1 /*
2  * Shared library add-on to iptables to add tos match support
3  *
4  * Copyright © CC Computer Consultants GmbH, 2007
5  * Contact: Jan Engelhardt <jengelh@computergmbh.de>
6  */
7 #include <getopt.h>
8 #include <netdb.h>
9 #include <stdbool.h>
10 #include <stdio.h>
11 #include <stdlib.h>
12 #include <string.h>
13 
14 #include <xtables.h>
15 #include <linux/netfilter/xt_dscp.h>
16 #include "tos_values.c"
17 
18 struct ipt_tos_info {
19 	uint8_t tos;
20 	uint8_t invert;
21 };
22 
23 enum {
24 	O_TOS = 1 << 0,
25 };
26 
27 static const struct xt_option_entry tos_mt_opts_v0[] = {
28 	{.name = "tos", .id = O_TOS, .type = XTTYPE_TOSMASK,
29 	 .flags = XTOPT_INVERT | XTOPT_MAND, .max = 0xFF},
30 	XTOPT_TABLEEND,
31 };
32 
33 static const struct xt_option_entry tos_mt_opts[] = {
34 	{.name = "tos", .id = O_TOS, .type = XTTYPE_TOSMASK,
35 	 .flags = XTOPT_INVERT | XTOPT_MAND, .max = 0x3F},
36 	XTOPT_TABLEEND,
37 };
38 
tos_mt_help(void)39 static void tos_mt_help(void)
40 {
41 	const struct tos_symbol_info *symbol;
42 
43 	printf(
44 "tos match options:\n"
45 "[!] --tos value[/mask]    Match Type of Service/Priority field value\n"
46 "[!] --tos symbol          Match TOS field (IPv4 only) by symbol\n"
47 "                          Accepted symbolic names for value are:\n");
48 
49 	for (symbol = tos_symbol_names; symbol->name != NULL; ++symbol)
50 		printf("                          (0x%02x) %2u %s\n",
51 		       symbol->value, symbol->value, symbol->name);
52 
53 	printf("\n");
54 }
55 
tos_mt_parse_v0(struct xt_option_call * cb)56 static void tos_mt_parse_v0(struct xt_option_call *cb)
57 {
58 	struct ipt_tos_info *info = cb->data;
59 
60 	xtables_option_parse(cb);
61 	if (cb->val.tos_mask != 0xFF)
62 		xtables_error(PARAMETER_PROBLEM, "tos: Your kernel is "
63 		           "too old to support anything besides /0xFF "
64 			   "as a mask.");
65 	info->tos = cb->val.tos_value;
66 	if (cb->invert)
67 		info->invert = true;
68 }
69 
tos_mt_parse(struct xt_option_call * cb)70 static void tos_mt_parse(struct xt_option_call *cb)
71 {
72 	struct xt_tos_match_info *info = cb->data;
73 
74 	xtables_option_parse(cb);
75 	info->tos_value = cb->val.tos_value;
76 	info->tos_mask  = cb->val.tos_mask;
77 	if (cb->invert)
78 		info->invert = true;
79 }
80 
tos_mt_print_v0(const void * ip,const struct xt_entry_match * match,int numeric)81 static void tos_mt_print_v0(const void *ip, const struct xt_entry_match *match,
82                             int numeric)
83 {
84 	const struct ipt_tos_info *info = (const void *)match->data;
85 
86 	printf(" tos match ");
87 	if (info->invert)
88 		printf("!");
89 	if (numeric || !tos_try_print_symbolic("", info->tos, 0x3F))
90 		printf("0x%02x", info->tos);
91 }
92 
tos_mt_print(const void * ip,const struct xt_entry_match * match,int numeric)93 static void tos_mt_print(const void *ip, const struct xt_entry_match *match,
94                          int numeric)
95 {
96 	const struct xt_tos_match_info *info = (const void *)match->data;
97 
98 	printf(" tos match");
99 	if (info->invert)
100 		printf("!");
101 	if (numeric ||
102 	    !tos_try_print_symbolic("", info->tos_value, info->tos_mask))
103 		printf("0x%02x/0x%02x", info->tos_value, info->tos_mask);
104 }
105 
tos_mt_save_v0(const void * ip,const struct xt_entry_match * match)106 static void tos_mt_save_v0(const void *ip, const struct xt_entry_match *match)
107 {
108 	const struct ipt_tos_info *info = (const void *)match->data;
109 
110 	if (info->invert)
111 		printf(" !");
112 	printf(" --tos 0x%02x", info->tos);
113 }
114 
tos_mt_save(const void * ip,const struct xt_entry_match * match)115 static void tos_mt_save(const void *ip, const struct xt_entry_match *match)
116 {
117 	const struct xt_tos_match_info *info = (const void *)match->data;
118 
119 	if (info->invert)
120 		printf(" !");
121 	printf(" --tos 0x%02x/0x%02x", info->tos_value, info->tos_mask);
122 }
123 
124 static struct xtables_match tos_mt_reg[] = {
125 	{
126 		.version       = XTABLES_VERSION,
127 		.name          = "tos",
128 		.family        = NFPROTO_IPV4,
129 		.revision      = 0,
130 		.size          = XT_ALIGN(sizeof(struct ipt_tos_info)),
131 		.userspacesize = XT_ALIGN(sizeof(struct ipt_tos_info)),
132 		.help          = tos_mt_help,
133 		.print         = tos_mt_print_v0,
134 		.save          = tos_mt_save_v0,
135 		.x6_parse      = tos_mt_parse_v0,
136 		.x6_options    = tos_mt_opts_v0,
137 	},
138 	{
139 		.version       = XTABLES_VERSION,
140 		.name          = "tos",
141 		.family        = NFPROTO_UNSPEC,
142 		.revision      = 1,
143 		.size          = XT_ALIGN(sizeof(struct xt_tos_match_info)),
144 		.userspacesize = XT_ALIGN(sizeof(struct xt_tos_match_info)),
145 		.help          = tos_mt_help,
146 		.print         = tos_mt_print,
147 		.save          = tos_mt_save,
148 		.x6_parse      = tos_mt_parse,
149 		.x6_options    = tos_mt_opts,
150 	},
151 };
152 
_init(void)153 void _init(void)
154 {
155 	xtables_register_matches(tos_mt_reg, ARRAY_SIZE(tos_mt_reg));
156 }
157