libipt_MASQUERADE.c 3.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154
  1. #include <stdio.h>
  2. #include <netdb.h>
  3. #include <string.h>
  4. #include <stdlib.h>
  5. #include <getopt.h>
  6. #include <xtables.h>
  7. #include <limits.h> /* INT_MAX in ip_tables.h */
  8. #include <linux/netfilter_ipv4/ip_tables.h>
  9. #include <linux/netfilter/nf_nat.h>
  10. enum {
  11. O_TO_PORTS = 0,
  12. O_RANDOM,
  13. };
  14. static void MASQUERADE_help(void)
  15. {
  16. printf(
  17. "MASQUERADE target options:\n"
  18. " --to-ports <port>[-<port>]\n"
  19. " Port (range) to map to.\n"
  20. " --random\n"
  21. " Randomize source port.\n");
  22. }
  23. static const struct xt_option_entry MASQUERADE_opts[] = {
  24. {.name = "to-ports", .id = O_TO_PORTS, .type = XTTYPE_STRING},
  25. {.name = "random", .id = O_RANDOM, .type = XTTYPE_NONE},
  26. XTOPT_TABLEEND,
  27. };
  28. static void MASQUERADE_init(struct xt_entry_target *t)
  29. {
  30. struct nf_nat_ipv4_multi_range_compat *mr = (struct nf_nat_ipv4_multi_range_compat *)t->data;
  31. /* Actually, it's 0, but it's ignored at the moment. */
  32. mr->rangesize = 1;
  33. }
  34. /* Parses ports */
  35. static void
  36. parse_ports(const char *arg, struct nf_nat_ipv4_multi_range_compat *mr)
  37. {
  38. char *end;
  39. unsigned int port, maxport;
  40. mr->range[0].flags |= NF_NAT_RANGE_PROTO_SPECIFIED;
  41. if (!xtables_strtoui(arg, &end, &port, 0, UINT16_MAX))
  42. xtables_param_act(XTF_BAD_VALUE, "MASQUERADE", "--to-ports", arg);
  43. switch (*end) {
  44. case '\0':
  45. mr->range[0].min.tcp.port
  46. = mr->range[0].max.tcp.port
  47. = htons(port);
  48. return;
  49. case '-':
  50. if (!xtables_strtoui(end + 1, NULL, &maxport, 0, UINT16_MAX))
  51. break;
  52. if (maxport < port)
  53. break;
  54. mr->range[0].min.tcp.port = htons(port);
  55. mr->range[0].max.tcp.port = htons(maxport);
  56. return;
  57. default:
  58. break;
  59. }
  60. xtables_param_act(XTF_BAD_VALUE, "MASQUERADE", "--to-ports", arg);
  61. }
  62. static void MASQUERADE_parse(struct xt_option_call *cb)
  63. {
  64. const struct ipt_entry *entry = cb->xt_entry;
  65. int portok;
  66. struct nf_nat_ipv4_multi_range_compat *mr = cb->data;
  67. if (entry->ip.proto == IPPROTO_TCP
  68. || entry->ip.proto == IPPROTO_UDP
  69. || entry->ip.proto == IPPROTO_SCTP
  70. || entry->ip.proto == IPPROTO_DCCP
  71. || entry->ip.proto == IPPROTO_ICMP)
  72. portok = 1;
  73. else
  74. portok = 0;
  75. xtables_option_parse(cb);
  76. switch (cb->entry->id) {
  77. case O_TO_PORTS:
  78. if (!portok)
  79. xtables_error(PARAMETER_PROBLEM,
  80. "Need TCP, UDP, SCTP or DCCP with port specification");
  81. parse_ports(cb->arg, mr);
  82. break;
  83. case O_RANDOM:
  84. mr->range[0].flags |= NF_NAT_RANGE_PROTO_RANDOM;
  85. break;
  86. }
  87. }
  88. static void
  89. MASQUERADE_print(const void *ip, const struct xt_entry_target *target,
  90. int numeric)
  91. {
  92. const struct nf_nat_ipv4_multi_range_compat *mr = (const void *)target->data;
  93. const struct nf_nat_ipv4_range *r = &mr->range[0];
  94. if (r->flags & NF_NAT_RANGE_PROTO_SPECIFIED) {
  95. printf(" masq ports: ");
  96. printf("%hu", ntohs(r->min.tcp.port));
  97. if (r->max.tcp.port != r->min.tcp.port)
  98. printf("-%hu", ntohs(r->max.tcp.port));
  99. }
  100. if (r->flags & NF_NAT_RANGE_PROTO_RANDOM)
  101. printf(" random");
  102. }
  103. static void
  104. MASQUERADE_save(const void *ip, const struct xt_entry_target *target)
  105. {
  106. const struct nf_nat_ipv4_multi_range_compat *mr = (const void *)target->data;
  107. const struct nf_nat_ipv4_range *r = &mr->range[0];
  108. if (r->flags & NF_NAT_RANGE_PROTO_SPECIFIED) {
  109. printf(" --to-ports %hu", ntohs(r->min.tcp.port));
  110. if (r->max.tcp.port != r->min.tcp.port)
  111. printf("-%hu", ntohs(r->max.tcp.port));
  112. }
  113. if (r->flags & NF_NAT_RANGE_PROTO_RANDOM)
  114. printf(" --random");
  115. }
  116. static struct xtables_target masquerade_tg_reg = {
  117. .name = "MASQUERADE",
  118. .version = XTABLES_VERSION,
  119. .family = NFPROTO_IPV4,
  120. .size = XT_ALIGN(sizeof(struct nf_nat_ipv4_multi_range_compat)),
  121. .userspacesize = XT_ALIGN(sizeof(struct nf_nat_ipv4_multi_range_compat)),
  122. .help = MASQUERADE_help,
  123. .init = MASQUERADE_init,
  124. .x6_parse = MASQUERADE_parse,
  125. .print = MASQUERADE_print,
  126. .save = MASQUERADE_save,
  127. .x6_options = MASQUERADE_opts,
  128. };
  129. void _init(void)
  130. {
  131. xtables_register_target(&masquerade_tg_reg);
  132. }