linux/net/netfilter/xt_HMARK.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * xt_HMARK - Netfilter module to set mark by means of hashing
 *
 * (C) 2012 by Hans Schillstrom <[email protected]>
 * (C) 2012 by Pablo Neira Ayuso <[email protected]>
 */

#define pr_fmt(fmt) …

#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/icmp.h>

#include <linux/netfilter/x_tables.h>
#include <linux/netfilter/xt_HMARK.h>

#include <net/ip.h>
#if IS_ENABLED(CONFIG_NF_CONNTRACK)
#include <net/netfilter/nf_conntrack.h>
#endif
#if IS_ENABLED(CONFIG_IP6_NF_IPTABLES)
#include <net/ipv6.h>
#include <linux/netfilter_ipv6/ip6_tables.h>
#endif

MODULE_LICENSE(…) …;
MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;

struct hmark_tuple { … };

static inline __be32 hmark_addr6_mask(const __be32 *addr32, const __be32 *mask)
{ … }

static inline __be32
hmark_addr_mask(int l3num, const __be32 *addr32, const __be32 *mask)
{ … }

static inline void hmark_swap_ports(union hmark_ports *uports,
				    const struct xt_hmark_info *info)
{ … }

static int
hmark_ct_set_htuple(const struct sk_buff *skb, struct hmark_tuple *t,
		    const struct xt_hmark_info *info)
{ … }

/* This hash function is endian independent, to ensure consistent hashing if
 * the cluster is composed of big and little endian systems. */
static inline u32
hmark_hash(struct hmark_tuple *t, const struct xt_hmark_info *info)
{ … }

static void
hmark_set_tuple_ports(const struct sk_buff *skb, unsigned int nhoff,
		      struct hmark_tuple *t, const struct xt_hmark_info *info)
{ … }

#if IS_ENABLED(CONFIG_IP6_NF_IPTABLES)
static int get_inner6_hdr(const struct sk_buff *skb, int *offset)
{ … }

static int
hmark_pkt_set_htuple_ipv6(const struct sk_buff *skb, struct hmark_tuple *t,
			  const struct xt_hmark_info *info)
{ … }

static unsigned int
hmark_tg_v6(struct sk_buff *skb, const struct xt_action_param *par)
{ … }
#endif

static int get_inner_hdr(const struct sk_buff *skb, int iphsz, int *nhoff)
{ … }

static int
hmark_pkt_set_htuple_ipv4(const struct sk_buff *skb, struct hmark_tuple *t,
			  const struct xt_hmark_info *info)
{ … }

static unsigned int
hmark_tg_v4(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static int hmark_tg_check(const struct xt_tgchk_param *par)
{ … }

static struct xt_target hmark_tg_reg[] __read_mostly = …;

static int __init hmark_tg_init(void)
{ … }

static void __exit hmark_tg_exit(void)
{ … }

module_init(…) …;
module_exit(hmark_tg_exit);