2 * IPv6 raw table, a port of the IPv4 raw table to IPv6
4 * Copyright (C) 2003 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
6 #include <linux/module.h>
7 #include <linux/netfilter_ipv6/ip6_tables.h>
9 #define RAW_VALID_HOOKS ((1 << NF_IP6_PRE_ROUTING) | (1 << NF_IP6_LOCAL_OUT))
12 #define DEBUGP(x, args...) printk(KERN_DEBUG x, ## args)
14 #define DEBUGP(x, args...)
20 struct ip6t_entry entry
;
21 struct ip6t_standard_target target
;
24 struct ip6t_error_target
26 struct ip6t_entry_target target
;
27 char errorname
[IP6T_FUNCTION_MAXNAMELEN
];
32 struct ip6t_entry entry
;
33 struct ip6t_error_target target
;
38 struct ip6t_replace repl
;
39 struct ip6t_standard entries
[2];
40 struct ip6t_error term
;
41 } initial_table __initdata
= {
44 .valid_hooks
= RAW_VALID_HOOKS
,
46 .size
= sizeof(struct ip6t_standard
) * 2 + sizeof(struct ip6t_error
),
48 [NF_IP6_PRE_ROUTING
] = 0,
49 [NF_IP6_LOCAL_OUT
] = sizeof(struct ip6t_standard
)
52 [NF_IP6_PRE_ROUTING
] = 0,
53 [NF_IP6_LOCAL_OUT
] = sizeof(struct ip6t_standard
)
60 .target_offset
= sizeof(struct ip6t_entry
),
61 .next_offset
= sizeof(struct ip6t_standard
),
66 .target_size
= IP6T_ALIGN(sizeof(struct ip6t_standard_target
)),
69 .verdict
= -NF_ACCEPT
- 1,
76 .target_offset
= sizeof(struct ip6t_entry
),
77 .next_offset
= sizeof(struct ip6t_standard
),
82 .target_size
= IP6T_ALIGN(sizeof(struct ip6t_standard_target
)),
85 .verdict
= -NF_ACCEPT
- 1,
92 .target_offset
= sizeof(struct ip6t_entry
),
93 .next_offset
= sizeof(struct ip6t_error
),
99 .target_size
= IP6T_ALIGN(sizeof(struct ip6t_error_target
)),
100 .name
= IP6T_ERROR_TARGET
,
104 .errorname
= "ERROR",
109 static struct xt_table packet_raw
= {
111 .valid_hooks
= RAW_VALID_HOOKS
,
112 .lock
= RW_LOCK_UNLOCKED
,
117 /* The work comes in here from netfilter.c. */
119 ip6t_hook(unsigned int hook
,
120 struct sk_buff
**pskb
,
121 const struct net_device
*in
,
122 const struct net_device
*out
,
123 int (*okfn
)(struct sk_buff
*))
125 return ip6t_do_table(pskb
, hook
, in
, out
, &packet_raw
, NULL
);
128 static struct nf_hook_ops ip6t_ops
[] = {
132 .hooknum
= NF_IP6_PRE_ROUTING
,
133 .priority
= NF_IP6_PRI_FIRST
,
134 .owner
= THIS_MODULE
,
139 .hooknum
= NF_IP6_LOCAL_OUT
,
140 .priority
= NF_IP6_PRI_FIRST
,
141 .owner
= THIS_MODULE
,
145 static int __init
init(void)
150 ret
= ip6t_register_table(&packet_raw
, &initial_table
.repl
);
155 ret
= nf_register_hook(&ip6t_ops
[0]);
159 ret
= nf_register_hook(&ip6t_ops
[1]);
166 nf_unregister_hook(&ip6t_ops
[0]);
168 ip6t_unregister_table(&packet_raw
);
173 static void __exit
fini(void)
177 for (i
= 0; i
< sizeof(ip6t_ops
)/sizeof(struct nf_hook_ops
); i
++)
178 nf_unregister_hook(&ip6t_ops
[i
]);
180 ip6t_unregister_table(&packet_raw
);
185 MODULE_LICENSE("GPL");