[linux-2.6-block.git] / include / linux / netfilter_bridge / ebtables.h

/*
 *  ebtables
 *
 *	Authors:
 *	Bart De Schuymer		<bdschuym@pandora.be>
 *
 *  ebtables.c,v 2.0, April, 2002
 *
 *  This code is stongly inspired on the iptables code which is
 *  Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
 */
#ifndef __LINUX_BRIDGE_EFF_H
#define __LINUX_BRIDGE_EFF_H

#include <uapi/linux/netfilter_bridge/ebtables.h>


/* return values for match() functions */
#define EBT_MATCH 0
#define EBT_NOMATCH 1

struct ebt_match {
	struct list_head list;
	const char name[EBT_FUNCTION_MAXNAMELEN];
	bool (*match)(const struct sk_buff *skb, const struct net_device *in,
		const struct net_device *out, const struct xt_match *match,
		const void *matchinfo, int offset, unsigned int protoff,
		bool *hotdrop);
	bool (*checkentry)(const char *table, const void *entry,
		const struct xt_match *match, void *matchinfo,
		unsigned int hook_mask);
	void (*destroy)(const struct xt_match *match, void *matchinfo);
	unsigned int matchsize;
	u_int8_t revision;
	u_int8_t family;
	struct module *me;
};

struct ebt_watcher {
	struct list_head list;
	const char name[EBT_FUNCTION_MAXNAMELEN];
	unsigned int (*target)(struct sk_buff *skb,
		const struct net_device *in, const struct net_device *out,
		unsigned int hook_num, const struct xt_target *target,
		const void *targinfo);
	bool (*checkentry)(const char *table, const void *entry,
		const struct xt_target *target, void *targinfo,
		unsigned int hook_mask);
	void (*destroy)(const struct xt_target *target, void *targinfo);
	unsigned int targetsize;
	u_int8_t revision;
	u_int8_t family;
	struct module *me;
};

struct ebt_target {
	struct list_head list;
	const char name[EBT_FUNCTION_MAXNAMELEN];
	/* returns one of the standard EBT_* verdicts */
	unsigned int (*target)(struct sk_buff *skb,
		const struct net_device *in, const struct net_device *out,
		unsigned int hook_num, const struct xt_target *target,
		const void *targinfo);
	bool (*checkentry)(const char *table, const void *entry,
		const struct xt_target *target, void *targinfo,
		unsigned int hook_mask);
	void (*destroy)(const struct xt_target *target, void *targinfo);
	unsigned int targetsize;
	u_int8_t revision;
	u_int8_t family;
	struct module *me;
};

/* used for jumping from and into user defined chains (udc) */
struct ebt_chainstack {
	struct ebt_entries *chaininfo; /* pointer to chain data */
	struct ebt_entry *e; /* pointer to entry data */
	unsigned int n; /* n'th entry */
};

struct ebt_table_info {
	/* total size of the entries */
	unsigned int entries_size;
	unsigned int nentries;
	/* pointers to the start of the chains */
	struct ebt_entries *hook_entry[NF_BR_NUMHOOKS];
	/* room to maintain the stack used for jumping from and into udc */
	struct ebt_chainstack **chainstack;
	char *entries;
	struct ebt_counter counters[0] ____cacheline_aligned;
};

struct ebt_table {
	struct list_head list;
	char name[EBT_TABLE_MAXNAMELEN];
	struct ebt_replace_kernel *table;
	unsigned int valid_hooks;
	rwlock_t lock;
	/* e.g. could be the table explicitly only allows certain
	 * matches, targets, ... 0 == let it in */
	int (*check)(const struct ebt_table_info *info,
	   unsigned int valid_hooks);
	/* the data used by the kernel */
	struct ebt_table_info *private;
	struct module *me;
};

#define EBT_ALIGN(s) (((s) + (__alignof__(struct _xt_align)-1)) & \
		     ~(__alignof__(struct _xt_align)-1))
extern struct ebt_table *ebt_register_table(struct net *net,
					    const struct ebt_table *table);
extern void ebt_unregister_table(struct net *net, struct ebt_table *table);
extern unsigned int ebt_do_table(unsigned int hook, struct sk_buff *skb,
   const struct net_device *in, const struct net_device *out,
   struct ebt_table *table);

/* Used in the kernel match() functions */
#define FWINV(bool,invflg) ((bool) ^ !!(info->invflags & invflg))
/* True if the hook mask denotes that the rule is in a base chain,
 * used in the check() functions */
#define BASE_CHAIN (par->hook_mask & (1 << NF_BR_NUMHOOKS))
/* Clear the bit in the hook mask that tells if the rule is on a base chain */
#define CLEAR_BASE_CHAIN_BIT (par->hook_mask &= ~(1 << NF_BR_NUMHOOKS))
/* True if the target is not a standard target */
#define INVALID_TARGET (info->target < -NUM_STANDARD_TARGETS || info->target >= 0)

#endif
Commit	Line	Data
1da177e4 LT	1	/*
	2	* ebtables
	3	*
	4	* Authors:
	5	* Bart De Schuymer <bdschuym@pandora.be>
	6	*
	7	* ebtables.c,v 2.0, April, 2002
	8	*
	9	* This code is stongly inspired on the iptables code which is
	10	* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
	11	*/
1da177e4 LT	12	#ifndef __LINUX_BRIDGE_EFF_H
1da177e4 LT	13	#define __LINUX_BRIDGE_EFF_H
1da177e4	14
55c5cd3c	15	#include <uapi/linux/netfilter_bridge/ebtables.h>
1e419cd9	16
1da177e4 LT	17
	18	/* return values for match() functions */
	19	#define EBT_MATCH 0
	20	#define EBT_NOMATCH 1
	21
d94d9fee	22	struct ebt_match {
1da177e4 LT	23	struct list_head list;
1da177e4 LT	24	const char name[EBT_FUNCTION_MAXNAMELEN];
8cc784ee	25	bool (match)(const struct sk_buff skb, const struct net_device *in,
2d06d4a5 JE	26	const struct net_device out, const struct xt_match match,
	27	const void *matchinfo, int offset, unsigned int protoff,
	28	bool *hotdrop);
	29	bool (checkentry)(const char table, const void *entry,
	30	const struct xt_match match, void matchinfo,
	31	unsigned int hook_mask);
	32	void (destroy)(const struct xt_match match, void *matchinfo);
18219d3f	33	unsigned int matchsize;
001a18d3 JE	34	u_int8_t revision;
001a18d3 JE	35	u_int8_t family;
1da177e4 LT	36	struct module *me;
	37	};
	38
d94d9fee	39	struct ebt_watcher {
1da177e4 LT	40	struct list_head list;
1da177e4 LT	41	const char name[EBT_FUNCTION_MAXNAMELEN];
2d06d4a5 JE	42	unsigned int (target)(struct sk_buff skb,
	43	const struct net_device in, const struct net_device out,
	44	unsigned int hook_num, const struct xt_target *target,
	45	const void *targinfo);
	46	bool (checkentry)(const char table, const void *entry,
	47	const struct xt_target target, void targinfo,
	48	unsigned int hook_mask);
	49	void (destroy)(const struct xt_target target, void *targinfo);
18219d3f	50	unsigned int targetsize;
001a18d3 JE	51	u_int8_t revision;
001a18d3 JE	52	u_int8_t family;
1da177e4 LT	53	struct module *me;
	54	};
	55
d94d9fee	56	struct ebt_target {
1da177e4 LT	57	struct list_head list;
1da177e4 LT	58	const char name[EBT_FUNCTION_MAXNAMELEN];
0ac6ab1f	59	/* returns one of the standard EBT_* verdicts */
2d06d4a5 JE	60	unsigned int (target)(struct sk_buff skb,
	61	const struct net_device in, const struct net_device out,
	62	unsigned int hook_num, const struct xt_target *target,
	63	const void *targinfo);
	64	bool (checkentry)(const char table, const void *entry,
	65	const struct xt_target target, void targinfo,
	66	unsigned int hook_mask);
	67	void (destroy)(const struct xt_target target, void *targinfo);
18219d3f	68	unsigned int targetsize;
001a18d3 JE	69	u_int8_t revision;
001a18d3 JE	70	u_int8_t family;
1da177e4 LT	71	struct module *me;
	72	};
	73
	74	/* used for jumping from and into user defined chains (udc) */
d94d9fee	75	struct ebt_chainstack {
1da177e4 LT	76	struct ebt_entries chaininfo; / pointer to chain data */
	77	struct ebt_entry e; / pointer to entry data */
	78	unsigned int n; /* n'th entry */
	79	};
	80
d94d9fee	81	struct ebt_table_info {
1da177e4 LT	82	/* total size of the entries */
	83	unsigned int entries_size;
	84	unsigned int nentries;
	85	/* pointers to the start of the chains */
	86	struct ebt_entries *hook_entry[NF_BR_NUMHOOKS];
	87	/* room to maintain the stack used for jumping from and into udc */
	88	struct ebt_chainstack **chainstack;
	89	char *entries;
	90	struct ebt_counter counters[0] ____cacheline_aligned;
	91	};
	92
d94d9fee	93	struct ebt_table {
1da177e4 LT	94	struct list_head list;
1da177e4 LT	95	char name[EBT_TABLE_MAXNAMELEN];
1e419cd9	96	struct ebt_replace_kernel *table;
1da177e4 LT	97	unsigned int valid_hooks;
	98	rwlock_t lock;
	99	/* e.g. could be the table explicitly only allows certain
	100	* matches, targets, ... 0 == let it in */
	101	int (check)(const struct ebt_table_info info,
	102	unsigned int valid_hooks);
	103	/* the data used by the kernel */
	104	struct ebt_table_info *private;
	105	struct module *me;
	106	};
	107
88ba136d JW	108	#define EBT_ALIGN(s) (((s) + (__alignof__(struct _xt_align)-1)) & \
88ba136d JW	109	~(__alignof__(struct _xt_align)-1))
6beceee5	110	extern struct ebt_table ebt_register_table(struct net net,
35aad0ff	111	const struct ebt_table *table);
f54e9367	112	extern void ebt_unregister_table(struct net net, struct ebt_table table);
3db05fea	113	extern unsigned int ebt_do_table(unsigned int hook, struct sk_buff *skb,
1da177e4 LT	114	const struct net_device in, const struct net_device out,
	115	struct ebt_table *table);
	116
	117	/* Used in the kernel match() functions */
	118	#define FWINV(bool,invflg) ((bool) ^ !!(info->invflags & invflg))
	119	/* True if the hook mask denotes that the rule is in a base chain,
	120	* used in the check() functions */
af5d6dc2	121	#define BASE_CHAIN (par->hook_mask & (1 << NF_BR_NUMHOOKS))
1da177e4	122	/* Clear the bit in the hook mask that tells if the rule is on a base chain */
af5d6dc2	123	#define CLEAR_BASE_CHAIN_BIT (par->hook_mask &= ~(1 << NF_BR_NUMHOOKS))
1da177e4 LT	124	/* True if the target is not a standard target */
	125	#define INVALID_TARGET (info->target < -NUM_STANDARD_TARGETS \|\| info->target >= 0)
	126
1da177e4	127	#endif