]>
git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blob - net/netfilter/xt_nfacct.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * (C) 2011 Pablo Neira Ayuso <pablo@netfilter.org>
4 * (C) 2011 Intra2net AG <https://www.intra2net.com>
6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8 #include <linux/module.h>
9 #include <linux/skbuff.h>
11 #include <linux/netfilter/x_tables.h>
12 #include <linux/netfilter/nfnetlink_acct.h>
13 #include <linux/netfilter/xt_nfacct.h>
15 MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");
16 MODULE_DESCRIPTION("Xtables: match for the extended accounting infrastructure");
17 MODULE_LICENSE("GPL");
18 MODULE_ALIAS("ipt_nfacct");
19 MODULE_ALIAS("ip6t_nfacct");
21 static bool nfacct_mt(const struct sk_buff
*skb
, struct xt_action_param
*par
)
24 const struct xt_nfacct_match_info
*info
= par
->targinfo
;
26 nfnl_acct_update(skb
, info
->nfacct
);
28 overquota
= nfnl_acct_overquota(xt_net(par
), info
->nfacct
);
30 return overquota
== NFACCT_UNDERQUOTA
? false : true;
34 nfacct_mt_checkentry(const struct xt_mtchk_param
*par
)
36 struct xt_nfacct_match_info
*info
= par
->matchinfo
;
37 struct nf_acct
*nfacct
;
39 nfacct
= nfnl_acct_find_get(par
->net
, info
->name
);
41 pr_info_ratelimited("accounting object `%s' does not exists\n",
45 info
->nfacct
= nfacct
;
50 nfacct_mt_destroy(const struct xt_mtdtor_param
*par
)
52 const struct xt_nfacct_match_info
*info
= par
->matchinfo
;
54 nfnl_acct_put(info
->nfacct
);
57 static struct xt_match nfacct_mt_reg
[] __read_mostly
= {
61 .family
= NFPROTO_UNSPEC
,
62 .checkentry
= nfacct_mt_checkentry
,
64 .destroy
= nfacct_mt_destroy
,
65 .matchsize
= sizeof(struct xt_nfacct_match_info
),
66 .usersize
= offsetof(struct xt_nfacct_match_info
, nfacct
),
72 .family
= NFPROTO_UNSPEC
,
73 .checkentry
= nfacct_mt_checkentry
,
75 .destroy
= nfacct_mt_destroy
,
76 .matchsize
= sizeof(struct xt_nfacct_match_info_v1
),
77 .usersize
= offsetof(struct xt_nfacct_match_info_v1
, nfacct
),
82 static int __init
nfacct_mt_init(void)
84 return xt_register_matches(nfacct_mt_reg
, ARRAY_SIZE(nfacct_mt_reg
));
87 static void __exit
nfacct_mt_exit(void)
89 xt_unregister_matches(nfacct_mt_reg
, ARRAY_SIZE(nfacct_mt_reg
));
92 module_init(nfacct_mt_init
);
93 module_exit(nfacct_mt_exit
);