1 /* Kernel module to match NFMARK values. */
3 /* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
10 #include <linux/module.h>
11 #include <linux/skbuff.h>
13 #include <linux/netfilter_ipv4/ipt_mark.h>
14 #include <linux/netfilter_ipv4/ip_tables.h>
16 MODULE_LICENSE("GPL");
17 MODULE_AUTHOR("Marc Boucher <marc@mbsi.ca>");
18 MODULE_DESCRIPTION("iptables mark matching module");
21 match(const struct sk_buff
*skb
,
22 const struct net_device
*in
,
23 const struct net_device
*out
,
24 const void *matchinfo
,
28 const struct ipt_mark_info
*info
= matchinfo
;
30 return ((skb
->nfmark
& info
->mask
) == info
->mark
) ^ info
->invert
;
34 checkentry(const char *tablename
,
35 const struct ipt_ip
*ip
,
37 unsigned int matchsize
,
38 unsigned int hook_mask
)
40 struct ipt_mark_info
*minfo
= (struct ipt_mark_info
*) matchinfo
;
42 if (matchsize
!= IPT_ALIGN(sizeof(struct ipt_mark_info
)))
45 if (minfo
->mark
> 0xffffffff || minfo
->mask
> 0xffffffff) {
46 printk(KERN_WARNING
"mark: only supports 32bit mark\n");
53 static struct ipt_match mark_match
= {
56 .checkentry
= &checkentry
,
60 static int __init
init(void)
62 return ipt_register_match(&mark_match
);
65 static void __exit
fini(void)
67 ipt_unregister_match(&mark_match
);