mirror of
https://github.com/ChronosX88/netsukuku.git
synced 2024-11-22 18:22:18 +00:00
e264723db2
* Style varied wildly between files and within files.
* find . -name "*.c" -exec indent {} -ut -ts4 -kr -psl \;
* find . -name "*.h" -exec indent {} -ut -ts4 -kr -psl \;
119 lines
3.4 KiB
C
119 lines
3.4 KiB
C
#ifndef MARK_H
|
|
#define MARK_H
|
|
|
|
#include <linux/version.h>
|
|
|
|
//original inclusions
|
|
#if LINUX_VERSION_CODE <= KERNEL_VERSION(2, 7, 0)
|
|
#if 0
|
|
#include "libiptc/libiptc.h"
|
|
#include <linux/netfilter_ipv4/ip_conntrack.h>
|
|
#include <linux/netfilter_ipv4/ip_conntrack_tuple.h>
|
|
#include "libiptc/ipt_conntrack.h"
|
|
#include "libiptc/ipt_connmark.h"
|
|
#include "libiptc/ipt_CONNMARK.h"
|
|
#endif
|
|
|
|
#if 1
|
|
#include "libiptc/libiptc.h"
|
|
#if 1
|
|
#include <linux/netfilter/nf_conntrack_common.h>
|
|
#endif
|
|
#if 0
|
|
#include <linux/netfilter_ipv4/ipt_conntrack_tuple.h>
|
|
#endif
|
|
#include "libiptc/ipt_conntrack.h"
|
|
#include "libiptc/ipt_connmark.h"
|
|
#include "libiptc/ipt_CONNMARK.h"
|
|
#endif
|
|
|
|
/* 2010 fixes for debian package */
|
|
#if 0
|
|
#include "libiptc/libiptc.h"
|
|
#include <linux/netfilter/nf_conntrack_common.h>
|
|
#include <linux/netfilter_ipv4/ipt_conntrack.h>
|
|
#include <linux/netfilter_ipv4/ipt_connmark.h>
|
|
#include <linux/netfilter_ipv4/ipt_CONNMARK.h>
|
|
#endif
|
|
#endif
|
|
|
|
#include "libiptc/libiptc.h"
|
|
#include <linux/netfilter/nf_conntrack_common.h>
|
|
#include "libiptc/ipt_conntrack.h"
|
|
#include "libiptc/ipt_connmark.h"
|
|
#include "libiptc/ipt_CONNMARK.h"
|
|
|
|
#define MANGLE_TABLE "mangle"
|
|
#define FILTER_TABLE "filter"
|
|
#define NTK_MARK_CHAIN "ntk_mark_chain"
|
|
#define CHAIN_OUTPUT "OUTPUT"
|
|
#define CHAIN_POSTROUTING "POSTROUTING"
|
|
#define CHAIN_PREROUTING "PREROUTING"
|
|
#define CHAIN_POSTROUTING "POSTROUTING"
|
|
#define CHAIN_FORWARD "FORWARD"
|
|
|
|
#define MOD_CONNTRACK "conntrack"
|
|
#define MOD_CONNMARK "CONNMARK"
|
|
#define MARK_TARGET "MARK"
|
|
|
|
#define NTK_NET_STR "10.0.0.0"
|
|
#define NTK_NET_MASK_STR "255.0.0.0"
|
|
|
|
#define IPT_ENTRY_SZ sizeof(struct ipt_entry)
|
|
#define IPT_ENTRY_MATCH_SZ sizeof(struct ipt_entry_match)
|
|
#define IPT_ENTRY_TARGET_SZ sizeof(struct ipt_entry_target)
|
|
#define IPT_CT_INFO_SZ sizeof(struct ipt_conntrack_info)
|
|
#define IPT_CM_TARGET_INFO_SZ sizeof(struct ipt_connmark_target_info)
|
|
|
|
#define MATCH_SZ IPT_ENTRY_MATCH_SZ+IPT_CT_INFO_SZ
|
|
#define TARGET_SZ IPT_ENTRY_TARGET_SZ+IPT_CM_TARGET_INFO_SZ
|
|
|
|
#define RESTORE_OUTPUT_RULE_SZ IPT_ENTRY_SZ+MATCH_SZ+TARGET_SZ
|
|
|
|
#define OFFSET_MATCH IPT_ENTRY_SZ
|
|
#define OFFSET_MATCH_INFO OFFSET_MATCH+IPT_ENTRY_MATCH_SZ
|
|
#define OFFSET_TARGET OFFSET_MATCH_INFO+IPT_CT_INFO_SZ
|
|
#define OFFSET_TARGET_INFO OFFSET_TARGET+IPT_ENTRY_TARGET_SZ
|
|
|
|
#define MARK_RULE_SZ IPT_ENTRY_SZ+TARGET_SZ
|
|
#define MAX_MARK_RULES 100
|
|
|
|
#define NTK_FORWARD_RULE_SZ OFFSET_TARGET_INFO+4
|
|
|
|
#define IGW_FILTER_RULE_SZ IPT_ENTRY_SZ+IPT_ENTRY_SZ+4
|
|
#define INET_MARK 25
|
|
|
|
#define MAX_RULE_SZ RESTORE_OUTPUT_RULE_SZ
|
|
|
|
//struct in_addr inet_dst,inet_dst_mask;
|
|
|
|
typedef struct rule_store {
|
|
char e[RESTORE_OUTPUT_RULE_SZ];
|
|
int sz;
|
|
char *chain;
|
|
} rule_store;
|
|
|
|
/* Functions */
|
|
|
|
int table_init(const char *table, iptc_handle_t * t);
|
|
int insert_rule(const char *rule, iptc_handle_t * t, const char *chain,
|
|
int pos);
|
|
int append_rule(const char *rule, iptc_handle_t * t, const char *chain);
|
|
int commit_rules(iptc_handle_t * t);
|
|
void restore_output_rule_init(char *rule);
|
|
void ntk_forward_rule_init(char *rule);
|
|
void mark_rule_init(char *rule, char *outiface, int outiface_num);
|
|
void igw_mark_rule_init(char *rule);
|
|
int ntk_mark_chain_init(iptc_handle_t * t);
|
|
int store_rules();
|
|
int mark_init(int igw);
|
|
int count_ntk_mark_chain(iptc_handle_t * t);
|
|
int create_mark_rules(int n);
|
|
int delete_ntk_forward_chain(iptc_handle_t * t);
|
|
int delete_first_rule(iptc_handle_t * t, const char *chain);
|
|
int rule_position(rule_store * rule, iptc_handle_t * t);
|
|
int delete_rule(rule_store * rule, iptc_handle_t * t);
|
|
int mark_close();
|
|
|
|
#endif /* MARK_H */
|