San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2008 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 17 | // #define LOG_NDEBUG 0 |
| 18 | |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 19 | #include <stdlib.h> |
| 20 | #include <errno.h> |
| 21 | #include <sys/socket.h> |
| 22 | #include <sys/stat.h> |
| 23 | #include <fcntl.h> |
| 24 | #include <netinet/in.h> |
| 25 | #include <arpa/inet.h> |
Olivier Bailly | ff2c0d8 | 2010-11-17 11:45:07 -0800 | [diff] [blame] | 26 | #include <string.h> |
John Michelau | ac20860 | 2011-05-27 22:07:20 -0500 | [diff] [blame] | 27 | #include <cutils/properties.h> |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 28 | |
| 29 | #define LOG_TAG "NatController" |
| 30 | #include <cutils/log.h> |
| 31 | |
| 32 | #include "NatController.h" |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 33 | #include "SecondaryTableController.h" |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 34 | #include "NetdConstants.h" |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 35 | |
JP Abgrall | 9e5e0ce | 2011-12-14 15:20:59 -0800 | [diff] [blame] | 36 | extern "C" int system_nosh(const char *command); |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 37 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 38 | NatController::NatController(SecondaryTableController *ctrl) { |
| 39 | secondaryTableCtrl = ctrl; |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 40 | |
| 41 | setupIptablesHooks(); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 42 | setDefaults(); |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 43 | } |
| 44 | |
| 45 | NatController::~NatController() { |
| 46 | } |
| 47 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 48 | int NatController::runCmd(const char *path, const char *cmd) { |
JP Abgrall | 11b4e9b | 2011-08-11 15:34:49 -0700 | [diff] [blame] | 49 | char *buffer; |
| 50 | size_t len = strnlen(cmd, 255); |
| 51 | int res; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 52 | |
JP Abgrall | 11b4e9b | 2011-08-11 15:34:49 -0700 | [diff] [blame] | 53 | if (len == 255) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 54 | ALOGE("command too long"); |
JP Abgrall | 11b4e9b | 2011-08-11 15:34:49 -0700 | [diff] [blame] | 55 | errno = E2BIG; |
| 56 | return -1; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 57 | } |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 58 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 59 | asprintf(&buffer, "%s %s", path, cmd); |
JP Abgrall | 9e5e0ce | 2011-12-14 15:20:59 -0800 | [diff] [blame] | 60 | res = system_nosh(buffer); |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 61 | ALOGV("runCmd() buffer='%s' res=%d", buffer, res); |
JP Abgrall | 11b4e9b | 2011-08-11 15:34:49 -0700 | [diff] [blame] | 62 | free(buffer); |
| 63 | return res; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 64 | } |
| 65 | |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 66 | int NatController::setupIptablesHooks() { |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 67 | if (runCmd(IPTABLES_PATH, "-P INPUT ACCEPT")) |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 68 | return -1; |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 69 | if (runCmd(IPTABLES_PATH, "-P OUTPUT ACCEPT")) |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 70 | return -1; |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 71 | if (runCmd(IPTABLES_PATH, "-P FORWARD ACCEPT")) |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 72 | return -1; |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 73 | |
| 74 | // Order is important! |
| 75 | // -D to delete any pre-existing jump rule, to prevent dupes (no-op if doesn't exist) |
| 76 | // -F to flush the chain (no-op if doesn't exist). |
| 77 | // -N to create the chain (no-op if already exist). |
| 78 | |
| 79 | runCmd(IPTABLES_PATH, "-D FORWARD -j natctrl_FORWARD"); |
| 80 | runCmd(IPTABLES_PATH, "-F natctrl_FORWARD"); |
| 81 | runCmd(IPTABLES_PATH, "-N natctrl_FORWARD"); |
| 82 | if (runCmd(IPTABLES_PATH, "-A FORWARD -j natctrl_FORWARD")) |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 83 | return -1; |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 84 | |
| 85 | runCmd(IPTABLES_PATH, "-t nat -D POSTROUTING -j natctrl_nat_POSTROUTING"); |
| 86 | runCmd(IPTABLES_PATH, "-t nat -F natctrl_nat_POSTROUTING"); |
| 87 | runCmd(IPTABLES_PATH, "-t nat -N natctrl_nat_POSTROUTING"); |
| 88 | if (runCmd(IPTABLES_PATH, "-t nat -A POSTROUTING -j natctrl_nat_POSTROUTING")) |
| 89 | return -1; |
| 90 | |
| 91 | return 0; |
| 92 | } |
| 93 | |
| 94 | int NatController::setDefaults() { |
| 95 | if (runCmd(IPTABLES_PATH, "-F natctrl_FORWARD")) |
| 96 | return -1; |
| 97 | if (runCmd(IPTABLES_PATH, "-t nat -F natctrl_nat_POSTROUTING")) |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 98 | return -1; |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 99 | |
| 100 | runCmd(IP_PATH, "rule flush"); |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 101 | runCmd(IP_PATH, "-6 rule flush"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 102 | runCmd(IP_PATH, "rule add from all lookup default prio 32767"); |
| 103 | runCmd(IP_PATH, "rule add from all lookup main prio 32766"); |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 104 | runCmd(IP_PATH, "-6 rule add from all lookup default prio 32767"); |
| 105 | runCmd(IP_PATH, "-6 rule add from all lookup main prio 32766"); |
| 106 | runCmd(IP_PATH, "route flush cache"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 107 | |
| 108 | natCount = 0; |
Kazuhiro Ondo | 4ab4685 | 2012-01-12 16:15:06 -0600 | [diff] [blame] | 109 | |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 110 | return 0; |
| 111 | } |
| 112 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 113 | bool NatController::checkInterface(const char *iface) { |
Jaime A Lopez-Sollano | d14fd4f | 2012-01-11 16:29:28 -0800 | [diff] [blame] | 114 | if (strlen(iface) > IFNAMSIZ) return false; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 115 | return true; |
| 116 | } |
| 117 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 118 | // 0 1 2 3 4 5 |
| 119 | // nat enable intface extface addrcnt nated-ipaddr/prelength |
| 120 | int NatController::enableNat(const int argc, char **argv) { |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 121 | char cmd[255]; |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 122 | int i; |
| 123 | int addrCount = atoi(argv[4]); |
| 124 | int ret = 0; |
| 125 | const char *intIface = argv[2]; |
| 126 | const char *extIface = argv[3]; |
| 127 | int tableNumber; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 128 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 129 | if (!checkInterface(intIface) || !checkInterface(extIface)) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 130 | ALOGE("Invalid interface specified"); |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 131 | errno = ENODEV; |
| 132 | return -1; |
| 133 | } |
| 134 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 135 | if (argc < 5 + addrCount) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 136 | ALOGE("Missing Argument"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 137 | errno = EINVAL; |
| 138 | return -1; |
| 139 | } |
| 140 | |
| 141 | tableNumber = secondaryTableCtrl->findTableNumber(extIface); |
| 142 | if (tableNumber != -1) { |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 143 | for(i = 0; i < addrCount; i++) { |
| 144 | ret |= secondaryTableCtrl->modifyFromRule(tableNumber, ADD, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 145 | |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 146 | ret |= secondaryTableCtrl->modifyLocalRoute(tableNumber, ADD, intIface, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 147 | } |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 148 | runCmd(IP_PATH, "route flush cache"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 149 | } |
| 150 | |
| 151 | if (ret != 0 || setForwardRules(true, intIface, extIface) != 0) { |
| 152 | if (tableNumber != -1) { |
| 153 | for (i = 0; i < addrCount; i++) { |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 154 | secondaryTableCtrl->modifyLocalRoute(tableNumber, DEL, intIface, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 155 | |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 156 | secondaryTableCtrl->modifyFromRule(tableNumber, DEL, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 157 | } |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 158 | runCmd(IP_PATH, "route flush cache"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 159 | } |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 160 | ALOGE("Error setting forward rules"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 161 | errno = ENODEV; |
| 162 | return -1; |
| 163 | } |
| 164 | |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 165 | /* Always make sure the drop rule is at the end */ |
| 166 | snprintf(cmd, sizeof(cmd), "-D natctrl_FORWARD -j DROP"); |
| 167 | runCmd(IPTABLES_PATH, cmd); |
| 168 | snprintf(cmd, sizeof(cmd), "-A natctrl_FORWARD -j DROP"); |
| 169 | runCmd(IPTABLES_PATH, cmd); |
| 170 | |
| 171 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 172 | natCount++; |
| 173 | // add this if we are the first added nat |
| 174 | if (natCount == 1) { |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 175 | snprintf(cmd, sizeof(cmd), "-t nat -A natctrl_nat_POSTROUTING -o %s -j MASQUERADE", extIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 176 | if (runCmd(IPTABLES_PATH, cmd)) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 177 | ALOGE("Error seting postroute rule: %s", cmd); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 178 | // unwind what's been done, but don't care about success - what more could we do? |
| 179 | for (i = 0; i < addrCount; i++) { |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 180 | secondaryTableCtrl->modifyLocalRoute(tableNumber, DEL, intIface, argv[5+i]); |
| 181 | |
| 182 | secondaryTableCtrl->modifyFromRule(tableNumber, DEL, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 183 | } |
| 184 | setDefaults(); |
| 185 | return -1; |
| 186 | } |
| 187 | } |
| 188 | |
| 189 | return 0; |
| 190 | } |
| 191 | |
| 192 | int NatController::setForwardRules(bool add, const char *intIface, const char * extIface) { |
| 193 | char cmd[255]; |
| 194 | |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 195 | snprintf(cmd, sizeof(cmd), |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 196 | "-%s natctrl_FORWARD -i %s -o %s -m state --state ESTABLISHED,RELATED -j RETURN", |
Robert Greenwalt | 1caafe6 | 2010-03-24 15:43:00 -0700 | [diff] [blame] | 197 | (add ? "A" : "D"), |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 198 | extIface, intIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 199 | if (runCmd(IPTABLES_PATH, cmd) && add) { |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 200 | return -1; |
| 201 | } |
| 202 | |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 203 | snprintf(cmd, sizeof(cmd), |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 204 | "-%s natctrl_FORWARD -i %s -o %s -m state --state INVALID -j DROP", |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 205 | (add ? "A" : "D"), |
| 206 | intIface, extIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 207 | if (runCmd(IPTABLES_PATH, cmd) && add) { |
Robert Greenwalt | f7bf29c | 2011-11-01 22:07:28 -0700 | [diff] [blame] | 208 | // bail on error, but only if adding |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 209 | snprintf(cmd, sizeof(cmd), |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 210 | "-%s natctrl_FORWARD -i %s -o %s -m state --state ESTABLISHED,RELATED -j RETURN", |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 211 | (!add ? "A" : "D"), |
| 212 | extIface, intIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 213 | runCmd(IPTABLES_PATH, cmd); |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 214 | return -1; |
| 215 | } |
| 216 | |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 217 | snprintf(cmd, sizeof(cmd), "-%s natctrl_FORWARD -i %s -o %s -j RETURN", (add ? "A" : "D"), |
Robert Greenwalt | 1caafe6 | 2010-03-24 15:43:00 -0700 | [diff] [blame] | 218 | intIface, extIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 219 | if (runCmd(IPTABLES_PATH, cmd) && add) { |
Robert Greenwalt | 210b977 | 2010-03-25 14:54:45 -0700 | [diff] [blame] | 220 | // unwind what's been done, but don't care about success - what more could we do? |
| 221 | snprintf(cmd, sizeof(cmd), |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 222 | "-%s natctrl_FORWARD -i %s -o %s -m state --state INVALID -j DROP", |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 223 | (!add ? "A" : "D"), |
| 224 | intIface, extIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 225 | runCmd(IPTABLES_PATH, cmd); |
Robert Greenwalt | ddb9f6e | 2011-08-02 13:00:11 -0700 | [diff] [blame] | 226 | |
| 227 | snprintf(cmd, sizeof(cmd), |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 228 | "-%s natctrl_FORWARD -i %s -o %s -m state --state ESTABLISHED,RELATED -j RETURN", |
Robert Greenwalt | 210b977 | 2010-03-25 14:54:45 -0700 | [diff] [blame] | 229 | (!add ? "A" : "D"), |
| 230 | extIface, intIface); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 231 | runCmd(IPTABLES_PATH, cmd); |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 232 | return -1; |
| 233 | } |
JP Abgrall | 0031cea | 2012-04-17 16:38:23 -0700 | [diff] [blame^] | 234 | |
| 235 | snprintf(cmd, sizeof(cmd), "-%s natctrl_FORWARD -j DROP", (add ? "A" : "D"), |
| 236 | intIface, extIface); |
| 237 | runCmd(IPTABLES_PATH, cmd); |
| 238 | |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 239 | return 0; |
| 240 | } |
| 241 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 242 | // nat disable intface extface |
| 243 | // 0 1 2 3 4 5 |
| 244 | // nat enable intface extface addrcnt nated-ipaddr/prelength |
| 245 | int NatController::disableNat(const int argc, char **argv) { |
| 246 | char cmd[255]; |
| 247 | int i; |
| 248 | int addrCount = atoi(argv[4]); |
| 249 | const char *intIface = argv[2]; |
| 250 | const char *extIface = argv[3]; |
| 251 | int tableNumber; |
Robert Greenwalt | 1caafe6 | 2010-03-24 15:43:00 -0700 | [diff] [blame] | 252 | |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 253 | if (!checkInterface(intIface) || !checkInterface(extIface)) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 254 | ALOGE("Invalid interface specified"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 255 | errno = ENODEV; |
| 256 | return -1; |
| 257 | } |
| 258 | |
| 259 | if (argc < 5 + addrCount) { |
Steve Block | 5ea0c05 | 2012-01-06 19:18:11 +0000 | [diff] [blame] | 260 | ALOGE("Missing Argument"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 261 | errno = EINVAL; |
| 262 | return -1; |
| 263 | } |
| 264 | |
| 265 | setForwardRules(false, intIface, extIface); |
| 266 | |
| 267 | tableNumber = secondaryTableCtrl->findTableNumber(extIface); |
| 268 | if (tableNumber != -1) { |
| 269 | for (i = 0; i < addrCount; i++) { |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 270 | secondaryTableCtrl->modifyLocalRoute(tableNumber, DEL, intIface, argv[5+i]); |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 271 | |
Robert Greenwalt | c462177 | 2012-01-31 12:46:45 -0800 | [diff] [blame] | 272 | secondaryTableCtrl->modifyFromRule(tableNumber, DEL, argv[5+i]); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 273 | } |
Robert Greenwalt | 063af32 | 2011-11-18 15:32:13 -0800 | [diff] [blame] | 274 | |
| 275 | runCmd(IP_PATH, "route flush cache"); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 276 | } |
| 277 | |
| 278 | if (--natCount <= 0) { |
Kazuhiro Ondo | 4ab4685 | 2012-01-12 16:15:06 -0600 | [diff] [blame] | 279 | // handle decrement to 0 case (do reset to defaults) and erroneous dec below 0 |
| 280 | setDefaults(); |
Robert Greenwalt | fc97b82 | 2011-11-02 16:48:36 -0700 | [diff] [blame] | 281 | } |
| 282 | return 0; |
San Mehat | 9ff78fb | 2010-01-19 12:59:15 -0800 | [diff] [blame] | 283 | } |