ebtables-compat: add 'pkttype' match extension

Signed-off-by: Florian Westphal <fw@strlen.de>

diff --git a/extensions/libebt_pkttype.c b/extensions/libebt_pkttype.c
new file mode 100644 (file)
index 0000000..4e2d19d
--- /dev/null
+++ b/extensions/libebt_pkttype.c
@@ -0,0 +1,119 @@
+/* ebt_pkttype
+ *
+ * Authors:
+ * Bart De Schuymer <bdschuym@pandora.be>
+ *
+ * April, 2003
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <getopt.h>
+#include <netdb.h>
+#include <xtables.h>
+#include <linux/if_packet.h>
+#include <linux/netfilter_bridge/ebt_pkttype.h>
+
+static const char *classes[] = {
+       "host",
+       "broadcast",
+       "multicast",
+       "otherhost",
+       "outgoing",
+       "loopback",
+       "fastroute",
+};
+
+static const struct option brpkttype_opts[] =
+{
+       { "pkttype-type"        , required_argument, 0, '1' },
+       { 0 }
+};
+
+static void brpkttype_print_help(void)
+{
+       printf(
+"pkttype options:\n"
+"--pkttype-type    [!] type: class the packet belongs to\n"
+"Possible values: broadcast, multicast, host, otherhost, or any other byte value (which would be pretty useless).\n");
+}
+
+
+static int brpkttype_parse(int c, char **argv, int invert, unsigned int *flags,
+                          const void *entry, struct xt_entry_match **match)
+{
+       struct ebt_pkttype_info *ptinfo = (struct ebt_pkttype_info *)(*match)->data;
+       char *end;
+       long int i;
+
+       switch (c) {
+       case '1':
+               if (invert)
+                       ptinfo->invert = 1;
+               i = strtol(optarg, &end, 16);
+               if (*end != '\0') {
+                       for (i = 0; i < ARRAY_SIZE(classes); i++) {
+                               if (!strcasecmp(optarg, classes[i]))
+                                       break;
+                       }
+                       if (i >= ARRAY_SIZE(classes))
+                               xtables_error(PARAMETER_PROBLEM, "Could not parse class '%s'", optarg);
+               }
+               if (i < 0 || i > 255)
+                       xtables_error(PARAMETER_PROBLEM, "Problem with specified pkttype class");
+               ptinfo->pkt_type = (uint8_t)i;
+               break;
+       default:
+               return 0;
+       }
+       return 1;
+}
+
+
+static void brpkttype_print(const void *ip, const struct xt_entry_match *match, int numeric)
+{
+       struct ebt_pkttype_info *pt = (struct ebt_pkttype_info *)match->data;
+
+       printf("--pkttype-type %s", pt->invert ? "! " : "");
+
+       if (pt->pkt_type < ARRAY_SIZE(classes))
+               printf("%s ", classes[pt->pkt_type]);
+       else
+               printf("%d ", pt->pkt_type);
+}
+
+static int brpkttype_xlate(struct xt_xlate *xl,
+                         const struct xt_xlate_mt_params *params)
+{
+       const struct ebt_pkttype_info *info = (const void*)params->match->data;
+
+       xt_xlate_add(xl, "meta pkttype %s", info->invert ? "!= " : "");
+
+       if (info->pkt_type < 3)
+               xt_xlate_add(xl, "%s ", classes[info->pkt_type]);
+       else if (info->pkt_type == 3)
+               xt_xlate_add(xl, "other ");
+       else
+               xt_xlate_add(xl, "%d ", info->pkt_type);
+
+       return 1;
+}
+
+static struct xtables_match brpkttype_match = {
+       .name           = "pkttype",
+       .version        = XTABLES_VERSION,
+       .family         = NFPROTO_BRIDGE,
+       .size           = XT_ALIGN(sizeof(struct ebt_pkttype_info)),
+       .userspacesize  = XT_ALIGN(sizeof(struct ebt_pkttype_info)),
+       .help           = brpkttype_print_help,
+       .parse          = brpkttype_parse,
+       .print          = brpkttype_print,
+       .xlate          = brpkttype_xlate,
+       .extra_opts     = brpkttype_opts,
+};
+
+void _init(void)
+{
+       xtables_register_match(&brpkttype_match);
+}

diff --git a/extensions/libebt_pkttype.txlate b/extensions/libebt_pkttype.txlate
new file mode 100644 (file)
index 0000000..94d016d
--- /dev/null
+++ b/extensions/libebt_pkttype.txlate
@@ -0,0 +1,20 @@
+ebtables-translate -A INPUT --pkttype-type host
+nft add rule bridge filter INPUT meta pkttype host counter
+
+ebtables-translate -A INPUT ! --pkttype-type broadcast
+nft add rule bridge filter INPUT meta pkttype != broadcast counter
+
+ebtables-translate -A INPUT --pkttype-type ! multicast
+nft add rule bridge filter INPUT meta pkttype != multicast counter
+
+ebtables-translate -A INPUT --pkttype-type otherhost
+nft add rule bridge filter INPUT meta pkttype other counter
+
+ebtables-translate -A INPUT --pkttype-type outgoing
+nft add rule bridge filter INPUT meta pkttype 4 counter
+
+ebtables-translate -A INPUT --pkttype-type loopback
+nft add rule bridge filter INPUT meta pkttype 5 counter
+
+ebtables-translate -A INPUT --pkttype-type fastroute
+nft add rule bridge filter INPUT meta pkttype 6 counter

diff --git a/iptables/xtables-eb.c b/iptables/xtables-eb.c
index 449adc3db792f9efc59b4c1d9f63b8c1a3abb2cd..92abd1e045bd8a1b5fd01c6941c82a6c09b20ede 100644 (file)
--- a/iptables/xtables-eb.c
+++ b/iptables/xtables-eb.c
@@ -669,6 +669,7 @@ void ebt_load_match_extensions(void)
        ebt_load_match("ip6");
        ebt_load_match("mark_m");
        ebt_load_match("limit");
+       ebt_load_match("pkttype");
 
        ebt_load_watcher("log");
        ebt_load_watcher("nflog");