blob: a50ffbe0e4fb823279e60f4e2991089d4304e580 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * ebt_redirect
3 *
4 * Authors:
5 * Bart De Schuymer <bdschuym@pandora.be>
6 *
7 * April, 2002
8 *
9 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070010#include <linux/module.h>
11#include <net/sock.h>
12#include "../br_private.h"
Jan Engelhardt18219d32008-10-08 11:35:13 +020013#include <linux/netfilter.h>
14#include <linux/netfilter/x_tables.h>
15#include <linux/netfilter_bridge/ebtables.h>
16#include <linux/netfilter_bridge/ebt_redirect.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070017
Jan Engelhardt2d06d4a2008-10-08 11:35:15 +020018static unsigned int
19ebt_redirect_tg(struct sk_buff *skb, const struct net_device *in,
20 const struct net_device *out, unsigned int hooknr,
21 const struct xt_target *target, const void *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -070022{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080023 const struct ebt_redirect_info *info = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -070024
Joonwoo Parkeb1197b2008-02-19 17:18:47 -080025 if (!skb_make_writable(skb, 0))
Joonwoo Park1b04ab42008-02-23 20:22:27 -080026 return EBT_DROP;
Linus Torvalds1da177e2005-04-16 15:20:36 -070027
Linus Torvalds1da177e2005-04-16 15:20:36 -070028 if (hooknr != NF_BR_BROUTING)
Herbert Xu3db05fe2007-10-15 00:53:15 -070029 memcpy(eth_hdr(skb)->h_dest,
Linus Torvalds1da177e2005-04-16 15:20:36 -070030 in->br_port->br->dev->dev_addr, ETH_ALEN);
31 else
Herbert Xu3db05fe2007-10-15 00:53:15 -070032 memcpy(eth_hdr(skb)->h_dest, in->dev_addr, ETH_ALEN);
33 skb->pkt_type = PACKET_HOST;
Linus Torvalds1da177e2005-04-16 15:20:36 -070034 return info->target;
35}
36
Jan Engelhardt2d06d4a2008-10-08 11:35:15 +020037static bool
38ebt_redirect_tg_check(const char *tablename, const void *e,
39 const struct xt_target *target, void *data,
40 unsigned int hookmask)
Linus Torvalds1da177e2005-04-16 15:20:36 -070041{
Jan Engelhardtabfdf1c2008-01-31 03:59:24 -080042 const struct ebt_redirect_info *info = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -070043
Linus Torvalds1da177e2005-04-16 15:20:36 -070044 if (BASE_CHAIN && info->target == EBT_RETURN)
Jan Engelhardt19eda872008-10-08 11:35:13 +020045 return false;
Linus Torvalds1da177e2005-04-16 15:20:36 -070046 CLEAR_BASE_CHAIN_BIT;
47 if ( (strcmp(tablename, "nat") || hookmask & ~(1 << NF_BR_PRE_ROUTING)) &&
48 (strcmp(tablename, "broute") || hookmask & ~(1 << NF_BR_BROUTING)) )
Jan Engelhardt19eda872008-10-08 11:35:13 +020049 return false;
Linus Torvalds1da177e2005-04-16 15:20:36 -070050 if (INVALID_TARGET)
Jan Engelhardt19eda872008-10-08 11:35:13 +020051 return false;
52 return true;
Linus Torvalds1da177e2005-04-16 15:20:36 -070053}
54
Jan Engelhardt043ef462008-10-08 11:35:15 +020055static struct xt_target ebt_redirect_tg_reg __read_mostly = {
56 .name = "redirect",
Jan Engelhardt001a18d2008-10-08 11:35:14 +020057 .revision = 0,
58 .family = NFPROTO_BRIDGE,
Jan Engelhardtf2ff5252008-10-08 11:35:15 +020059 .hooks = (1 << NF_BR_NUMHOOKS) | (1 << NF_BR_PRE_ROUTING) |
60 (1 << NF_BR_BROUTING),
Jan Engelhardt2d06d4a2008-10-08 11:35:15 +020061 .target = ebt_redirect_tg,
62 .checkentry = ebt_redirect_tg_check,
Jan Engelhardt18219d32008-10-08 11:35:13 +020063 .targetsize = XT_ALIGN(sizeof(struct ebt_redirect_info)),
Linus Torvalds1da177e2005-04-16 15:20:36 -070064 .me = THIS_MODULE,
65};
66
Andrew Morton65b4b4e2006-03-28 16:37:06 -080067static int __init ebt_redirect_init(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070068{
Jan Engelhardt043ef462008-10-08 11:35:15 +020069 return xt_register_target(&ebt_redirect_tg_reg);
Linus Torvalds1da177e2005-04-16 15:20:36 -070070}
71
Andrew Morton65b4b4e2006-03-28 16:37:06 -080072static void __exit ebt_redirect_fini(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070073{
Jan Engelhardt043ef462008-10-08 11:35:15 +020074 xt_unregister_target(&ebt_redirect_tg_reg);
Linus Torvalds1da177e2005-04-16 15:20:36 -070075}
76
Andrew Morton65b4b4e2006-03-28 16:37:06 -080077module_init(ebt_redirect_init);
78module_exit(ebt_redirect_fini);
Jan Engelhardtf776c4c2008-01-31 04:00:30 -080079MODULE_DESCRIPTION("Ebtables: Packet redirection to localhost");
Linus Torvalds1da177e2005-04-16 15:20:36 -070080MODULE_LICENSE("GPL");