1 /* (C) 1999-2001 Paul `Rusty' Russell
2 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
3 * (C) 2011 Patrick McHardy <kaber@trash.net>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
10 #include <linux/module.h>
11 #include <linux/netfilter.h>
12 #include <linux/netfilter_ipv4.h>
13 #include <linux/netfilter_ipv4/ip_tables.h>
17 #include <net/netfilter/nf_nat.h>
18 #include <net/netfilter/nf_nat_core.h>
19 #include <net/netfilter/nf_nat_l3proto.h>
21 static int __net_init
iptable_nat_table_init(struct net
*net
);
23 static const struct xt_table nf_nat_ipv4_table
= {
25 .valid_hooks
= (1 << NF_INET_PRE_ROUTING
) |
26 (1 << NF_INET_POST_ROUTING
) |
27 (1 << NF_INET_LOCAL_OUT
) |
28 (1 << NF_INET_LOCAL_IN
),
31 .table_init
= iptable_nat_table_init
,
34 static unsigned int iptable_nat_do_chain(void *priv
,
36 const struct nf_hook_state
*state
)
38 return ipt_do_table(skb
, state
, state
->net
->ipv4
.nat_table
);
41 static const struct nf_hook_ops nf_nat_ipv4_ops
[] = {
43 .hook
= iptable_nat_do_chain
,
45 .hooknum
= NF_INET_PRE_ROUTING
,
46 .priority
= NF_IP_PRI_NAT_DST
,
49 .hook
= iptable_nat_do_chain
,
51 .hooknum
= NF_INET_POST_ROUTING
,
52 .priority
= NF_IP_PRI_NAT_SRC
,
55 .hook
= iptable_nat_do_chain
,
57 .hooknum
= NF_INET_LOCAL_OUT
,
58 .priority
= NF_IP_PRI_NAT_DST
,
61 .hook
= iptable_nat_do_chain
,
63 .hooknum
= NF_INET_LOCAL_IN
,
64 .priority
= NF_IP_PRI_NAT_SRC
,
68 static int ipt_nat_register_lookups(struct net
*net
)
72 for (i
= 0; i
< ARRAY_SIZE(nf_nat_ipv4_ops
); i
++) {
73 ret
= nf_nat_l3proto_ipv4_register_fn(net
, &nf_nat_ipv4_ops
[i
]);
76 nf_nat_l3proto_ipv4_unregister_fn(net
, &nf_nat_ipv4_ops
[--i
]);
85 static void ipt_nat_unregister_lookups(struct net
*net
)
89 for (i
= 0; i
< ARRAY_SIZE(nf_nat_ipv4_ops
); i
++)
90 nf_nat_l3proto_ipv4_unregister_fn(net
, &nf_nat_ipv4_ops
[i
]);
93 static int __net_init
iptable_nat_table_init(struct net
*net
)
95 struct ipt_replace
*repl
;
98 if (net
->ipv4
.nat_table
)
101 repl
= ipt_alloc_initial_table(&nf_nat_ipv4_table
);
104 ret
= ipt_register_table(net
, &nf_nat_ipv4_table
, repl
,
105 NULL
, &net
->ipv4
.nat_table
);
111 ret
= ipt_nat_register_lookups(net
);
113 ipt_unregister_table(net
, net
->ipv4
.nat_table
, NULL
);
114 net
->ipv4
.nat_table
= NULL
;
121 static void __net_exit
iptable_nat_net_exit(struct net
*net
)
123 if (!net
->ipv4
.nat_table
)
125 ipt_nat_unregister_lookups(net
);
126 ipt_unregister_table(net
, net
->ipv4
.nat_table
, NULL
);
127 net
->ipv4
.nat_table
= NULL
;
130 static struct pernet_operations iptable_nat_net_ops
= {
131 .exit
= iptable_nat_net_exit
,
134 static int __init
iptable_nat_init(void)
136 int ret
= register_pernet_subsys(&iptable_nat_net_ops
);
141 ret
= iptable_nat_table_init(&init_net
);
143 unregister_pernet_subsys(&iptable_nat_net_ops
);
147 static void __exit
iptable_nat_exit(void)
149 unregister_pernet_subsys(&iptable_nat_net_ops
);
152 module_init(iptable_nat_init
);
153 module_exit(iptable_nat_exit
);
155 MODULE_LICENSE("GPL");