Blame view
net/netfilter/xt_mac.c
1.6 KB
d2912cb15 treewide: Replace... |
1 |
// SPDX-License-Identifier: GPL-2.0-only |
1da177e4c Linux-2.6.12-rc2 |
2 3 4 5 |
/* Kernel module to match MAC address parameters. */ /* (C) 1999-2001 Paul `Rusty' Russell * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> |
1da177e4c Linux-2.6.12-rc2 |
6 7 8 9 |
*/ #include <linux/module.h> #include <linux/skbuff.h> |
e5042a290 netfilter: xtable... |
10 |
#include <linux/if_arp.h> |
1da177e4c Linux-2.6.12-rc2 |
11 |
#include <linux/if_ether.h> |
d3f4a687f [NET]: Change mem... |
12 |
#include <linux/etherdevice.h> |
1da177e4c Linux-2.6.12-rc2 |
13 |
|
2e4e6a17a [NETFILTER] x_tab... |
14 |
#include <linux/netfilter_ipv4.h> |
891350c9d [NETFILTER]: xt_m... |
15 |
#include <linux/netfilter_ipv6.h> |
2e4e6a17a [NETFILTER] x_tab... |
16 17 |
#include <linux/netfilter/xt_mac.h> #include <linux/netfilter/x_tables.h> |
1da177e4c Linux-2.6.12-rc2 |
18 19 20 |
MODULE_LICENSE("GPL"); MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>"); |
2ae15b64e [NETFILTER]: Upda... |
21 |
MODULE_DESCRIPTION("Xtables: MAC address match"); |
2e4e6a17a [NETFILTER] x_tab... |
22 23 |
MODULE_ALIAS("ipt_mac"); MODULE_ALIAS("ip6t_mac"); |
1da177e4c Linux-2.6.12-rc2 |
24 |
|
62fc80510 netfilter: xtable... |
25 |
static bool mac_mt(const struct sk_buff *skb, struct xt_action_param *par) |
1da177e4c Linux-2.6.12-rc2 |
26 |
{ |
1d1c397db netfilter: xtable... |
27 28 |
const struct xt_mac_info *info = par->matchinfo; bool ret; |
e5042a290 netfilter: xtable... |
29 30 |
if (skb->dev == NULL || skb->dev->type != ARPHRD_ETHER) return false; |
1d1c397db netfilter: xtable... |
31 32 33 34 |
if (skb_mac_header(skb) < skb->head) return false; if (skb_mac_header(skb) + ETH_HLEN > skb->data) return false; |
8561cf997 netfilter: Conver... |
35 |
ret = ether_addr_equal(eth_hdr(skb)->h_source, info->srcaddr); |
1d1c397db netfilter: xtable... |
36 37 |
ret ^= info->invert; return ret; |
1da177e4c Linux-2.6.12-rc2 |
38 |
} |
ab4f21e6f netfilter: xtable... |
39 40 41 42 43 44 45 46 47 |
static struct xt_match mac_mt_reg __read_mostly = { .name = "mac", .revision = 0, .family = NFPROTO_UNSPEC, .match = mac_mt, .matchsize = sizeof(struct xt_mac_info), .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD), .me = THIS_MODULE, |
1da177e4c Linux-2.6.12-rc2 |
48 |
}; |
d3c5ee6d5 [NETFILTER]: x_ta... |
49 |
static int __init mac_mt_init(void) |
1da177e4c Linux-2.6.12-rc2 |
50 |
{ |
ab4f21e6f netfilter: xtable... |
51 |
return xt_register_match(&mac_mt_reg); |
1da177e4c Linux-2.6.12-rc2 |
52 |
} |
d3c5ee6d5 [NETFILTER]: x_ta... |
53 |
static void __exit mac_mt_exit(void) |
1da177e4c Linux-2.6.12-rc2 |
54 |
{ |
ab4f21e6f netfilter: xtable... |
55 |
xt_unregister_match(&mac_mt_reg); |
1da177e4c Linux-2.6.12-rc2 |
56 |
} |
d3c5ee6d5 [NETFILTER]: x_ta... |
57 58 |
module_init(mac_mt_init); module_exit(mac_mt_exit); |