net/netfilter/xt_NFLOG.c

   1 /*
   2  * Copyright (c) 2006 Patrick McHardy <kaber@trash.net>
   3  *
   4  * This program is free software; you can redistribute it and/or modify
   5  * it under the terms of the GNU General Public License version 2 as
   6  * published by the Free Software Foundation.
   7  */
   8
   9 #include <linux/module.h>
  10 #include <linux/init.h>
  11 #include <linux/skbuff.h>
  12
  13 #include <linux/netfilter/x_tables.h>
  14 #include <linux/netfilter/xt_NFLOG.h>
  15
  16 MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
  17 MODULE_DESCRIPTION("x_tables NFLOG target");
  18 MODULE_LICENSE("GPL");
  19 MODULE_ALIAS("ipt_NFLOG");
  20 MODULE_ALIAS("ip6t_NFLOG");
  21
  22 static unsigned int
  23 nflog_tg(struct sk_buff *skb, const struct net_device *in,
  24          const struct net_device *out, unsigned int hooknum,
  25          const struct xt_target *target, const void *targinfo)
  26 {
  27         const struct xt_nflog_info *info = targinfo;
  28         struct nf_loginfo li;
  29
  30         li.type              = NF_LOG_TYPE_ULOG;
  31         li.u.ulog.copy_len   = info->len;
  32         li.u.ulog.group      = info->group;
  33         li.u.ulog.qthreshold = info->threshold;
  34
  35         nf_log_packet(target->family, hooknum, skb, in, out, &li,
  36                       "%s", info->prefix);
  37         return XT_CONTINUE;
  38 }
  39
  40 static bool
  41 nflog_tg_check(const char *tablename, const void *entry,
  42                const struct xt_target *target, void *targetinfo,
  43                unsigned int hookmask)
  44 {
  45         const struct xt_nflog_info *info = targetinfo;
  46
  47         if (info->flags & ~XT_NFLOG_MASK)
  48                 return false;
  49         if (info->prefix[sizeof(info->prefix) - 1] != '\0')
  50                 return false;
  51         return true;
  52 }
  53
  54 static struct xt_target nflog_tg_reg[] __read_mostly = {
  55         {
  56                 .name           = "NFLOG",
  57                 .family         = AF_INET,
  58                 .checkentry     = nflog_tg_check,
  59                 .target         = nflog_tg,
  60                 .targetsize     = sizeof(struct xt_nflog_info),
  61                 .me             = THIS_MODULE,
  62         },
  63         {
  64                 .name           = "NFLOG",
  65                 .family         = AF_INET6,
  66                 .checkentry     = nflog_tg_check,
  67                 .target         = nflog_tg,
  68                 .targetsize     = sizeof(struct xt_nflog_info),
  69                 .me             = THIS_MODULE,
  70         },
  71 };
  72
  73 static int __init nflog_tg_init(void)
  74 {
  75         return xt_register_targets(nflog_tg_reg, ARRAY_SIZE(nflog_tg_reg));
  76 }
  77
  78 static void __exit nflog_tg_exit(void)
  79 {
  80         xt_unregister_targets(nflog_tg_reg, ARRAY_SIZE(nflog_tg_reg));
  81 }
  82
  83 module_init(nflog_tg_init);
  84 module_exit(nflog_tg_exit);