linux/net/netfilter/xt_conntrack.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 *	xt_conntrack - Netfilter module to match connection tracking
 *	information. (Superset of Rusty's minimalistic state match.)
 *
 *	(C) 2001  Marc Boucher ([email protected]).
 *	(C) 2006-2012 Patrick McHardy <[email protected]>
 *	Copyright © CC Computer Consultants GmbH, 2007 - 2008
 */
#define pr_fmt(fmt) …
#include <linux/module.h>
#include <linux/skbuff.h>
#include <net/ipv6.h>
#include <linux/netfilter/x_tables.h>
#include <linux/netfilter/xt_conntrack.h>
#include <net/netfilter/nf_conntrack.h>

MODULE_LICENSE(…) …;
MODULE_AUTHOR(…) …;
MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;

static bool
conntrack_addrcmp(const union nf_inet_addr *kaddr,
                  const union nf_inet_addr *uaddr,
                  const union nf_inet_addr *umask, unsigned int l3proto)
{ … }

static inline bool
conntrack_mt_origsrc(const struct nf_conn *ct,
                     const struct xt_conntrack_mtinfo2 *info,
		     u_int8_t family)
{ … }

static inline bool
conntrack_mt_origdst(const struct nf_conn *ct,
                     const struct xt_conntrack_mtinfo2 *info,
		     u_int8_t family)
{ … }

static inline bool
conntrack_mt_replsrc(const struct nf_conn *ct,
                     const struct xt_conntrack_mtinfo2 *info,
		     u_int8_t family)
{ … }

static inline bool
conntrack_mt_repldst(const struct nf_conn *ct,
                     const struct xt_conntrack_mtinfo2 *info,
		     u_int8_t family)
{ … }

static inline bool
ct_proto_port_check(const struct xt_conntrack_mtinfo2 *info,
                    const struct nf_conn *ct)
{ … }

static inline bool
port_match(u16 min, u16 max, u16 port, bool invert)
{ … }

static inline bool
ct_proto_port_check_v3(const struct xt_conntrack_mtinfo3 *info,
		       const struct nf_conn *ct)
{ … }

static bool
conntrack_mt(const struct sk_buff *skb, struct xt_action_param *par,
             u16 state_mask, u16 status_mask)
{ … }

static bool
conntrack_mt_v1(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static bool
conntrack_mt_v2(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static bool
conntrack_mt_v3(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static int conntrack_mt_check(const struct xt_mtchk_param *par)
{ … }

static void conntrack_mt_destroy(const struct xt_mtdtor_param *par)
{ … }

static struct xt_match conntrack_mt_reg[] __read_mostly = …;

static int __init conntrack_mt_init(void)
{ … }

static void __exit conntrack_mt_exit(void)
{ … }

module_init(…) …;
module_exit(conntrack_mt_exit);