/** * This file was imported from the iptables sources. * Copyright (C) 1999-2008 Netfilter Core Team * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License as published by the * Free Software Foundation; only version 2 of the License is applicable. * * This program is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * General Public License for more details. * * You should have received a copy of the GNU General Public License along * with this program; if not, write to the Free Software Foundation, Inc., * 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */ #ifndef _XTABLES_H #define _XTABLES_H #include #include #include #include "libxtc.h" #include #ifndef IPPROTO_SCTP #define IPPROTO_SCTP 132 #endif #ifndef IPPROTO_DCCP #define IPPROTO_DCCP 33 #endif #ifndef IPPROTO_UDPLITE #define IPPROTO_UDPLITE 136 #endif #define XTABLES_VERSION "1.4.1.1" #define XTABLES_VERSION_CODE (0x10000 * 1 + 0x100 * 4 + 1) #define XTABLES_API_VERSION(x,y,z) (0x10000*(x) + 0x100*(y) + z) /* Include file for additions: new matches and targets. */ struct xtables_match { struct xtables_match *next; xt_chainlabel name; /* Revision of match (0 by default). */ u_int8_t revision; u_int16_t family; const char *version; /* Size of match data. */ size_t size; /* Size of match data relevent for userspace comparison purposes */ size_t userspacesize; /* Function which prints out usage message. */ void (*help)(void); /* Initialize the match. */ void (*init)(struct xt_entry_match *m); /* Function which parses command options; returns true if it ate an option */ /* entry is struct ipt_entry for example */ int (*parse)(int c, char **argv, int invert, unsigned int *flags, const void *entry, struct xt_entry_match **match); /* Final check; exit if not ok. */ void (*final_check)(unsigned int flags); /* Prints out the match iff non-NULL: put space at end */ /* ip is struct ipt_ip * for example */ void (*print)(const void *ip, const struct xt_entry_match *match, int numeric); /* Saves the match info in parsable form to stdout. */ /* ip is struct ipt_ip * for example */ void (*save)(const void *ip, const struct xt_entry_match *match); /* Pointer to list of extra command-line options */ const struct option *extra_opts; /* Ignore these men behind the curtain: */ unsigned int option_offset; struct xt_entry_match *m; unsigned int mflags; #ifdef NO_SHARED_LIBS unsigned int loaded; /* simulate loading so options are merged properly */ #endif }; struct xtables_target { struct xtables_target *next; xt_chainlabel name; /* Revision of target (0 by default). */ u_int8_t revision; u_int16_t family; const char *version; /* Size of target data. */ size_t size; /* Size of target data relevent for userspace comparison purposes */ size_t userspacesize; /* Function which prints out usage message. */ void (*help)(void); /* Initialize the target. */ void (*init)(struct xt_entry_target *t); /* Function which parses command options; returns true if it ate an option */ /* entry is struct ipt_entry for example */ int (*parse)(int c, char **argv, int invert, unsigned int *flags, const void *entry, struct xt_entry_target **targetinfo); /* Final check; exit if not ok. */ void (*final_check)(unsigned int flags); /* Prints out the target iff non-NULL: put space at end */ void (*print)(const void *ip, const struct xt_entry_target *target, int numeric); /* Saves the targinfo in parsable form to stdout. */ void (*save)(const void *ip, const struct xt_entry_target *target); /* Pointer to list of extra command-line options */ const struct option *extra_opts; /* Ignore these men behind the curtain: */ unsigned int option_offset; struct xt_entry_target *t; unsigned int tflags; unsigned int used; #ifdef NO_SHARED_LIBS unsigned int loaded; /* simulate loading so options are merged properly */ #endif }; /* Your shared library should call one of these. */ extern void xtables_register_match(struct xtables_match *me); extern void xtables_register_target(struct xtables_target *me); extern int string_to_number_ll(const char *s, unsigned long long min, unsigned long long max, unsigned long long *ret); extern int string_to_number_l(const char *s, unsigned long min, unsigned long max, unsigned long *ret); extern int string_to_number(const char *s, unsigned int min, unsigned int max, unsigned int *ret); extern bool strtonuml(const char *, char **, unsigned long *, unsigned long, unsigned long); extern bool strtonum(const char *, char **, unsigned int *, unsigned int, unsigned int); extern int service_to_port(const char *name, const char *proto); extern u_int16_t parse_port(const char *port, const char *proto); extern void parse_interface(const char *arg, char *vianame, unsigned char *mask); enum exittype { OTHER_PROBLEM = 1, PARAMETER_PROBLEM, VERSION_PROBLEM, RESOURCE_PROBLEM, P_ONLY_ONCE, P_NO_INVERT, P_BAD_VALUE, P_ONE_ACTION, }; /* this is a special 64bit data type that is 8-byte aligned */ #define aligned_u64 u_int64_t __attribute__((aligned(8))) int check_inverse(const char option[], int *invert, int *my_optind, int argc); void exit_error(enum exittype, const char *, ...)__attribute__((noreturn, format(printf,2,3))); extern void param_act(unsigned int, const char *, ...); extern const char *program_name, *program_version; extern const char *ipaddr_to_numeric(const struct in_addr *); extern const char *ipaddr_to_anyname(const struct in_addr *); extern const char *ipmask_to_numeric(const struct in_addr *); extern struct in_addr *numeric_to_ipaddr(const char *); extern struct in_addr *numeric_to_ipmask(const char *); extern void ipparse_hostnetworkmask(const char *, struct in_addr **, struct in_addr *, unsigned int *); extern struct in6_addr *numeric_to_ip6addr(const char *); extern const char *ip6addr_to_numeric(const struct in6_addr *); extern const char *ip6addr_to_anyname(const struct in6_addr *); extern const char *ip6mask_to_numeric(const struct in6_addr *); extern void ip6parse_hostnetworkmask(const char *, struct in6_addr **, struct in6_addr *, unsigned int *); /** * Print the specified value to standard output, quoting dangerous * characters if required. */ extern void save_string(const char *value); #ifdef NO_SHARED_LIBS # ifdef _INIT # undef _init # define _init _INIT # endif extern void init_extensions(void); #else # define _init __attribute__((constructor)) _INIT #endif /* Present in both iptables.c and ip6tables.c */ extern u_int16_t parse_protocol(const char *s); #ifdef XTABLES_INTERNAL # include #endif #endif /* _XTABLES_H */