blob: 910721a1267308283be7296db92f0e6952e4f724 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * ebt_mark
3 *
4 * Authors:
5 * Bart De Schuymer <bdschuym@pandora.be>
6 *
7 * July, 2002
8 *
9 */
10
11/* The mark target can be used in any chain,
12 * I believe adding a mangle table just for marking is total overkill.
13 * Marking a frame doesn't really change anything in the frame anyway.
14 */
15
Jan Engelhardt18219d32008-10-08 11:35:13 +020016#include <linux/module.h>
17#include <linux/netfilter/x_tables.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070018#include <linux/netfilter_bridge/ebtables.h>
19#include <linux/netfilter_bridge/ebt_mark_t.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070020
Jan Engelhardt0ac6ab12008-10-08 11:35:13 +020021static unsigned int ebt_target_mark(struct sk_buff *skb, unsigned int hooknr,
Linus Torvalds1da177e2005-04-16 15:20:36 -070022 const struct net_device *in, const struct net_device *out,
23 const void *data, unsigned int datalen)
24{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080025 const struct ebt_mark_t_info *info = data;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070026 int action = info->target & -16;
Linus Torvalds1da177e2005-04-16 15:20:36 -070027
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070028 if (action == MARK_SET_VALUE)
Herbert Xu3db05fe2007-10-15 00:53:15 -070029 skb->mark = info->mark;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070030 else if (action == MARK_OR_VALUE)
Herbert Xu3db05fe2007-10-15 00:53:15 -070031 skb->mark |= info->mark;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070032 else if (action == MARK_AND_VALUE)
Herbert Xu3db05fe2007-10-15 00:53:15 -070033 skb->mark &= info->mark;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070034 else
Herbert Xu3db05fe2007-10-15 00:53:15 -070035 skb->mark ^= info->mark;
Harald Welte6869c4d2005-08-09 19:24:19 -070036
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010037 return info->target | ~EBT_VERDICT_BITS;
Linus Torvalds1da177e2005-04-16 15:20:36 -070038}
39
Jan Engelhardt19eda872008-10-08 11:35:13 +020040static bool ebt_target_mark_check(const char *tablename, unsigned int hookmask,
Linus Torvalds1da177e2005-04-16 15:20:36 -070041 const struct ebt_entry *e, void *data, unsigned int datalen)
42{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080043 const struct ebt_mark_t_info *info = data;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070044 int tmp;
Linus Torvalds1da177e2005-04-16 15:20:36 -070045
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010046 tmp = info->target | ~EBT_VERDICT_BITS;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070047 if (BASE_CHAIN && tmp == EBT_RETURN)
Jan Engelhardt19eda872008-10-08 11:35:13 +020048 return false;
Linus Torvalds1da177e2005-04-16 15:20:36 -070049 CLEAR_BASE_CHAIN_BIT;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070050 if (tmp < -NUM_STANDARD_TARGETS || tmp >= 0)
Jan Engelhardt19eda872008-10-08 11:35:13 +020051 return false;
Bart De Schuymerd12cdc32006-11-29 02:35:40 +010052 tmp = info->target & ~EBT_VERDICT_BITS;
Bart De Schuymerb18dfa92006-10-02 16:12:52 -070053 if (tmp != MARK_SET_VALUE && tmp != MARK_OR_VALUE &&
54 tmp != MARK_AND_VALUE && tmp != MARK_XOR_VALUE)
Jan Engelhardt19eda872008-10-08 11:35:13 +020055 return false;
56 return true;
Linus Torvalds1da177e2005-04-16 15:20:36 -070057}
58
Jan Engelhardt30083c92008-01-31 04:00:59 -080059static struct ebt_target mark_target __read_mostly = {
Linus Torvalds1da177e2005-04-16 15:20:36 -070060 .name = EBT_MARK_TARGET,
Jan Engelhardt001a18d2008-10-08 11:35:14 +020061 .revision = 0,
62 .family = NFPROTO_BRIDGE,
Linus Torvalds1da177e2005-04-16 15:20:36 -070063 .target = ebt_target_mark,
64 .check = ebt_target_mark_check,
Jan Engelhardt18219d32008-10-08 11:35:13 +020065 .targetsize = XT_ALIGN(sizeof(struct ebt_mark_t_info)),
Linus Torvalds1da177e2005-04-16 15:20:36 -070066 .me = THIS_MODULE,
67};
68
Andrew Morton65b4b4e2006-03-28 16:37:06 -080069static int __init ebt_mark_init(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070070{
71 return ebt_register_target(&mark_target);
72}
73
Andrew Morton65b4b4e2006-03-28 16:37:06 -080074static void __exit ebt_mark_fini(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070075{
76 ebt_unregister_target(&mark_target);
77}
78
Andrew Morton65b4b4e2006-03-28 16:37:06 -080079module_init(ebt_mark_init);
80module_exit(ebt_mark_fini);
Jan Engelhardtf776c4c2008-01-31 04:00:30 -080081MODULE_DESCRIPTION("Ebtables: Packet mark modification");
Linus Torvalds1da177e2005-04-16 15:20:36 -070082MODULE_LICENSE("GPL");