net/netfilter/nf_dup_netdev.c

   1 /*
   2  * Copyright (c) 2015 Pablo Neira Ayuso <pablo@netfilter.org>
   3  *
   4  * This program is free software; you can redistribute it and/or modify it
   5  * under the terms of the GNU General Public License version 2 as published by
   6  * the Free Software Foundation.
   7  */
   8
   9 #include <linux/kernel.h>
  10 #include <linux/init.h>
  11 #include <linux/module.h>
  12 #include <linux/netlink.h>
  13 #include <linux/netfilter.h>
  14 #include <linux/netfilter/nf_tables.h>
  15 #include <net/netfilter/nf_tables.h>
  16 #include <net/netfilter/nf_dup_netdev.h>
  17
  18 static void nf_do_netdev_egress(struct sk_buff *skb, struct net_device *dev)
  19 {
  20         if (skb_mac_header_was_set(skb))
  21                 skb_push(skb, skb->mac_len);
  22
  23         skb->dev = dev;
  24         dev_queue_xmit(skb);
  25 }
  26
  27 void nf_fwd_netdev_egress(const struct nft_pktinfo *pkt, int oif)
  28 {
  29         struct net_device *dev;
  30
  31         dev = dev_get_by_index_rcu(nft_net(pkt), oif);
  32         if (!dev) {
  33                 kfree_skb(pkt->skb);
  34                 return;
  35         }
  36
  37         nf_do_netdev_egress(pkt->skb, dev);
  38 }
  39 EXPORT_SYMBOL_GPL(nf_fwd_netdev_egress);
  40
  41 void nf_dup_netdev_egress(const struct nft_pktinfo *pkt, int oif)
  42 {
  43         struct net_device *dev;
  44         struct sk_buff *skb;
  45
  46         dev = dev_get_by_index_rcu(nft_net(pkt), oif);
  47         if (dev == NULL)
  48                 return;
  49
  50         skb = skb_clone(pkt->skb, GFP_ATOMIC);
  51         if (skb)
  52                 nf_do_netdev_egress(skb, dev);
  53 }
  54 EXPORT_SYMBOL_GPL(nf_dup_netdev_egress);
  55
  56 MODULE_LICENSE("GPL");
  57 MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");