blob: 23345238711b515805a63687b774cdb4b6d788f4 [file] [log] [blame]
Jan Engelhardt17b0d7e2008-01-14 23:41:11 -08001/*
2 * xt_mark - Netfilter module to match NFMARK value
Linus Torvalds1da177e2005-04-16 15:20:36 -07003 *
Jan Engelhardt17b0d7e2008-01-14 23:41:11 -08004 * (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
5 * Copyright © CC Computer Consultants GmbH, 2007 - 2008
Jan Engelhardt4725c722009-06-12 19:02:27 +02006 * Jan Engelhardt <jengelh@medozas.de>
Jan Engelhardt17b0d7e2008-01-14 23:41:11 -08007 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
Linus Torvalds1da177e2005-04-16 15:20:36 -070011 */
12
13#include <linux/module.h>
14#include <linux/skbuff.h>
15
Harald Welte2e4e6a12006-01-12 13:30:04 -080016#include <linux/netfilter/xt_mark.h>
17#include <linux/netfilter/x_tables.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070018
19MODULE_LICENSE("GPL");
20MODULE_AUTHOR("Marc Boucher <marc@mbsi.ca>");
Jan Engelhardt28b94982009-02-28 03:23:57 +010021MODULE_DESCRIPTION("Xtables: packet mark operations");
Harald Welte2e4e6a12006-01-12 13:30:04 -080022MODULE_ALIAS("ipt_mark");
23MODULE_ALIAS("ip6t_mark");
Jan Engelhardt28b94982009-02-28 03:23:57 +010024MODULE_ALIAS("ipt_MARK");
25MODULE_ALIAS("ip6t_MARK");
26
27static unsigned int
Jan Engelhardt4b560b42009-07-05 19:43:26 +020028mark_tg(struct sk_buff *skb, const struct xt_action_param *par)
Jan Engelhardt28b94982009-02-28 03:23:57 +010029{
30 const struct xt_mark_tginfo2 *info = par->targinfo;
31
32 skb->mark = (skb->mark & ~info->mask) ^ info->mark;
33 return XT_CONTINUE;
34}
Linus Torvalds1da177e2005-04-16 15:20:36 -070035
Jan Engelhardt1d93a9c2007-07-07 22:15:35 -070036static bool
Jan Engelhardt62fc8052009-07-07 20:42:08 +020037mark_mt(const struct sk_buff *skb, struct xt_action_param *par)
Jan Engelhardt17b0d7e2008-01-14 23:41:11 -080038{
Jan Engelhardtf7108a202008-10-08 11:35:18 +020039 const struct xt_mark_mtinfo1 *info = par->matchinfo;
Jan Engelhardt17b0d7e2008-01-14 23:41:11 -080040
41 return ((skb->mark & info->mask) == info->mark) ^ info->invert;
42}
43
Jan Engelhardt28b94982009-02-28 03:23:57 +010044static struct xt_target mark_tg_reg __read_mostly = {
45 .name = "MARK",
46 .revision = 2,
47 .family = NFPROTO_UNSPEC,
48 .target = mark_tg,
49 .targetsize = sizeof(struct xt_mark_tginfo2),
50 .me = THIS_MODULE,
51};
52
Jan Engelhardt4725c722009-06-12 19:02:27 +020053static struct xt_match mark_mt_reg __read_mostly = {
54 .name = "mark",
55 .revision = 1,
56 .family = NFPROTO_UNSPEC,
57 .match = mark_mt,
58 .matchsize = sizeof(struct xt_mark_mtinfo1),
59 .me = THIS_MODULE,
Linus Torvalds1da177e2005-04-16 15:20:36 -070060};
61
Jan Engelhardtd3c5ee62007-12-04 23:24:03 -080062static int __init mark_mt_init(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070063{
Jan Engelhardt28b94982009-02-28 03:23:57 +010064 int ret;
65
66 ret = xt_register_target(&mark_tg_reg);
67 if (ret < 0)
68 return ret;
69 ret = xt_register_match(&mark_mt_reg);
70 if (ret < 0) {
71 xt_unregister_target(&mark_tg_reg);
72 return ret;
73 }
74 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -070075}
76
Jan Engelhardtd3c5ee62007-12-04 23:24:03 -080077static void __exit mark_mt_exit(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -070078{
Jan Engelhardt4725c722009-06-12 19:02:27 +020079 xt_unregister_match(&mark_mt_reg);
Jan Engelhardt28b94982009-02-28 03:23:57 +010080 xt_unregister_target(&mark_tg_reg);
Linus Torvalds1da177e2005-04-16 15:20:36 -070081}
82
Jan Engelhardtd3c5ee62007-12-04 23:24:03 -080083module_init(mark_mt_init);
84module_exit(mark_mt_exit);