/* * ebt_mark * * Authors: * Bart De Schuymer * * July, 2002 * */ /* The mark target can be used in any chain, * I believe adding a mangle table just for marking is total overkill. * Marking a frame doesn't really change anything in the frame anyway. */ #include #include #include #include static unsigned int ebt_mark_tg(struct sk_buff *skb, const struct net_device *in, const struct net_device *out, unsigned int hook_nr, const struct xt_target *target, const void *data) { const struct ebt_mark_t_info *info = data; int action = info->target & -16; if (action == MARK_SET_VALUE) skb->mark = info->mark; else if (action == MARK_OR_VALUE) skb->mark |= info->mark; else if (action == MARK_AND_VALUE) skb->mark &= info->mark; else skb->mark ^= info->mark; return info->target | ~EBT_VERDICT_BITS; } static bool ebt_mark_tg_check(const char *table, const void *e, const struct xt_target *target, void *data, unsigned int hookmask) { const struct ebt_mark_t_info *info = data; int tmp; tmp = info->target | ~EBT_VERDICT_BITS; if (BASE_CHAIN && tmp == EBT_RETURN) return false; CLEAR_BASE_CHAIN_BIT; if (tmp < -NUM_STANDARD_TARGETS || tmp >= 0) return false; tmp = info->target & ~EBT_VERDICT_BITS; if (tmp != MARK_SET_VALUE && tmp != MARK_OR_VALUE && tmp != MARK_AND_VALUE && tmp != MARK_XOR_VALUE) return false; return true; } static struct ebt_target mark_target __read_mostly = { .name = EBT_MARK_TARGET, .revision = 0, .family = NFPROTO_BRIDGE, .target = ebt_mark_tg, .checkentry = ebt_mark_tg_check, .targetsize = XT_ALIGN(sizeof(struct ebt_mark_t_info)), .me = THIS_MODULE, }; static int __init ebt_mark_init(void) { return ebt_register_target(&mark_target); } static void __exit ebt_mark_fini(void) { ebt_unregister_target(&mark_target); } module_init(ebt_mark_init); module_exit(ebt_mark_fini); MODULE_DESCRIPTION("Ebtables: Packet mark modification"); MODULE_LICENSE("GPL");