blob: 1ec671d93ddaf455069ab8a5c90ab1fdcf7a2db6 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * ebt_dnat
3 *
4 * Authors:
5 * Bart De Schuymer <bdschuym@pandora.be>
6 *
7 * June, 2002
8 *
9 */
10
Herbert Xu2ca7b0a2007-10-14 00:39:55 -070011#include <linux/netfilter.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070012#include <linux/netfilter_bridge/ebtables.h>
13#include <linux/netfilter_bridge/ebt_nat.h>
14#include <linux/module.h>
15#include <net/sock.h>
16
Herbert Xu3db05fe2007-10-15 00:53:15 -070017static int ebt_target_dnat(struct sk_buff *skb, unsigned int hooknr,
Linus Torvalds1da177e2005-04-16 15:20:36 -070018 const struct net_device *in, const struct net_device *out,
19 const void *data, unsigned int datalen)
20{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080021 const struct ebt_nat_info *info = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -070022
Joonwoo Parkeb1197b2008-02-19 17:18:47 -080023 if (!skb_make_writable(skb, 0))
Herbert Xu2ca7b0a2007-10-14 00:39:55 -070024 return NF_DROP;
Linus Torvalds1da177e2005-04-16 15:20:36 -070025
Herbert Xu3db05fe2007-10-15 00:53:15 -070026 memcpy(eth_hdr(skb)->h_dest, info->mac, ETH_ALEN);
Linus Torvalds1da177e2005-04-16 15:20:36 -070027 return info->target;
28}
29
30static int ebt_target_dnat_check(const char *tablename, unsigned int hookmask,
31 const struct ebt_entry *e, void *data, unsigned int datalen)
32{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080033 const struct ebt_nat_info *info = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -070034
35 if (BASE_CHAIN && info->target == EBT_RETURN)
36 return -EINVAL;
37 CLEAR_BASE_CHAIN_BIT;
38 if ( (strcmp(tablename, "nat") ||
39 (hookmask & ~((1 << NF_BR_PRE_ROUTING) | (1 << NF_BR_LOCAL_OUT)))) &&
40 (strcmp(tablename, "broute") || hookmask & ~(1 << NF_BR_BROUTING)) )
41 return -EINVAL;
42 if (datalen != EBT_ALIGN(sizeof(struct ebt_nat_info)))
43 return -EINVAL;
44 if (INVALID_TARGET)
45 return -EINVAL;
46 return 0;
47}
48
Jan Engelhardt30083c92008-01-31 04:00:59 -080049static struct ebt_target dnat __read_mostly = {
Linus Torvalds1da177e2005-04-16 15:20:36 -070050 .name = EBT_DNAT_TARGET,
51 .target = ebt_target_dnat,
52 .check = ebt_target_dnat_check,
53 .me = THIS_MODULE,
54};
55
Andrew Morton65b4b4e2006-03-28 16:37:06 -080056static int __init ebt_dnat_init(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070057{
58 return ebt_register_target(&dnat);
59}
60
Andrew Morton65b4b4e2006-03-28 16:37:06 -080061static void __exit ebt_dnat_fini(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070062{
63 ebt_unregister_target(&dnat);
64}
65
Andrew Morton65b4b4e2006-03-28 16:37:06 -080066module_init(ebt_dnat_init);
67module_exit(ebt_dnat_fini);
Jan Engelhardtf776c4c2008-01-31 04:00:30 -080068MODULE_DESCRIPTION("Ebtables: Destination MAC address translation");
Linus Torvalds1da177e2005-04-16 15:20:36 -070069MODULE_LICENSE("GPL");