blob: 0f8a8c587532f78ac5f191d93a1088b03ba1fd78 [file] [log] [blame]
Martin Josefsson77ab9cf2006-11-29 02:34:58 +01001/*
2 * connection tracking expectations.
3 */
4
5#ifndef _NF_CONNTRACK_EXPECT_H
6#define _NF_CONNTRACK_EXPECT_H
7#include <net/netfilter/nf_conntrack.h>
8
Patrick McHardya71c0852007-07-07 22:33:47 -07009extern unsigned int nf_ct_expect_hsize;
Patrick McHardyf264a7d2007-07-07 22:36:24 -070010extern unsigned int nf_ct_expect_max;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010011
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000012struct nf_conntrack_expect {
Patrick McHardyb5605802007-07-07 22:35:56 -070013 /* Conntrack expectation list member */
14 struct hlist_node lnode;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010015
Patrick McHardya71c0852007-07-07 22:33:47 -070016 /* Hash member */
17 struct hlist_node hnode;
18
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010019 /* We expect this tuple, with the following mask */
Patrick McHardyd4156e82007-07-07 22:31:32 -070020 struct nf_conntrack_tuple tuple;
21 struct nf_conntrack_tuple_mask mask;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010022
23 /* Function to call after setup and insertion */
24 void (*expectfn)(struct nf_conn *new,
25 struct nf_conntrack_expect *this);
26
Patrick McHardy9457d852006-12-02 22:05:25 -080027 /* Helper to assign to new connection */
28 struct nf_conntrack_helper *helper;
29
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010030 /* The conntrack of the master connection */
31 struct nf_conn *master;
32
33 /* Timer function; deletes the expectation. */
34 struct timer_list timeout;
35
36 /* Usage count. */
37 atomic_t use;
38
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010039 /* Flags */
40 unsigned int flags;
41
Patrick McHardy6002f2662008-03-25 20:09:15 -070042 /* Expectation class */
43 unsigned int class;
44
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010045#ifdef CONFIG_NF_NAT_NEEDED
Patrick McHardyf587de02006-12-02 22:08:46 -080046 __be32 saved_ip;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010047 /* This is the original per-proto part, used to map the
48 * expected connection the way the recipient expects. */
Jozsef Kadlecsik5b1158e2006-12-02 22:07:13 -080049 union nf_conntrack_man_proto saved_proto;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010050 /* Direction relative to the master connection. */
51 enum ip_conntrack_dir dir;
52#endif
Patrick McHardy7d0742d2008-01-31 04:38:19 -080053
54 struct rcu_head rcu;
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010055};
56
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020057static inline struct net *nf_ct_exp_net(struct nf_conntrack_expect *exp)
58{
Alexey Dobriyan857b4092010-02-12 06:24:46 +010059 return nf_ct_net(exp->master);
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020060}
61
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000062struct nf_conntrack_expect_policy {
Patrick McHardy6002f2662008-03-25 20:09:15 -070063 unsigned int max_expected;
64 unsigned int timeout;
Patrick McHardyb87921b2010-02-11 12:22:48 +010065 const char *name;
Patrick McHardy6002f2662008-03-25 20:09:15 -070066};
67
68#define NF_CT_EXPECT_CLASS_DEFAULT 0
69
Alexey Dobriyan9b03f382008-10-08 11:35:03 +020070int nf_conntrack_expect_init(struct net *net);
71void nf_conntrack_expect_fini(struct net *net);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010072
73struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010074__nf_ct_expect_find(struct net *net, u16 zone,
75 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010076
77struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010078nf_ct_expect_find_get(struct net *net, u16 zone,
79 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010080
81struct nf_conntrack_expect *
Patrick McHardy5d0aa2c2010-02-15 18:13:33 +010082nf_ct_find_expectation(struct net *net, u16 zone,
83 const struct nf_conntrack_tuple *tuple);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010084
Pablo Neira Ayusoebbf41d2010-10-19 10:19:06 +020085void nf_ct_unlink_expect_report(struct nf_conntrack_expect *exp,
86 u32 pid, int report);
87static inline void nf_ct_unlink_expect(struct nf_conntrack_expect *exp)
88{
89 nf_ct_unlink_expect_report(exp, 0, 0);
90}
91
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010092void nf_ct_remove_expectations(struct nf_conn *ct);
Patrick McHardy68236452007-07-07 22:30:49 -070093void nf_ct_unexpect_related(struct nf_conntrack_expect *exp);
Pablo Neira Ayusobc01befd2010-09-28 21:06:34 +020094void nf_ct_remove_userspace_expectations(void);
Martin Josefsson77ab9cf2006-11-29 02:34:58 +010095
96/* Allocate space for an expectation: this is mandatory before calling
Patrick McHardy68236452007-07-07 22:30:49 -070097 nf_ct_expect_related. You will have to call put afterwards. */
98struct nf_conntrack_expect *nf_ct_expect_alloc(struct nf_conn *me);
Jan Engelhardt76108ce2008-10-08 11:35:00 +020099void nf_ct_expect_init(struct nf_conntrack_expect *, unsigned int, u_int8_t,
Patrick McHardy1d9d7522008-03-25 20:07:58 -0700100 const union nf_inet_addr *,
101 const union nf_inet_addr *,
102 u_int8_t, const __be16 *, const __be16 *);
Patrick McHardy68236452007-07-07 22:30:49 -0700103void nf_ct_expect_put(struct nf_conntrack_expect *exp);
Pablo Neira Ayuso19abb7b2008-11-18 11:56:20 +0100104int nf_ct_expect_related_report(struct nf_conntrack_expect *expect,
105 u32 pid, int report);
Pablo Neira Ayuso83731672009-04-06 17:47:20 +0200106static inline int nf_ct_expect_related(struct nf_conntrack_expect *expect)
107{
108 return nf_ct_expect_related_report(expect, 0, 0);
109}
Martin Josefsson77ab9cf2006-11-29 02:34:58 +0100110
111#endif /*_NF_CONNTRACK_EXPECT_H*/
112