6f
|
54 |
return xt_register_match(&mac_mt_reg); |
1da177e4c
|
55 |
} |
d3c5ee6d5
|
56 |
static void __exit mac_mt_exit(void) |
1da177e4c
|
57 |
{ |
ab4f21e6f
|
58 |
xt_unregister_match(&mac_mt_reg); |
1da177e4c
|
59 |
} |
d3c5ee6d5
|
60 61 |
module_init(mac_mt_init); module_exit(mac_mt_exit); |