Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 1 | #include <stdio.h> |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 2 | #include <string.h> |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 3 | #include <syslog.h> |
Jan Engelhardt | 5d9678a | 2008-11-20 10:15:35 +0100 | [diff] [blame] | 4 | #include <xtables.h> |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 5 | #include <linux/netfilter_ipv6/ip6t_LOG.h> |
| 6 | |
Harald Welte | 893b688 | 2005-07-10 15:06:21 +0000 | [diff] [blame] | 7 | #ifndef IP6T_LOG_UID /* Old kernel */ |
| 8 | #define IP6T_LOG_UID 0x08 |
| 9 | #undef IP6T_LOG_MASK |
| 10 | #define IP6T_LOG_MASK 0x0f |
| 11 | #endif |
| 12 | |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 13 | #define LOG_DEFAULT_LEVEL LOG_WARNING |
| 14 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 15 | enum { |
| 16 | O_LOG_LEVEL = 0, |
| 17 | O_LOG_PREFIX, |
| 18 | O_LOG_TCPSEQ, |
| 19 | O_LOG_TCPOPTS, |
| 20 | O_LOG_IPOPTS, |
| 21 | O_LOG_UID, |
| 22 | O_LOG_MAC, |
| 23 | }; |
| 24 | |
Jan Engelhardt | 4d150eb | 2007-10-04 16:29:39 +0000 | [diff] [blame] | 25 | static void LOG_help(void) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 26 | { |
| 27 | printf( |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 28 | "LOG target options:\n" |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 29 | " --log-level level Level of logging (numeric or see syslog.conf)\n" |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 30 | " --log-prefix prefix Prefix log messages with this prefix.\n" |
| 31 | " --log-tcp-sequence Log TCP sequence numbers.\n" |
| 32 | " --log-tcp-options Log TCP options.\n" |
| 33 | " --log-ip-options Log IP options.\n" |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 34 | " --log-uid Log UID owning the local socket.\n" |
| 35 | " --log-macdecode Decode MAC addresses and protocol.\n"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 36 | } |
| 37 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 38 | #define s struct ip6t_log_info |
| 39 | static const struct xt_option_entry LOG_opts[] = { |
| 40 | {.name = "log-level", .id = O_LOG_LEVEL, .type = XTTYPE_SYSLOGLEVEL, |
| 41 | .flags = XTOPT_PUT, XTOPT_POINTER(s, level)}, |
| 42 | {.name = "log-prefix", .id = O_LOG_PREFIX, .type = XTTYPE_STRING, |
| 43 | .flags = XTOPT_PUT, XTOPT_POINTER(s, prefix), .min = 1}, |
| 44 | {.name = "log-tcp-sequence", .id = O_LOG_TCPSEQ, .type = XTTYPE_NONE}, |
| 45 | {.name = "log-tcp-options", .id = O_LOG_TCPOPTS, .type = XTTYPE_NONE}, |
| 46 | {.name = "log-ip-options", .id = O_LOG_IPOPTS, .type = XTTYPE_NONE}, |
| 47 | {.name = "log-uid", .id = O_LOG_UID, .type = XTTYPE_NONE}, |
| 48 | {.name = "log-macdecode", .id = O_LOG_MAC, .type = XTTYPE_NONE}, |
| 49 | XTOPT_TABLEEND, |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 50 | }; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 51 | #undef s |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 52 | |
Jan Engelhardt | 4d150eb | 2007-10-04 16:29:39 +0000 | [diff] [blame] | 53 | static void LOG_init(struct xt_entry_target *t) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 54 | { |
| 55 | struct ip6t_log_info *loginfo = (struct ip6t_log_info *)t->data; |
| 56 | |
| 57 | loginfo->level = LOG_DEFAULT_LEVEL; |
| 58 | |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 59 | } |
| 60 | |
| 61 | struct ip6t_log_names { |
| 62 | const char *name; |
| 63 | unsigned int level; |
| 64 | }; |
| 65 | |
Jan Engelhardt | 0e2abed | 2007-10-04 16:25:58 +0000 | [diff] [blame] | 66 | static const struct ip6t_log_names ip6t_log_names[] |
Stephane Ouellette | 2be28ab | 2003-08-11 19:58:56 +0000 | [diff] [blame] | 67 | = { { .name = "alert", .level = LOG_ALERT }, |
| 68 | { .name = "crit", .level = LOG_CRIT }, |
| 69 | { .name = "debug", .level = LOG_DEBUG }, |
| 70 | { .name = "emerg", .level = LOG_EMERG }, |
| 71 | { .name = "error", .level = LOG_ERR }, /* DEPRECATED */ |
| 72 | { .name = "info", .level = LOG_INFO }, |
| 73 | { .name = "notice", .level = LOG_NOTICE }, |
| 74 | { .name = "panic", .level = LOG_EMERG }, /* DEPRECATED */ |
| 75 | { .name = "warning", .level = LOG_WARNING } |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 76 | }; |
| 77 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 78 | static void LOG_parse(struct xt_option_call *cb) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 79 | { |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 80 | struct ip6t_log_info *info = cb->data; |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 81 | |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 82 | xtables_option_parse(cb); |
| 83 | switch (cb->entry->id) { |
| 84 | case O_LOG_PREFIX: |
| 85 | if (strchr(cb->arg, '\n') != NULL) |
Jan Engelhardt | 1829ed4 | 2009-02-21 03:29:44 +0100 | [diff] [blame] | 86 | xtables_error(PARAMETER_PROBLEM, |
Phil Oester | 182f3f6 | 2005-04-01 07:07:00 +0000 | [diff] [blame] | 87 | "Newlines not allowed in --log-prefix"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 88 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 89 | case O_LOG_TCPSEQ: |
Jan Engelhardt | 4e98e81 | 2011-06-21 17:00:45 +0200 | [diff] [blame] | 90 | info->logflags |= IP6T_LOG_TCPSEQ; |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 91 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 92 | case O_LOG_TCPOPTS: |
Jan Engelhardt | 4e98e81 | 2011-06-21 17:00:45 +0200 | [diff] [blame] | 93 | info->logflags |= IP6T_LOG_TCPOPT; |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 94 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 95 | case O_LOG_IPOPTS: |
Jan Engelhardt | 4e98e81 | 2011-06-21 17:00:45 +0200 | [diff] [blame] | 96 | info->logflags |= IP6T_LOG_IPOPT; |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 97 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 98 | case O_LOG_UID: |
Jan Engelhardt | 4e98e81 | 2011-06-21 17:00:45 +0200 | [diff] [blame] | 99 | info->logflags |= IP6T_LOG_UID; |
Patrick McHardy | 0c4c91c | 2005-06-24 02:15:31 +0000 | [diff] [blame] | 100 | break; |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 101 | case O_LOG_MAC: |
Jan Engelhardt | 4e98e81 | 2011-06-21 17:00:45 +0200 | [diff] [blame] | 102 | info->logflags |= IP6T_LOG_MACDECODE; |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 103 | break; |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 104 | } |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 105 | } |
| 106 | |
Jan Engelhardt | 4d150eb | 2007-10-04 16:29:39 +0000 | [diff] [blame] | 107 | static void LOG_print(const void *ip, const struct xt_entry_target *target, |
| 108 | int numeric) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 109 | { |
| 110 | const struct ip6t_log_info *loginfo |
| 111 | = (const struct ip6t_log_info *)target->data; |
| 112 | unsigned int i = 0; |
| 113 | |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 114 | printf(" LOG"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 115 | if (numeric) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 116 | printf(" flags %u level %u", |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 117 | loginfo->logflags, loginfo->level); |
| 118 | else { |
Jan Engelhardt | 2c69b55 | 2009-04-30 19:32:02 +0200 | [diff] [blame] | 119 | for (i = 0; i < ARRAY_SIZE(ip6t_log_names); ++i) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 120 | if (loginfo->level == ip6t_log_names[i].level) { |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 121 | printf(" level %s", ip6t_log_names[i].name); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 122 | break; |
| 123 | } |
Jan Engelhardt | 2c69b55 | 2009-04-30 19:32:02 +0200 | [diff] [blame] | 124 | if (i == ARRAY_SIZE(ip6t_log_names)) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 125 | printf(" UNKNOWN level %u", loginfo->level); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 126 | if (loginfo->logflags & IP6T_LOG_TCPSEQ) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 127 | printf(" tcp-sequence"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 128 | if (loginfo->logflags & IP6T_LOG_TCPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 129 | printf(" tcp-options"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 130 | if (loginfo->logflags & IP6T_LOG_IPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 131 | printf(" ip-options"); |
Patrick McHardy | 0c4c91c | 2005-06-24 02:15:31 +0000 | [diff] [blame] | 132 | if (loginfo->logflags & IP6T_LOG_UID) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 133 | printf(" uid"); |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 134 | if (loginfo->logflags & IP6T_LOG_MACDECODE) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 135 | printf(" macdecode"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 136 | if (loginfo->logflags & ~(IP6T_LOG_MASK)) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 137 | printf(" unknown-flags"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 138 | } |
| 139 | |
| 140 | if (strcmp(loginfo->prefix, "") != 0) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 141 | printf(" prefix \"%s\"", loginfo->prefix); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 142 | } |
| 143 | |
Jan Engelhardt | 4d150eb | 2007-10-04 16:29:39 +0000 | [diff] [blame] | 144 | static void LOG_save(const void *ip, const struct xt_entry_target *target) |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 145 | { |
| 146 | const struct ip6t_log_info *loginfo |
| 147 | = (const struct ip6t_log_info *)target->data; |
| 148 | |
| 149 | if (strcmp(loginfo->prefix, "") != 0) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 150 | printf(" --log-prefix \"%s\"", loginfo->prefix); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 151 | |
Thomas Woerner | 01cbaa6 | 2003-07-14 20:01:29 +0000 | [diff] [blame] | 152 | if (loginfo->level != LOG_DEFAULT_LEVEL) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 153 | printf(" --log-level %d", loginfo->level); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 154 | |
| 155 | if (loginfo->logflags & IP6T_LOG_TCPSEQ) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 156 | printf(" --log-tcp-sequence"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 157 | if (loginfo->logflags & IP6T_LOG_TCPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 158 | printf(" --log-tcp-options"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 159 | if (loginfo->logflags & IP6T_LOG_IPOPT) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 160 | printf(" --log-ip-options"); |
Patrick McHardy | 0c4c91c | 2005-06-24 02:15:31 +0000 | [diff] [blame] | 161 | if (loginfo->logflags & IP6T_LOG_UID) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 162 | printf(" --log-uid"); |
Patrick McHardy | 1276478 | 2010-06-28 14:51:35 +0200 | [diff] [blame] | 163 | if (loginfo->logflags & IP6T_LOG_MACDECODE) |
Jan Engelhardt | 7386635 | 2010-12-18 02:04:59 +0100 | [diff] [blame] | 164 | printf(" --log-macdecode"); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 165 | } |
| 166 | |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 167 | static struct xtables_target log_tg6_reg = { |
Jan Engelhardt | e1df221 | 2011-02-15 12:02:51 +0100 | [diff] [blame] | 168 | .name = "LOG", |
| 169 | .version = XTABLES_VERSION, |
| 170 | .family = NFPROTO_IPV6, |
| 171 | .size = XT_ALIGN(sizeof(struct ip6t_log_info)), |
| 172 | .userspacesize = XT_ALIGN(sizeof(struct ip6t_log_info)), |
| 173 | .help = LOG_help, |
| 174 | .init = LOG_init, |
Jan Engelhardt | e1df221 | 2011-02-15 12:02:51 +0100 | [diff] [blame] | 175 | .print = LOG_print, |
| 176 | .save = LOG_save, |
Jan Engelhardt | 0dd344a | 2011-02-15 12:05:12 +0100 | [diff] [blame] | 177 | .x6_parse = LOG_parse, |
| 178 | .x6_options = LOG_opts, |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 179 | }; |
| 180 | |
| 181 | void _init(void) |
| 182 | { |
Jan Engelhardt | 8b7c64d | 2008-04-15 11:48:25 +0200 | [diff] [blame] | 183 | xtables_register_target(&log_tg6_reg); |
Jan Rekorajski | 3ff7df4 | 2001-02-15 08:05:09 +0000 | [diff] [blame] | 184 | } |