Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 1 | #include <stdio.h> |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 2 | #include <string.h> |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 3 | #include <syslog.h> |
Jan Engelhardt | 5d9678a | 2008-11-20 10:15:35 +0100 | [diff] [blame] | 4 | #include <xtables.h> |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 5 | #include <linux/netfilter_ipv4/ipt_LOG.h> |
| 6 | |
| 7 | #define LOG_DEFAULT_LEVEL LOG_WARNING |
| 8 | |
Martin Josefsson | 2b9a577 | 2005-01-05 15:21:15 +0000 | [diff] [blame] | 9 | #ifndef IPT_LOG_UID /* Old kernel */ |
| 10 | #define IPT_LOG_UID 0x08 /* Log UID owning local socket */ |
| 11 | #undef IPT_LOG_MASK |
| 12 | #define IPT_LOG_MASK 0x0f |
| 13 | #endif |
| 14 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 15 | enum { |
| 16 | O_LOG_LEVEL = 0, |
| 17 | O_LOG_PREFIX, |
| 18 | O_LOG_TCPSEQ, |
| 19 | O_LOG_TCPOPTS, |
| 20 | O_LOG_IPOPTS, |
| 21 | O_LOG_UID, |
| 22 | O_LOG_MAC, |
| 23 | }; |
| 24 | |
Jan Engelhardt | 1d5b63d | 2007-10-04 16:29:00 +0000 | [diff] [blame] | 25 | static void LOG_help(void) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 26 | { |
| 27 | printf( |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 28 | "LOG target options:\n" |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 29 | " --log-level level Level of logging (numeric or see syslog.conf)\n" |
| 30 | " --log-prefix prefix Prefix log messages with this prefix.\n\n" |
| 31 | " --log-tcp-sequence Log TCP sequence numbers.\n\n" |
| 32 | " --log-tcp-options Log TCP options.\n\n" |
John Lange | f46e1af | 2005-01-02 23:33:12 +0000 | [diff] [blame] | 33 | " --log-ip-options Log IP options.\n\n" |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 34 | " --log-uid Log UID owning the local socket.\n\n" |
| 35 | " --log-macdecode Decode MAC addresses and protocol.\n\n"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 36 | } |
| 37 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 38 | #define s struct ipt_log_info |
| 39 | static const struct xt_option_entry LOG_opts[] = { |
| 40 | {.name = "log-level", .id = O_LOG_LEVEL, .type = XTTYPE_SYSLOGLEVEL, |
| 41 | .flags = XTOPT_PUT, XTOPT_POINTER(s, level)}, |
| 42 | {.name = "log-prefix", .id = O_LOG_PREFIX, .type = XTTYPE_STRING, |
| 43 | .flags = XTOPT_PUT, XTOPT_POINTER(s, prefix), .min = 1}, |
| 44 | {.name = "log-tcp-sequence", .id = O_LOG_TCPSEQ, .type = XTTYPE_NONE}, |
| 45 | {.name = "log-tcp-options", .id = O_LOG_TCPOPTS, .type = XTTYPE_NONE}, |
| 46 | {.name = "log-ip-options", .id = O_LOG_IPOPTS, .type = XTTYPE_NONE}, |
| 47 | {.name = "log-uid", .id = O_LOG_UID, .type = XTTYPE_NONE}, |
| 48 | {.name = "log-macdecode", .id = O_LOG_MAC, .type = XTTYPE_NONE}, |
| 49 | XTOPT_TABLEEND, |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 50 | }; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 51 | #undef s |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 52 | |
Jan Engelhardt | 1d5b63d | 2007-10-04 16:29:00 +0000 | [diff] [blame] | 53 | static void LOG_init(struct xt_entry_target *t) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 54 | { |
| 55 | struct ipt_log_info *loginfo = (struct ipt_log_info *)t->data; |
| 56 | |
| 57 | loginfo->level = LOG_DEFAULT_LEVEL; |
| 58 | |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 59 | } |
| 60 | |
| 61 | struct ipt_log_names { |
| 62 | const char *name; |
| 63 | unsigned int level; |
| 64 | }; |
| 65 | |
Jan Engelhardt | 0e2abed | 2007-10-04 16:25:58 +0000 | [diff] [blame] | 66 | static const struct ipt_log_names ipt_log_names[] |
Stephane Ouellette | 2be28ab | 2003-08-11 19:58:56 +0000 | [diff] [blame] | 67 | = { { .name = "alert", .level = LOG_ALERT }, |
| 68 | { .name = "crit", .level = LOG_CRIT }, |
| 69 | { .name = "debug", .level = LOG_DEBUG }, |
| 70 | { .name = "emerg", .level = LOG_EMERG }, |
| 71 | { .name = "error", .level = LOG_ERR }, /* DEPRECATED */ |
| 72 | { .name = "info", .level = LOG_INFO }, |
| 73 | { .name = "notice", .level = LOG_NOTICE }, |
| 74 | { .name = "panic", .level = LOG_EMERG }, /* DEPRECATED */ |
| 75 | { .name = "warning", .level = LOG_WARNING } |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 76 | }; |
| 77 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 78 | static void LOG_parse(struct xt_option_call *cb) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 79 | { |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 80 | struct ipt_log_info *info = cb->data; |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 81 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 82 | xtables_option_parse(cb); |
| 83 | switch (cb->entry->id) { |
| 84 | case O_LOG_PREFIX: |
| 85 | if (strchr(cb->arg, '\n') != NULL) |
Jan Engelhardt | 1829ed4 | 2009-02-21 03:29:44 +0100 | [diff] [blame] | 86 | xtables_error(PARAMETER_PROBLEM, |
Phil Oester | 182f3f6 | 2005-04-01 07:07:00 +0000 | [diff] [blame] | 87 | "Newlines not allowed in --log-prefix"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 88 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 89 | case O_LOG_TCPSEQ: |
| 90 | info->logflags = IPT_LOG_TCPSEQ; |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 91 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 92 | case O_LOG_TCPOPTS: |
| 93 | info->logflags = IPT_LOG_TCPOPT; |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 94 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 95 | case O_LOG_IPOPTS: |
| 96 | info->logflags = IPT_LOG_IPOPT; |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 97 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 98 | case O_LOG_UID: |
| 99 | info->logflags = IPT_LOG_UID; |
John Lange | f46e1af | 2005-01-02 23:33:12 +0000 | [diff] [blame] | 100 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 101 | case O_LOG_MAC: |
| 102 | info->logflags = IPT_LOG_MACDECODE; |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 103 | break; |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 104 | } |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 105 | } |
| 106 | |
Jan Engelhardt | 1d5b63d | 2007-10-04 16:29:00 +0000 | [diff] [blame] | 107 | static void LOG_print(const void *ip, const struct xt_entry_target *target, |
| 108 | int numeric) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 109 | { |
| 110 | const struct ipt_log_info *loginfo |
| 111 | = (const struct ipt_log_info *)target->data; |
| 112 | unsigned int i = 0; |
| 113 | |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 114 | printf(" LOG"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 115 | if (numeric) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 116 | printf(" flags %u level %u", |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 117 | loginfo->logflags, loginfo->level); |
| 118 | else { |
Jan Engelhardt | 2c69b55 | 2009-04-30 19:32:02 +0200 | [diff] [blame] | 119 | for (i = 0; i < ARRAY_SIZE(ipt_log_names); ++i) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 120 | if (loginfo->level == ipt_log_names[i].level) { |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 121 | printf(" level %s", ipt_log_names[i].name); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 122 | break; |
| 123 | } |
Jan Engelhardt | 2c69b55 | 2009-04-30 19:32:02 +0200 | [diff] [blame] | 124 | if (i == ARRAY_SIZE(ipt_log_names)) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 125 | printf(" UNKNOWN level %u", loginfo->level); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 126 | if (loginfo->logflags & IPT_LOG_TCPSEQ) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 127 | printf(" tcp-sequence"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 128 | if (loginfo->logflags & IPT_LOG_TCPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 129 | printf(" tcp-options"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 130 | if (loginfo->logflags & IPT_LOG_IPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 131 | printf(" ip-options"); |
John Lange | f46e1af | 2005-01-02 23:33:12 +0000 | [diff] [blame] | 132 | if (loginfo->logflags & IPT_LOG_UID) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 133 | printf(" uid"); |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 134 | if (loginfo->logflags & IPT_LOG_MACDECODE) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 135 | printf(" macdecode"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 136 | if (loginfo->logflags & ~(IPT_LOG_MASK)) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 137 | printf(" unknown-flags"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 138 | } |
| 139 | |
| 140 | if (strcmp(loginfo->prefix, "") != 0) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 141 | printf(" prefix \"%s\"", loginfo->prefix); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 142 | } |
| 143 | |
Jan Engelhardt | 1d5b63d | 2007-10-04 16:29:00 +0000 | [diff] [blame] | 144 | static void LOG_save(const void *ip, const struct xt_entry_target *target) |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 145 | { |
| 146 | const struct ipt_log_info *loginfo |
| 147 | = (const struct ipt_log_info *)target->data; |
| 148 | |
Max Kellermann | a5d0994 | 2008-01-29 13:44:34 +0000 | [diff] [blame] | 149 | if (strcmp(loginfo->prefix, "") != 0) { |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 150 | printf(" --log-prefix"); |
Jan Engelhardt | a0baae8 | 2009-01-30 04:32:50 +0100 | [diff] [blame] | 151 | xtables_save_string(loginfo->prefix); |
Max Kellermann | a5d0994 | 2008-01-29 13:44:34 +0000 | [diff] [blame] | 152 | } |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 153 | |
Thomas Woerner | 01cbaa6 | 2003-07-14 20:01:29 +0000 | [diff] [blame] | 154 | if (loginfo->level != LOG_DEFAULT_LEVEL) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 155 | printf(" --log-level %d", loginfo->level); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 156 | |
| 157 | if (loginfo->logflags & IPT_LOG_TCPSEQ) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 158 | printf(" --log-tcp-sequence"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 159 | if (loginfo->logflags & IPT_LOG_TCPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 160 | printf(" --log-tcp-options"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 161 | if (loginfo->logflags & IPT_LOG_IPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 162 | printf(" --log-ip-options"); |
John Lange | f46e1af | 2005-01-02 23:33:12 +0000 | [diff] [blame] | 163 | if (loginfo->logflags & IPT_LOG_UID) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 164 | printf(" --log-uid"); |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 165 | if (loginfo->logflags & IPT_LOG_MACDECODE) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 166 | printf(" --log-macdecode"); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 167 | } |
| 168 | |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 169 | static struct xtables_target log_tg_reg = { |
Jan Engelhardt | e1df221 | 2011-02-15 12:02:51 +0100 | [diff] [blame] | 170 | .name = "LOG", |
| 171 | .version = XTABLES_VERSION, |
| 172 | .family = NFPROTO_IPV4, |
| 173 | .size = XT_ALIGN(sizeof(struct ipt_log_info)), |
| 174 | .userspacesize = XT_ALIGN(sizeof(struct ipt_log_info)), |
| 175 | .help = LOG_help, |
| 176 | .init = LOG_init, |
Jan Engelhardt | e1df221 | 2011-02-15 12:02:51 +0100 | [diff] [blame] | 177 | .print = LOG_print, |
| 178 | .save = LOG_save, |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 179 | .x6_parse = LOG_parse, |
| 180 | .x6_options = LOG_opts, |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 181 | }; |
| 182 | |
| 183 | void _init(void) |
| 184 | { |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 185 | xtables_register_target(&log_tg_reg); |
Marc Boucher | e6869a8 | 2000-03-20 06:03:29 +0000 | [diff] [blame] | 186 | } |