Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 1 | /* Shared library add-on to iptables to add comment match support. |
| 2 | * |
| 3 | * ChangeLog |
| 4 | * 2003-05-13: Brad Fisher <brad@info-link.net> |
| 5 | * Initial comment match |
| 6 | * 2004-05-12: Brad Fisher <brad@info-link.net> |
| 7 | * Port to patch-o-matic-ng |
| 8 | */ |
| 9 | #include <stdio.h> |
| 10 | #include <string.h> |
| 11 | #include <stdlib.h> |
| 12 | #include <getopt.h> |
| 13 | |
| 14 | #include <xtables.h> |
| 15 | #include <linux/netfilter/xt_comment.h> |
| 16 | |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 17 | static void comment_help(void) |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 18 | { |
| 19 | printf( |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 20 | "comment match options:\n" |
| 21 | "--comment COMMENT Attach a comment to a rule\n"); |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 22 | } |
| 23 | |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 24 | static const struct option comment_opts[] = { |
Patrick McHardy | 500f483 | 2007-09-08 15:59:04 +0000 | [diff] [blame] | 25 | { "comment", 1, NULL, '1' }, |
Max Kellermann | 9ee386a | 2008-01-29 13:48:05 +0000 | [diff] [blame] | 26 | { .name = NULL } |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 27 | }; |
| 28 | |
| 29 | static void |
| 30 | parse_comment(const char *s, struct xt_comment_info *info) |
| 31 | { |
| 32 | int slen = strlen(s); |
| 33 | |
| 34 | if (slen >= XT_MAX_COMMENT_LEN) { |
Jan Engelhardt | 1829ed4 | 2009-02-21 03:29:44 +0100 | [diff] [blame] | 35 | xtables_error(PARAMETER_PROBLEM, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 36 | "COMMENT must be shorter than %i characters", XT_MAX_COMMENT_LEN); |
| 37 | } |
| 38 | strcpy((char *)info->comment, s); |
| 39 | } |
| 40 | |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 41 | static int |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 42 | comment_parse(int c, char **argv, int invert, unsigned int *flags, |
| 43 | const void *entry, struct xt_entry_match **match) |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 44 | { |
| 45 | struct xt_comment_info *commentinfo = (struct xt_comment_info *)(*match)->data; |
| 46 | |
| 47 | switch (c) { |
| 48 | case '1': |
Jan Engelhardt | 0f16c72 | 2009-01-30 04:55:38 +0100 | [diff] [blame] | 49 | xtables_check_inverse(argv[optind-1], &invert, &optind, 0); |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 50 | if (invert) { |
Jan Engelhardt | 1829ed4 | 2009-02-21 03:29:44 +0100 | [diff] [blame] | 51 | xtables_error(PARAMETER_PROBLEM, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 52 | "Sorry, you can't have an inverted comment"); |
| 53 | } |
| 54 | parse_comment(argv[optind-1], commentinfo); |
| 55 | *flags = 1; |
| 56 | break; |
| 57 | |
| 58 | default: |
| 59 | return 0; |
| 60 | } |
| 61 | return 1; |
| 62 | } |
| 63 | |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 64 | static void comment_check(unsigned int flags) |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 65 | { |
| 66 | if (!flags) |
Jan Engelhardt | 1829ed4 | 2009-02-21 03:29:44 +0100 | [diff] [blame] | 67 | xtables_error(PARAMETER_PROBLEM, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 68 | "COMMENT match: You must specify `--comment'"); |
| 69 | } |
| 70 | |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 71 | static void |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 72 | comment_print(const void *ip, const struct xt_entry_match *match, int numeric) |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 73 | { |
Jan Engelhardt | 69f564e | 2009-05-26 13:14:06 +0200 | [diff] [blame] | 74 | struct xt_comment_info *commentinfo = (void *)match->data; |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 75 | |
| 76 | commentinfo->comment[XT_MAX_COMMENT_LEN-1] = '\0'; |
| 77 | printf("/* %s */ ", commentinfo->comment); |
| 78 | } |
| 79 | |
| 80 | /* Saves the union ipt_matchinfo in parsable form to stdout. */ |
| 81 | static void |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 82 | comment_save(const void *ip, const struct xt_entry_match *match) |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 83 | { |
Jan Engelhardt | 69f564e | 2009-05-26 13:14:06 +0200 | [diff] [blame] | 84 | struct xt_comment_info *commentinfo = (void *)match->data; |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 85 | |
| 86 | commentinfo->comment[XT_MAX_COMMENT_LEN-1] = '\0'; |
Jan Engelhardt | 4211579 | 2009-03-19 11:57:10 +0100 | [diff] [blame] | 87 | printf("--comment "); |
| 88 | xtables_save_string((const char *)commentinfo->comment); |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 89 | } |
| 90 | |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 91 | static struct xtables_match comment_match = { |
Jan Engelhardt | c5e8573 | 2009-06-12 20:55:44 +0200 | [diff] [blame^] | 92 | .family = NFPROTO_UNSPEC, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 93 | .name = "comment", |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 94 | .version = XTABLES_VERSION, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 95 | .size = XT_ALIGN(sizeof(struct xt_comment_info)), |
| 96 | .userspacesize = XT_ALIGN(sizeof(struct xt_comment_info)), |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 97 | .help = comment_help, |
| 98 | .parse = comment_parse, |
| 99 | .final_check = comment_check, |
| 100 | .print = comment_print, |
| 101 | .save = comment_save, |
| 102 | .extra_opts = comment_opts, |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 103 | }; |
| 104 | |
| 105 | void _init(void) |
| 106 | { |
Jan Engelhardt | 181dead | 2007-10-04 16:27:07 +0000 | [diff] [blame] | 107 | xtables_register_match(&comment_match); |
Yasuyuki KOZAKAI | 9ea637d | 2007-07-24 07:21:17 +0000 | [diff] [blame] | 108 | } |