[linux-2.6-block.git] / net / bridge / netfilter / ebtable_broute.c

/*
 *  ebtable_broute
 *
 *	Authors:
 *	Bart De Schuymer <bdschuym@pandora.be>
 *
 *  April, 2002
 *
 *  This table lets you choose between routing and bridging for frames
 *  entering on a bridge enslaved nic. This table is traversed before any
 *  other ebtables table. See net/bridge/br_input.c.
 */

#include <linux/netfilter_bridge/ebtables.h>
#include <linux/module.h>
#include <linux/if_bridge.h>

/* EBT_ACCEPT means the frame will be bridged
 * EBT_DROP means the frame will be routed
 */
static struct ebt_entries initial_chain = {
	.name		= "BROUTING",
	.policy		= EBT_ACCEPT,
};

static struct ebt_replace_kernel initial_table = {
	.name		= "broute",
	.valid_hooks	= 1 << NF_BR_BROUTING,
	.entries_size	= sizeof(struct ebt_entries),
	.hook_entry	= {
		[NF_BR_BROUTING]	= &initial_chain,
	},
	.entries	= (char *)&initial_chain,
};

static int check(const struct ebt_table_info *info, unsigned int valid_hooks)
{
	if (valid_hooks & ~(1 << NF_BR_BROUTING))
		return -EINVAL;
	return 0;
}

static const struct ebt_table broute_table = {
	.name		= "broute",
	.table		= &initial_table,
	.valid_hooks	= 1 << NF_BR_BROUTING,
	.check		= check,
	.me		= THIS_MODULE,
};

static int ebt_broute(struct sk_buff *skb)
{
	int ret;

	ret = ebt_do_table(NF_BR_BROUTING, skb, skb->dev, NULL,
			   dev_net(skb->dev)->xt.broute_table);
	if (ret == NF_DROP)
		return 1; /* route it */
	return 0; /* bridge it */
}

static int __net_init broute_net_init(struct net *net)
{
	net->xt.broute_table = ebt_register_table(net, &broute_table);
	return PTR_ERR_OR_ZERO(net->xt.broute_table);
}

static void __net_exit broute_net_exit(struct net *net)
{
	ebt_unregister_table(net, net->xt.broute_table);
}

static struct pernet_operations broute_net_ops = {
	.init = broute_net_init,
	.exit = broute_net_exit,
};

static int __init ebtable_broute_init(void)
{
	int ret;

	ret = register_pernet_subsys(&broute_net_ops);
	if (ret < 0)
		return ret;
	/* see br_input.c */
	RCU_INIT_POINTER(br_should_route_hook,
			   (br_should_route_hook_t *)ebt_broute);
	return 0;
}

static void __exit ebtable_broute_fini(void)
{
	RCU_INIT_POINTER(br_should_route_hook, NULL);
	synchronize_net();
	unregister_pernet_subsys(&broute_net_ops);
}

module_init(ebtable_broute_init);
module_exit(ebtable_broute_fini);
MODULE_LICENSE("GPL");
Commit	Line	Data
1da177e4 LT	1	/*
	2	* ebtable_broute
	3	*
	4	* Authors:
	5	* Bart De Schuymer <bdschuym@pandora.be>
	6	*
	7	* April, 2002
	8	*
	9	* This table lets you choose between routing and bridging for frames
	10	* entering on a bridge enslaved nic. This table is traversed before any
	11	* other ebtables table. See net/bridge/br_input.c.
	12	*/
	13
	14	#include <linux/netfilter_bridge/ebtables.h>
	15	#include <linux/module.h>
	16	#include <linux/if_bridge.h>
	17
	18	/* EBT_ACCEPT means the frame will be bridged
	19	* EBT_DROP means the frame will be routed
	20	*/
	21	static struct ebt_entries initial_chain = {
	22	.name = "BROUTING",
	23	.policy = EBT_ACCEPT,
	24	};
	25
97ad8b53	26	static struct ebt_replace_kernel initial_table = {
1da177e4 LT	27	.name = "broute",
	28	.valid_hooks = 1 << NF_BR_BROUTING,
	29	.entries_size = sizeof(struct ebt_entries),
	30	.hook_entry = {
	31	[NF_BR_BROUTING] = &initial_chain,
	32	},
	33	.entries = (char *)&initial_chain,
	34	};
	35
	36	static int check(const struct ebt_table_info *info, unsigned int valid_hooks)
	37	{
	38	if (valid_hooks & ~(1 << NF_BR_BROUTING))
	39	return -EINVAL;
	40	return 0;
	41	}
	42
97ad8b53	43	static const struct ebt_table broute_table = {
1da177e4 LT	44	.name = "broute",
	45	.table = &initial_table,
	46	.valid_hooks = 1 << NF_BR_BROUTING,
1da177e4 LT	47	.check = check,
	48	.me = THIS_MODULE,
	49	};
	50
3db05fea	51	static int ebt_broute(struct sk_buff *skb)
1da177e4 LT	52	{
	53	int ret;
	54
3db05fea	55	ret = ebt_do_table(NF_BR_BROUTING, skb, skb->dev, NULL,
8157e6d1	56	dev_net(skb->dev)->xt.broute_table);
1da177e4 LT	57	if (ret == NF_DROP)
	58	return 1; /* route it */
	59	return 0; /* bridge it */
	60	}
	61
8157e6d1 AD	62	static int __net_init broute_net_init(struct net *net)
	63	{
	64	net->xt.broute_table = ebt_register_table(net, &broute_table);
8c6ffba0	65	return PTR_ERR_OR_ZERO(net->xt.broute_table);
8157e6d1 AD	66	}
	67
	68	static void __net_exit broute_net_exit(struct net *net)
	69	{
f54e9367	70	ebt_unregister_table(net, net->xt.broute_table);
8157e6d1 AD	71	}
	72
	73	static struct pernet_operations broute_net_ops = {
	74	.init = broute_net_init,
	75	.exit = broute_net_exit,
	76	};
	77
65b4b4e8	78	static int __init ebtable_broute_init(void)
1da177e4	79	{
8157e6d1 AD	80	int ret;
	81
	82	ret = register_pernet_subsys(&broute_net_ops);
	83	if (ret < 0)
	84	return ret;
1da177e4	85	/* see br_input.c */
a9b3cd7f	86	RCU_INIT_POINTER(br_should_route_hook,
a386f990	87	(br_should_route_hook_t *)ebt_broute);
6beceee5	88	return 0;
1da177e4 LT	89	}
1da177e4 LT	90
65b4b4e8	91	static void __exit ebtable_broute_fini(void)
1da177e4	92	{
a9b3cd7f	93	RCU_INIT_POINTER(br_should_route_hook, NULL);
1da177e4	94	synchronize_net();
8157e6d1	95	unregister_pernet_subsys(&broute_net_ops);
1da177e4 LT	96	}
1da177e4 LT	97
65b4b4e8 AM	98	module_init(ebtable_broute_init);
65b4b4e8 AM	99	module_exit(ebtable_broute_fini);
1da177e4	100	MODULE_LICENSE("GPL");