blob: 9c7b520765a2de7c629ee7abe2f9c78fe8f1c69f [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * ebt_snat
3 *
4 * Authors:
5 * Bart De Schuymer <bdschuym@pandora.be>
6 *
7 * June, 2002
8 *
9 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070010#include <linux/module.h>
11#include <net/sock.h>
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010012#include <linux/if_arp.h>
13#include <net/arp.h>
Jan Engelhardt18219d32008-10-08 11:35:13 +020014#include <linux/netfilter.h>
15#include <linux/netfilter/x_tables.h>
16#include <linux/netfilter_bridge/ebtables.h>
17#include <linux/netfilter_bridge/ebt_nat.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070018
Jan Engelhardt2d06d4a2008-10-08 11:35:15 +020019static unsigned int
Jan Engelhardt7eb35582008-10-08 11:35:19 +020020ebt_snat_tg(struct sk_buff *skb, const struct xt_target_param *par)
Linus Torvalds1da177e2005-04-16 15:20:36 -070021{
Jan Engelhardt7eb35582008-10-08 11:35:19 +020022 const struct ebt_nat_info *info = par->targinfo;
Linus Torvalds1da177e2005-04-16 15:20:36 -070023
Joonwoo Parkeb1197b2008-02-19 17:18:47 -080024 if (!skb_make_writable(skb, 0))
Joonwoo Park1b04ab42008-02-23 20:22:27 -080025 return EBT_DROP;
Linus Torvalds1da177e2005-04-16 15:20:36 -070026
Herbert Xu3db05fe2007-10-15 00:53:15 -070027 memcpy(eth_hdr(skb)->h_source, info->mac, ETH_ALEN);
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010028 if (!(info->target & NAT_ARP_BIT) &&
Herbert Xu3db05fe2007-10-15 00:53:15 -070029 eth_hdr(skb)->h_proto == htons(ETH_P_ARP)) {
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080030 const struct arphdr *ap;
31 struct arphdr _ah;
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010032
Herbert Xu3db05fe2007-10-15 00:53:15 -070033 ap = skb_header_pointer(skb, 0, sizeof(_ah), &_ah);
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010034 if (ap == NULL)
35 return EBT_DROP;
36 if (ap->ar_hln != ETH_ALEN)
37 goto out;
Herbert Xu3db05fe2007-10-15 00:53:15 -070038 if (skb_store_bits(skb, sizeof(_ah), info->mac,ETH_ALEN))
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010039 return EBT_DROP;
40 }
41out:
42 return info->target | ~EBT_VERDICT_BITS;
Linus Torvalds1da177e2005-04-16 15:20:36 -070043}
44
Jan Engelhardtaf5d6dc2008-10-08 11:35:19 +020045static bool ebt_snat_tg_check(const struct xt_tgchk_param *par)
Linus Torvalds1da177e2005-04-16 15:20:36 -070046{
Jan Engelhardtaf5d6dc2008-10-08 11:35:19 +020047 const struct ebt_nat_info *info = par->targinfo;
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010048 int tmp;
Linus Torvalds1da177e2005-04-16 15:20:36 -070049
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010050 tmp = info->target | ~EBT_VERDICT_BITS;
51 if (BASE_CHAIN && tmp == EBT_RETURN)
Jan Engelhardt19eda872008-10-08 11:35:13 +020052 return false;
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010053
54 if (tmp < -NUM_STANDARD_TARGETS || tmp >= 0)
Jan Engelhardt19eda872008-10-08 11:35:13 +020055 return false;
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010056 tmp = info->target | EBT_VERDICT_BITS;
57 if ((tmp & ~NAT_ARP_BIT) != ~NAT_ARP_BIT)
Jan Engelhardt19eda872008-10-08 11:35:13 +020058 return false;
59 return true;
Linus Torvalds1da177e2005-04-16 15:20:36 -070060}
61
Jan Engelhardt043ef462008-10-08 11:35:15 +020062static struct xt_target ebt_snat_tg_reg __read_mostly = {
63 .name = "snat",
Jan Engelhardt001a18d2008-10-08 11:35:14 +020064 .revision = 0,
65 .family = NFPROTO_BRIDGE,
Jan Engelhardtf2ff5252008-10-08 11:35:15 +020066 .table = "nat",
67 .hooks = (1 << NF_BR_NUMHOOKS) | (1 << NF_BR_POST_ROUTING),
Jan Engelhardt2d06d4a2008-10-08 11:35:15 +020068 .target = ebt_snat_tg,
69 .checkentry = ebt_snat_tg_check,
Florian Westphalfc0e3df2010-02-15 18:16:26 +010070 .targetsize = sizeof(struct ebt_nat_info),
Linus Torvalds1da177e2005-04-16 15:20:36 -070071 .me = THIS_MODULE,
72};
73
Andrew Morton65b4b4e2006-03-28 16:37:06 -080074static int __init ebt_snat_init(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070075{
Jan Engelhardt043ef462008-10-08 11:35:15 +020076 return xt_register_target(&ebt_snat_tg_reg);
Linus Torvalds1da177e2005-04-16 15:20:36 -070077}
78
Andrew Morton65b4b4e2006-03-28 16:37:06 -080079static void __exit ebt_snat_fini(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070080{
Jan Engelhardt043ef462008-10-08 11:35:15 +020081 xt_unregister_target(&ebt_snat_tg_reg);
Linus Torvalds1da177e2005-04-16 15:20:36 -070082}
83
Andrew Morton65b4b4e2006-03-28 16:37:06 -080084module_init(ebt_snat_init);
85module_exit(ebt_snat_fini);
Jan Engelhardtf776c4c2008-01-31 04:00:30 -080086MODULE_DESCRIPTION("Ebtables: Source MAC address translation");
Linus Torvalds1da177e2005-04-16 15:20:36 -070087MODULE_LICENSE("GPL");