Blame view
net/netfilter/xt_mac.c
1.74 KB
1da177e4c Linux-2.6.12-rc2 |
1 2 3 4 5 6 7 8 9 10 11 12 |
/* Kernel module to match MAC address parameters. */ /* (C) 1999-2001 Paul `Rusty' Russell * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. */ #include <linux/module.h> #include <linux/skbuff.h> |
e5042a290 netfilter: xtable... |
13 |
#include <linux/if_arp.h> |
1da177e4c Linux-2.6.12-rc2 |
14 |
#include <linux/if_ether.h> |
d3f4a687f [NET]: Change mem... |
15 |
#include <linux/etherdevice.h> |
1da177e4c Linux-2.6.12-rc2 |
16 |
|
2e4e6a17a [NETFILTER] x_tab... |
17 |
#include <linux/netfilter_ipv4.h> |
891350c9d [NETFILTER]: xt_m... |
18 |
#include <linux/netfilter_ipv6.h> |
2e4e6a17a [NETFILTER] x_tab... |
19 20 |
#include <linux/netfilter/xt_mac.h> #include <linux/netfilter/x_tables.h> |
1da177e4c Linux-2.6.12-rc2 |
21 22 23 |
MODULE_LICENSE("GPL"); MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>"); |
2ae15b64e [NETFILTER]: Upda... |
24 |
MODULE_DESCRIPTION("Xtables: MAC address match"); |
2e4e6a17a [NETFILTER] x_tab... |
25 26 |
MODULE_ALIAS("ipt_mac"); MODULE_ALIAS("ip6t_mac"); |
1da177e4c Linux-2.6.12-rc2 |
27 |
|
62fc80510 netfilter: xtable... |
28 |
static bool mac_mt(const struct sk_buff *skb, struct xt_action_param *par) |
1da177e4c Linux-2.6.12-rc2 |
29 |
{ |
1d1c397db netfilter: xtable... |
30 31 |
const struct xt_mac_info *info = par->matchinfo; bool ret; |
e5042a290 netfilter: xtable... |
32 33 |
if (skb->dev == NULL || skb->dev->type != ARPHRD_ETHER) return false; |
1d1c397db netfilter: xtable... |
34 35 36 37 |
if (skb_mac_header(skb) < skb->head) return false; if (skb_mac_header(skb) + ETH_HLEN > skb->data) return false; |
8561cf997 netfilter: Conver... |
38 |
ret = ether_addr_equal(eth_hdr(skb)->h_source, info->srcaddr); |
1d1c397db netfilter: xtable... |
39 40 |
ret ^= info->invert; return ret; |
1da177e4c Linux-2.6.12-rc2 |
41 |
} |
ab4f21e6f netfilter: xtable... |
42 43 44 45 46 47 48 49 50 |
static struct xt_match mac_mt_reg __read_mostly = { .name = "mac", .revision = 0, .family = NFPROTO_UNSPEC, .match = mac_mt, .matchsize = sizeof(struct xt_mac_info), .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD), .me = THIS_MODULE, |
1da177e4c Linux-2.6.12-rc2 |
51 |
}; |
d3c5ee6d5 [NETFILTER]: x_ta... |
52 |
static int __init mac_mt_init(void) |
1da177e4c Linux-2.6.12-rc2 |
53 |
{ |
ab4f21e6f netfilter: xtable... |
54 |
return xt_register_match(&mac_mt_reg); |
1da177e4c Linux-2.6.12-rc2 |
55 |
} |
d3c5ee6d5 [NETFILTER]: x_ta... |
56 |
static void __exit mac_mt_exit(void) |
1da177e4c Linux-2.6.12-rc2 |
57 |
{ |
ab4f21e6f netfilter: xtable... |
58 |
xt_unregister_match(&mac_mt_reg); |
1da177e4c Linux-2.6.12-rc2 |
59 |
} |
d3c5ee6d5 [NETFILTER]: x_ta... |
60 61 |
module_init(mac_mt_init); module_exit(mac_mt_exit); |