]>
Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * 25-Jul-1998 Major changes to allow for ip chain table | |
3 | * | |
4 | * 3-Jan-2000 Named tables to allow packet selection for different uses. | |
5 | */ | |
6 | ||
7 | /* | |
8 | * Format of an IP firewall descriptor | |
9 | * | |
10 | * src, dst, src_mask, dst_mask are always stored in network byte order. | |
11 | * flags are stored in host byte order (of course). | |
12 | * Port numbers are stored in HOST byte order. | |
13 | */ | |
1da177e4 LT |
14 | #ifndef _IPTABLES_H |
15 | #define _IPTABLES_H | |
16 | ||
1da177e4 | 17 | #include <linux/if.h> |
1da177e4 LT |
18 | #include <linux/in.h> |
19 | #include <linux/ip.h> | |
20 | #include <linux/skbuff.h> | |
1da177e4 LT |
21 | |
22 | #include <linux/init.h> | |
17c07592 DH |
23 | #include <uapi/linux/netfilter_ipv4/ip_tables.h> |
24 | ||
1da177e4 LT |
25 | extern void ipt_init(void) __init; |
26 | ||
a67dd266 FW |
27 | int ipt_register_table(struct net *net, const struct xt_table *table, |
28 | const struct ipt_replace *repl, | |
29 | const struct nf_hook_ops *ops, struct xt_table **res); | |
30 | void ipt_unregister_table(struct net *net, struct xt_table *table, | |
31 | const struct nf_hook_ops *ops); | |
1da177e4 | 32 | |
1da177e4 | 33 | /* Standard entry. */ |
d94d9fee | 34 | struct ipt_standard { |
1da177e4 | 35 | struct ipt_entry entry; |
87a2e70d | 36 | struct xt_standard_target target; |
1da177e4 LT |
37 | }; |
38 | ||
d94d9fee | 39 | struct ipt_error { |
1da177e4 | 40 | struct ipt_entry entry; |
75f0a0fd | 41 | struct xt_error_target target; |
1da177e4 LT |
42 | }; |
43 | ||
3c2ad469 PM |
44 | #define IPT_ENTRY_INIT(__size) \ |
45 | { \ | |
46 | .target_offset = sizeof(struct ipt_entry), \ | |
47 | .next_offset = (__size), \ | |
48 | } | |
49 | ||
50 | #define IPT_STANDARD_INIT(__verdict) \ | |
51 | { \ | |
52 | .entry = IPT_ENTRY_INIT(sizeof(struct ipt_standard)), \ | |
243bf6e2 | 53 | .target = XT_TARGET_INIT(XT_STANDARD_TARGET, \ |
3c2ad469 PM |
54 | sizeof(struct xt_standard_target)), \ |
55 | .target.verdict = -(__verdict) - 1, \ | |
56 | } | |
57 | ||
58 | #define IPT_ERROR_INIT \ | |
59 | { \ | |
60 | .entry = IPT_ENTRY_INIT(sizeof(struct ipt_error)), \ | |
243bf6e2 | 61 | .target = XT_TARGET_INIT(XT_ERROR_TARGET, \ |
75f0a0fd | 62 | sizeof(struct xt_error_target)), \ |
3c2ad469 PM |
63 | .target.errorname = "ERROR", \ |
64 | } | |
65 | ||
e3eaa991 | 66 | extern void *ipt_alloc_initial_table(const struct xt_table *); |
3db05fea | 67 | extern unsigned int ipt_do_table(struct sk_buff *skb, |
1c491ba2 | 68 | const struct nf_hook_state *state, |
e60a13e0 | 69 | struct xt_table *table); |
1da177e4 | 70 | |
2722971c DM |
71 | #ifdef CONFIG_COMPAT |
72 | #include <net/compat.h> | |
73 | ||
d94d9fee | 74 | struct compat_ipt_entry { |
2722971c DM |
75 | struct ipt_ip ip; |
76 | compat_uint_t nfcache; | |
7ff30c43 BH |
77 | __u16 target_offset; |
78 | __u16 next_offset; | |
2722971c DM |
79 | compat_uint_t comefrom; |
80 | struct compat_xt_counters counters; | |
81 | unsigned char elems[0]; | |
82 | }; | |
83 | ||
73cd598d | 84 | /* Helper functions */ |
87a2e70d | 85 | static inline struct xt_entry_target * |
73cd598d PM |
86 | compat_ipt_get_target(struct compat_ipt_entry *e) |
87 | { | |
88 | return (void *)e + e->target_offset; | |
89 | } | |
90 | ||
2722971c | 91 | #endif /* CONFIG_COMPAT */ |
1da177e4 | 92 | #endif /* _IPTABLES_H */ |