]>
Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
9fb9cbb1 YK |
2 | /* |
3 | * connection tracking helpers. | |
4 | * | |
5 | * 16 Dec 2003: Yasuyuki Kozakai @USAGI <yasuyuki.kozakai@toshiba.co.jp> | |
6 | * - generalize L3 protocol dependent part. | |
7 | * | |
8 | * Derived from include/linux/netfiter_ipv4/ip_conntrack_helper.h | |
9 | */ | |
10 | ||
11 | #ifndef _NF_CONNTRACK_HELPER_H | |
12 | #define _NF_CONNTRACK_HELPER_H | |
9338d7b4 | 13 | #include <linux/refcount.h> |
9fb9cbb1 | 14 | #include <net/netfilter/nf_conntrack.h> |
ceceae1b | 15 | #include <net/netfilter/nf_conntrack_extend.h> |
1afc5679 | 16 | #include <net/netfilter/nf_conntrack_expect.h> |
9fb9cbb1 | 17 | |
08010a21 FL |
18 | #define NF_NAT_HELPER_PREFIX "ip_nat_" |
19 | #define NF_NAT_HELPER_NAME(name) NF_NAT_HELPER_PREFIX name | |
e1f172e1 FL |
20 | #define MODULE_ALIAS_NF_NAT_HELPER(name) \ |
21 | MODULE_ALIAS(NF_NAT_HELPER_NAME(name)) | |
22 | ||
9fb9cbb1 YK |
23 | struct module; |
24 | ||
12f7a505 PNA |
25 | enum nf_ct_helper_flags { |
26 | NF_CT_HELPER_F_USERSPACE = (1 << 0), | |
27 | NF_CT_HELPER_F_CONFIGURED = (1 << 1), | |
28 | }; | |
29 | ||
af9d32ad HE |
30 | #define NF_CT_HELPER_NAME_LEN 16 |
31 | ||
fd2c3ef7 | 32 | struct nf_conntrack_helper { |
b8a7fe6c | 33 | struct hlist_node hnode; /* Internal use. */ |
9fb9cbb1 | 34 | |
3a8fc53a | 35 | char name[NF_CT_HELPER_NAME_LEN]; /* name of the module */ |
9338d7b4 | 36 | refcount_t refcnt; |
9fb9cbb1 | 37 | struct module *me; /* pointer to self */ |
6002f266 | 38 | const struct nf_conntrack_expect_policy *expect_policy; |
9fb9cbb1 | 39 | |
d4156e8c | 40 | /* Tuple of things we will help (compared against server response) */ |
9fb9cbb1 | 41 | struct nf_conntrack_tuple tuple; |
d4156e8c | 42 | |
9fb9cbb1 YK |
43 | /* Function to call when data passes; return verdict, or -1 to |
44 | invalidate. */ | |
3db05fea | 45 | int (*help)(struct sk_buff *skb, |
9fb9cbb1 YK |
46 | unsigned int protoff, |
47 | struct nf_conn *ct, | |
48 | enum ip_conntrack_info conntrackinfo); | |
c1d10adb | 49 | |
f09943fe PM |
50 | void (*destroy)(struct nf_conn *ct); |
51 | ||
ae243bee | 52 | int (*from_nlattr)(struct nlattr *attr, struct nf_conn *ct); |
fdf70832 | 53 | int (*to_nlattr)(struct sk_buff *skb, const struct nf_conn *ct); |
6002f266 | 54 | unsigned int expect_class_max; |
12f7a505 PNA |
55 | |
56 | unsigned int flags; | |
9f0f3ebe FW |
57 | |
58 | /* For user-space helpers: */ | |
59 | unsigned int queue_num; | |
60 | /* length of userspace private data stored in nf_conn_help->data */ | |
61 | u16 data_len; | |
08010a21 FL |
62 | /* name of NAT helper module */ |
63 | char nat_mod_name[NF_CT_HELPER_NAME_LEN]; | |
9fb9cbb1 YK |
64 | }; |
65 | ||
906535b0 FW |
66 | /* Must be kept in sync with the classes defined by helpers */ |
67 | #define NF_CT_MAX_EXPECT_CLASSES 4 | |
68 | ||
69 | /* nf_conn feature for connections that have a helper */ | |
70 | struct nf_conn_help { | |
71 | /* Helper. if any */ | |
72 | struct nf_conntrack_helper __rcu *helper; | |
73 | ||
74 | struct hlist_head expectations; | |
75 | ||
76 | /* Current number of expected connections */ | |
77 | u8 expecting[NF_CT_MAX_EXPECT_CLASSES]; | |
78 | ||
79 | /* private helper information. */ | |
dcf67740 | 80 | char data[32] __aligned(8); |
906535b0 FW |
81 | }; |
82 | ||
dcf67740 | 83 | #define NF_CT_HELPER_BUILD_BUG_ON(structsize) \ |
c593642c | 84 | BUILD_BUG_ON((structsize) > sizeof_field(struct nf_conn_help, data)) |
dcf67740 | 85 | |
4e77be46 JP |
86 | struct nf_conntrack_helper *__nf_conntrack_helper_find(const char *name, |
87 | u16 l3num, u8 protonum); | |
7e5d03bb | 88 | |
4e77be46 JP |
89 | struct nf_conntrack_helper *nf_conntrack_helper_try_module_get(const char *name, |
90 | u16 l3num, | |
91 | u8 protonum); | |
d91fc59c LZ |
92 | void nf_conntrack_helper_put(struct nf_conntrack_helper *helper); |
93 | ||
82de0be6 GF |
94 | void nf_ct_helper_init(struct nf_conntrack_helper *helper, |
95 | u16 l3num, u16 protonum, const char *name, | |
96 | u16 default_port, u16 spec_port, u32 id, | |
97 | const struct nf_conntrack_expect_policy *exp_pol, | |
9f0f3ebe | 98 | u32 expect_class_max, |
82de0be6 GF |
99 | int (*help)(struct sk_buff *skb, unsigned int protoff, |
100 | struct nf_conn *ct, | |
101 | enum ip_conntrack_info ctinfo), | |
102 | int (*from_nlattr)(struct nlattr *attr, | |
103 | struct nf_conn *ct), | |
104 | struct module *module); | |
84f3bb9a | 105 | |
4e77be46 JP |
106 | int nf_conntrack_helper_register(struct nf_conntrack_helper *); |
107 | void nf_conntrack_helper_unregister(struct nf_conntrack_helper *); | |
9fb9cbb1 | 108 | |
82de0be6 GF |
109 | int nf_conntrack_helpers_register(struct nf_conntrack_helper *, unsigned int); |
110 | void nf_conntrack_helpers_unregister(struct nf_conntrack_helper *, | |
111 | unsigned int); | |
112 | ||
440534d3 | 113 | struct nf_conn_help *nf_ct_helper_ext_add(struct nf_conn *ct, gfp_t gfp); |
b560580a | 114 | |
4e77be46 JP |
115 | int __nf_ct_try_assign_helper(struct nf_conn *ct, struct nf_conn *tmpl, |
116 | gfp_t flags); | |
226c0c0e | 117 | |
4e77be46 | 118 | void nf_ct_helper_destroy(struct nf_conn *ct); |
9858a3ae | 119 | |
ceceae1b YK |
120 | static inline struct nf_conn_help *nfct_help(const struct nf_conn *ct) |
121 | { | |
122 | return nf_ct_ext_find(ct, NF_CT_EXT_HELPER); | |
123 | } | |
b334aadc | 124 | |
1afc5679 PNA |
125 | static inline void *nfct_help_data(const struct nf_conn *ct) |
126 | { | |
127 | struct nf_conn_help *help; | |
128 | ||
129 | help = nf_ct_ext_find(ct, NF_CT_EXT_HELPER); | |
130 | ||
131 | return (void *)help->data; | |
132 | } | |
133 | ||
fc3893fd | 134 | void nf_conntrack_helper_pernet_init(struct net *net); |
5e615b22 | 135 | |
4e77be46 JP |
136 | int nf_conntrack_helper_init(void); |
137 | void nf_conntrack_helper_fini(void); | |
b334aadc | 138 | |
433029ec | 139 | int nf_conntrack_broadcast_help(struct sk_buff *skb, struct nf_conn *ct, |
4e77be46 JP |
140 | enum ip_conntrack_info ctinfo, |
141 | unsigned int timeout); | |
93557f53 | 142 | |
544d5c7d PNA |
143 | struct nf_ct_helper_expectfn { |
144 | struct list_head head; | |
145 | const char *name; | |
146 | void (*expectfn)(struct nf_conn *ct, struct nf_conntrack_expect *exp); | |
147 | }; | |
148 | ||
b20ab9cc PNA |
149 | __printf(3,4) |
150 | void nf_ct_helper_log(struct sk_buff *skb, const struct nf_conn *ct, | |
151 | const char *fmt, ...); | |
152 | ||
544d5c7d PNA |
153 | void nf_ct_helper_expectfn_register(struct nf_ct_helper_expectfn *n); |
154 | void nf_ct_helper_expectfn_unregister(struct nf_ct_helper_expectfn *n); | |
155 | struct nf_ct_helper_expectfn * | |
156 | nf_ct_helper_expectfn_find_by_name(const char *name); | |
157 | struct nf_ct_helper_expectfn * | |
158 | nf_ct_helper_expectfn_find_by_symbol(const void *symbol); | |
159 | ||
12f7a505 PNA |
160 | extern struct hlist_head *nf_ct_helper_hash; |
161 | extern unsigned int nf_ct_helper_hsize; | |
162 | ||
08010a21 FL |
163 | struct nf_conntrack_nat_helper { |
164 | struct list_head list; | |
165 | char mod_name[NF_CT_HELPER_NAME_LEN]; /* module name */ | |
166 | struct module *module; /* pointer to self */ | |
167 | }; | |
168 | ||
169 | #define NF_CT_NAT_HELPER_INIT(name) \ | |
170 | { \ | |
171 | .mod_name = NF_NAT_HELPER_NAME(name), \ | |
172 | .module = THIS_MODULE \ | |
173 | } | |
174 | ||
175 | void nf_nat_helper_register(struct nf_conntrack_nat_helper *nat); | |
176 | void nf_nat_helper_unregister(struct nf_conntrack_nat_helper *nat); | |
177 | int nf_nat_helper_try_module_get(const char *name, u16 l3num, | |
178 | u8 protonum); | |
179 | void nf_nat_helper_put(struct nf_conntrack_helper *helper); | |
1c2d6729 | 180 | void nf_ct_set_auto_assign_helper_warned(struct net *net); |
9fb9cbb1 | 181 | #endif /*_NF_CONNTRACK_HELPER_H*/ |