2 * xt_MARK - Netfilter module to modify the NFMARK field of an skb
4 * (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
5 * Copyright © CC Computer Consultants GmbH, 2007 - 2008
6 * Jan Engelhardt <jengelh@computergmbh.de>
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
13 #include <linux/module.h>
14 #include <linux/skbuff.h>
16 #include <net/checksum.h>
18 #include <linux/netfilter/x_tables.h>
19 #include <linux/netfilter/xt_MARK.h>
21 MODULE_LICENSE("GPL");
22 MODULE_AUTHOR("Marc Boucher <marc@mbsi.ca>");
23 MODULE_DESCRIPTION("Xtables: packet mark modification");
24 MODULE_ALIAS("ipt_MARK");
25 MODULE_ALIAS("ip6t_MARK");
28 mark_tg_v0(struct sk_buff *skb, const struct xt_target_param *par)
30 const struct xt_mark_target_info *markinfo = par->targinfo;
32 skb->mark = markinfo->mark;
37 mark_tg_v1(struct sk_buff *skb, const struct xt_target_param *par)
39 const struct xt_mark_target_info_v1 *markinfo = par->targinfo;
42 switch (markinfo->mode) {
44 mark = markinfo->mark;
48 mark = skb->mark & markinfo->mark;
52 mark = skb->mark | markinfo->mark;
61 mark_tg(struct sk_buff *skb, const struct xt_target_param *par)
63 const struct xt_mark_tginfo2 *info = par->targinfo;
65 skb->mark = (skb->mark & ~info->mask) ^ info->mark;
70 mark_tg_check_v0(const char *tablename, const void *entry,
71 const struct xt_target *target, void *targinfo,
72 unsigned int hook_mask)
74 const struct xt_mark_target_info *markinfo = targinfo;
76 if (markinfo->mark > 0xffffffff) {
77 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
84 mark_tg_check_v1(const char *tablename, const void *entry,
85 const struct xt_target *target, void *targinfo,
86 unsigned int hook_mask)
88 const struct xt_mark_target_info_v1 *markinfo = targinfo;
90 if (markinfo->mode != XT_MARK_SET
91 && markinfo->mode != XT_MARK_AND
92 && markinfo->mode != XT_MARK_OR) {
93 printk(KERN_WARNING "MARK: unknown mode %u\n",
97 if (markinfo->mark > 0xffffffff) {
98 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
105 struct compat_xt_mark_target_info {
109 static void mark_tg_compat_from_user_v0(void *dst, void *src)
111 const struct compat_xt_mark_target_info *cm = src;
112 struct xt_mark_target_info m = {
115 memcpy(dst, &m, sizeof(m));
118 static int mark_tg_compat_to_user_v0(void __user *dst, void *src)
120 const struct xt_mark_target_info *m = src;
121 struct compat_xt_mark_target_info cm = {
124 return copy_to_user(dst, &cm, sizeof(cm)) ? -EFAULT : 0;
127 struct compat_xt_mark_target_info_v1 {
134 static void mark_tg_compat_from_user_v1(void *dst, void *src)
136 const struct compat_xt_mark_target_info_v1 *cm = src;
137 struct xt_mark_target_info_v1 m = {
141 memcpy(dst, &m, sizeof(m));
144 static int mark_tg_compat_to_user_v1(void __user *dst, void *src)
146 const struct xt_mark_target_info_v1 *m = src;
147 struct compat_xt_mark_target_info_v1 cm = {
151 return copy_to_user(dst, &cm, sizeof(cm)) ? -EFAULT : 0;
153 #endif /* CONFIG_COMPAT */
155 static struct xt_target mark_tg_reg[] __read_mostly = {
158 .family = NFPROTO_IPV4,
160 .checkentry = mark_tg_check_v0,
161 .target = mark_tg_v0,
162 .targetsize = sizeof(struct xt_mark_target_info),
164 .compatsize = sizeof(struct compat_xt_mark_target_info),
165 .compat_from_user = mark_tg_compat_from_user_v0,
166 .compat_to_user = mark_tg_compat_to_user_v0,
173 .family = NFPROTO_IPV4,
175 .checkentry = mark_tg_check_v1,
176 .target = mark_tg_v1,
177 .targetsize = sizeof(struct xt_mark_target_info_v1),
179 .compatsize = sizeof(struct compat_xt_mark_target_info_v1),
180 .compat_from_user = mark_tg_compat_from_user_v1,
181 .compat_to_user = mark_tg_compat_to_user_v1,
188 .family = NFPROTO_IPV6,
190 .checkentry = mark_tg_check_v0,
191 .target = mark_tg_v0,
192 .targetsize = sizeof(struct xt_mark_target_info),
194 .compatsize = sizeof(struct compat_xt_mark_target_info),
195 .compat_from_user = mark_tg_compat_from_user_v0,
196 .compat_to_user = mark_tg_compat_to_user_v0,
203 .family = NFPROTO_IPV6,
205 .checkentry = mark_tg_check_v1,
206 .target = mark_tg_v1,
207 .targetsize = sizeof(struct xt_mark_target_info_v1),
209 .compatsize = sizeof(struct compat_xt_mark_target_info_v1),
210 .compat_from_user = mark_tg_compat_from_user_v1,
211 .compat_to_user = mark_tg_compat_to_user_v1,
219 .family = NFPROTO_UNSPEC,
221 .targetsize = sizeof(struct xt_mark_tginfo2),
226 static int __init mark_tg_init(void)
228 return xt_register_targets(mark_tg_reg, ARRAY_SIZE(mark_tg_reg));
231 static void __exit mark_tg_exit(void)
233 xt_unregister_targets(mark_tg_reg, ARRAY_SIZE(mark_tg_reg));
236 module_init(mark_tg_init);
237 module_exit(mark_tg_exit);