2 * NetBIOS name service broadcast connection tracking helper
4 * (c) 2005 Patrick McHardy <kaber@trash.net>
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
12 * This helper tracks locally originating NetBIOS name service
13 * requests by issuing permanent expectations (valid until
14 * timing out) matching all reply connections from the
15 * destination network. The only NetBIOS specific thing is
16 * actually the port number.
18 #include <linux/kernel.h>
19 #include <linux/module.h>
20 #include <linux/init.h>
21 #include <linux/skbuff.h>
22 #include <linux/netdevice.h>
23 #include <linux/inetdevice.h>
24 #include <linux/if_addr.h>
27 #include <linux/netfilter.h>
28 #include <net/route.h>
30 #include <net/netfilter/nf_conntrack.h>
31 #include <net/netfilter/nf_conntrack_helper.h>
32 #include <net/netfilter/nf_conntrack_expect.h>
36 MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
37 MODULE_DESCRIPTION("NetBIOS name service broadcast connection tracking helper");
38 MODULE_LICENSE("GPL");
39 MODULE_ALIAS("ip_conntrack_netbios_ns");
40 MODULE_ALIAS_NFCT_HELPER("netbios_ns");
42 static unsigned int timeout __read_mostly = 3;
43 module_param(timeout, uint, 0400);
44 MODULE_PARM_DESC(timeout, "timeout for master connection/replies in seconds");
46 static int help(struct sk_buff *skb, unsigned int protoff,
47 struct nf_conn *ct, enum ip_conntrack_info ctinfo)
49 struct nf_conntrack_expect *exp;
50 struct iphdr *iph = ip_hdr(skb);
51 struct rtable *rt = skb_rtable(skb);
52 struct in_device *in_dev;
55 /* we're only interested in locally generated packets */
58 if (rt == NULL || !(rt->rt_flags & RTCF_BROADCAST))
60 if (CTINFO2DIR(ctinfo) != IP_CT_DIR_ORIGINAL)
64 in_dev = __in_dev_get_rcu(rt->dst.dev);
66 for_primary_ifa(in_dev) {
67 if (ifa->ifa_broadcast == iph->daddr) {
78 exp = nf_ct_expect_alloc(ct);
82 exp->tuple = ct->tuplehash[IP_CT_DIR_REPLY].tuple;
83 exp->tuple.src.u.udp.port = htons(NMBD_PORT);
85 exp->mask.src.u3.ip = mask;
86 exp->mask.src.u.udp.port = htons(0xFFFF);
89 exp->flags = NF_CT_EXPECT_PERMANENT;
90 exp->class = NF_CT_EXPECT_CLASS_DEFAULT;
93 nf_ct_expect_related(exp);
94 nf_ct_expect_put(exp);
96 nf_ct_refresh(ct, skb, timeout * HZ);
101 static struct nf_conntrack_expect_policy exp_policy = {
105 static struct nf_conntrack_helper helper __read_mostly = {
106 .name = "netbios-ns",
107 .tuple.src.l3num = AF_INET,
108 .tuple.src.u.udp.port = cpu_to_be16(NMBD_PORT),
109 .tuple.dst.protonum = IPPROTO_UDP,
112 .expect_policy = &exp_policy,
115 static int __init nf_conntrack_netbios_ns_init(void)
117 exp_policy.timeout = timeout;
118 return nf_conntrack_helper_register(&helper);
121 static void __exit nf_conntrack_netbios_ns_fini(void)
123 nf_conntrack_helper_unregister(&helper);
126 module_init(nf_conntrack_netbios_ns_init);
127 module_exit(nf_conntrack_netbios_ns_fini);