blob: 11e815084fcf05cb1a680b3c61968a1eb66a1ac5 [file] [log] [blame]
Martin Josefsson77ab9cf2006-11-29 02:34:58 +01001/*
2 * connection tracking expectations.
3 */
4
5#ifndef _NF_CONNTRACK_EXPECT_H
6#define _NF_CONNTRACK_EXPECT_H
7#include <net/netfilter/nf_conntrack.h>
8
Patrick McHardya71c0852007-07-07 22:33:47 -07009extern unsigned int nf_ct_expect_hsize;
Patrick McHardyf264a7d2007-07-07 22:36:24 -070010extern unsigned int nf_ct_expect_max;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010011
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000012struct nf_conntrack_expect {
Patrick McHardyb5605802007-07-07 22:35:56 -070013 /* Conntrack expectation list member */
14 struct hlist_node lnode;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010015
Patrick McHardya71c0852007-07-07 22:33:47 -070016 /* Hash member */
17 struct hlist_node hnode;
18
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010019 /* We expect this tuple, with the following mask */
Patrick McHardyd4156e82007-07-07 22:31:32 -070020 struct nf_conntrack_tuple tuple;
21 struct nf_conntrack_tuple_mask mask;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010022
23 /* Function to call after setup and insertion */
24 void (*expectfn)(struct nf_conn *new,
25 struct nf_conntrack_expect *this);
26
Patrick McHardy9457d852006-12-02 22:05:25 -080027 /* Helper to assign to new connection */
28 struct nf_conntrack_helper *helper;
29
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010030 /* The conntrack of the master connection */
31 struct nf_conn *master;
32
33 /* Timer function; deletes the expectation. */
34 struct timer_list timeout;
35
36 /* Usage count. */
37 atomic_t use;
38
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010039 /* Flags */
40 unsigned int flags;
41
Patrick McHardy6002f2662008-03-25 20:09:15 -070042 /* Expectation class */
43 unsigned int class;
44
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010045#ifdef CONFIG_NF_NAT_NEEDED
Patrick McHardyf587de02006-12-02 22:08:46 -080046 __be32 saved_ip;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010047 /* This is the original per-proto part, used to map the
48 * expected connection the way the recipient expects. */
Jozsef Kadlecsik5b1158e2006-12-02 22:07:13 -080049 union nf_conntrack_man_proto saved_proto;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010050 /* Direction relative to the master connection. */
51 enum ip_conntrack_dir dir;
52#endif
Patrick McHardy7d0742d2008-01-31 04:38:19 -080053
54 struct rcu_head rcu;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010055};
56
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020057static inline struct net *nf_ct_exp_net(struct nf_conntrack_expect *exp)
58{
Alexey Dobriyan857b4092010-02-12 06:24:46 +010059 return nf_ct_net(exp->master);
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020060}
61
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000062struct nf_conntrack_expect_policy {
Patrick McHardy6002f2662008-03-25 20:09:15 -070063 unsigned int max_expected;
64 unsigned int timeout;
Patrick McHardyb87921b2010-02-11 12:22:48 +010065 const char *name;
Patrick McHardy6002f2662008-03-25 20:09:15 -070066};
67
68#define NF_CT_EXPECT_CLASS_DEFAULT 0
69
Patrick McHardy359b9ab2008-03-25 20:08:37 -070070#define NF_CT_EXPECT_PERMANENT 0x1
71#define NF_CT_EXPECT_INACTIVE 0x2
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010072
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020073int nf_conntrack_expect_init(struct net *net);
74void nf_conntrack_expect_fini(struct net *net);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010075
76struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010077__nf_ct_expect_find(struct net *net, u16 zone,
78 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010079
80struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010081nf_ct_expect_find_get(struct net *net, u16 zone,
82 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010083
84struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010085nf_ct_find_expectation(struct net *net, u16 zone,
86 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010087
88void nf_ct_unlink_expect(struct nf_conntrack_expect *exp);
89void nf_ct_remove_expectations(struct nf_conn *ct);
Patrick McHardy68236452007-07-07 22:30:49 -070090void nf_ct_unexpect_related(struct nf_conntrack_expect *exp);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010091
92/* Allocate space for an expectation: this is mandatory before calling
Patrick McHardy68236452007-07-07 22:30:49 -070093 nf_ct_expect_related. You will have to call put afterwards. */
94struct nf_conntrack_expect *nf_ct_expect_alloc(struct nf_conn *me);
Jan Engelhardt76108ce2008-10-08 11:35:00 +020095void nf_ct_expect_init(struct nf_conntrack_expect *, unsigned int, u_int8_t,
Patrick McHardy1d9d7522008-03-25 20:07:58 -070096 const union nf_inet_addr *,
97 const union nf_inet_addr *,
98 u_int8_t, const __be16 *, const __be16 *);
Patrick McHardy68236452007-07-07 22:30:49 -070099void nf_ct_expect_put(struct nf_conntrack_expect *exp);
Pablo Neira Ayuso19abb7b2008-11-18 11:56:20 +0100100int nf_ct_expect_related_report(struct nf_conntrack_expect *expect,
101 u32 pid, int report);
Pablo Neira Ayuso83731672009-04-06 17:47:20 +0200102static inline int nf_ct_expect_related(struct nf_conntrack_expect *expect)
103{
104 return nf_ct_expect_related_report(expect, 0, 0);
105}
Martin Josefsson77ab9cf2006-11-29 02:34:58 +0100106
107#endif /*_NF_CONNTRACK_EXPECT_H*/
108