5 * Bart De Schuymer <bdschuym@pandora.be>
11 #include <linux/netfilter.h>
12 #include <linux/netfilter_bridge/ebtables.h>
13 #include <linux/netfilter_bridge/ebt_nat.h>
14 #include <linux/module.h>
16 #include <linux/if_arp.h>
19 static int ebt_target_snat(struct sk_buff
*skb
, unsigned int hooknr
,
20 const struct net_device
*in
, const struct net_device
*out
,
21 const void *data
, unsigned int datalen
)
23 struct ebt_nat_info
*info
= (struct ebt_nat_info
*) data
;
25 if (!skb_make_writable(skb
, 0))
28 memcpy(eth_hdr(skb
)->h_source
, info
->mac
, ETH_ALEN
);
29 if (!(info
->target
& NAT_ARP_BIT
) &&
30 eth_hdr(skb
)->h_proto
== htons(ETH_P_ARP
)) {
31 struct arphdr _ah
, *ap
;
33 ap
= skb_header_pointer(skb
, 0, sizeof(_ah
), &_ah
);
36 if (ap
->ar_hln
!= ETH_ALEN
)
38 if (skb_store_bits(skb
, sizeof(_ah
), info
->mac
,ETH_ALEN
))
42 return info
->target
| ~EBT_VERDICT_BITS
;
45 static int ebt_target_snat_check(const char *tablename
, unsigned int hookmask
,
46 const struct ebt_entry
*e
, void *data
, unsigned int datalen
)
48 struct ebt_nat_info
*info
= (struct ebt_nat_info
*) data
;
51 if (datalen
!= EBT_ALIGN(sizeof(struct ebt_nat_info
)))
53 tmp
= info
->target
| ~EBT_VERDICT_BITS
;
54 if (BASE_CHAIN
&& tmp
== EBT_RETURN
)
57 if (strcmp(tablename
, "nat"))
59 if (hookmask
& ~(1 << NF_BR_POST_ROUTING
))
62 if (tmp
< -NUM_STANDARD_TARGETS
|| tmp
>= 0)
64 tmp
= info
->target
| EBT_VERDICT_BITS
;
65 if ((tmp
& ~NAT_ARP_BIT
) != ~NAT_ARP_BIT
)
70 static struct ebt_target snat
=
72 .name
= EBT_SNAT_TARGET
,
73 .target
= ebt_target_snat
,
74 .check
= ebt_target_snat_check
,
78 static int __init
ebt_snat_init(void)
80 return ebt_register_target(&snat
);
83 static void __exit
ebt_snat_fini(void)
85 ebt_unregister_target(&snat
);
88 module_init(ebt_snat_init
);
89 module_exit(ebt_snat_fini
);
90 MODULE_LICENSE("GPL");