git://bbs.cooldavid.org / net-next-2.6.git / blame
| Commit | Line | Data |
|---|---|---|
| 9ad2d745 KK |
1 | /* |
| 2 | * Transparent proxy support for Linux/iptables | |
| 3 | * | |
| 4 | * Copyright (c) 2006-2007 BalaBit IT Ltd. | |
| 5 | * Author: Balazs Scheidler, Krisztian Kovacs | |
| 6 | * | |
| 7 | * This program is free software; you can redistribute it and/or modify | |
| 8 | * it under the terms of the GNU General Public License version 2 as | |
| 9 | * published by the Free Software Foundation. | |
| 10 | * | |
| 11 | */ | |
| 12 | ||
| 13 | #include <linux/version.h> | |
| 14 | #include <linux/module.h> | |
| 15 | ||
| 16 | #include <linux/net.h> | |
| 17 | #include <linux/if.h> | |
| 18 | #include <linux/netdevice.h> | |
| 19 | #include <net/udp.h> | |
| 20 | #include <net/netfilter/nf_tproxy_core.h> | |
| 21 | ||
| 22 | struct sock * | |
| 23 | nf_tproxy_get_sock_v4(struct net *net, const u8 protocol, | |
| 24 | const __be32 saddr, const __be32 daddr, | |
| 25 | const __be16 sport, const __be16 dport, | |
| 26 | const struct net_device *in, bool listening_only) | |
| 27 | { | |
| 28 | struct sock *sk; | |
| 29 | ||
| 30 | /* look up socket */ | |
| 31 | switch (protocol) { | |
| 32 | case IPPROTO_TCP: | |
| 33 | if (listening_only) | |
| 34 | sk = __inet_lookup_listener(net, &tcp_hashinfo, | |
| 35 | daddr, ntohs(dport), | |
| 36 | in->ifindex); | |
| 37 | else | |
| 38 | sk = __inet_lookup(net, &tcp_hashinfo, | |
| 39 | saddr, sport, daddr, dport, | |
| 40 | in->ifindex); | |
| 41 | break; | |
| 42 | case IPPROTO_UDP: | |
| 43 | sk = udp4_lib_lookup(net, saddr, sport, daddr, dport, | |
| 44 | in->ifindex); | |
| 45 | break; | |
| 46 | default: | |
| 47 | WARN_ON(1); | |
| 48 | sk = NULL; | |
| 49 | } | |
| 50 | ||
| 51 | pr_debug("tproxy socket lookup: proto %u %08x:%u -> %08x:%u, listener only: %d, sock %p\n", | |
| 52 | protocol, ntohl(saddr), ntohs(sport), ntohl(daddr), ntohs(dport), listening_only, sk); | |
| 53 | ||
| 54 | return sk; | |
| 55 | } | |
| 56 | EXPORT_SYMBOL_GPL(nf_tproxy_get_sock_v4); | |
| 57 | ||
| 58 | static void | |
| 59 | nf_tproxy_destructor(struct sk_buff *skb) | |
| 60 | { | |
| 61 | struct sock *sk = skb->sk; | |
| 62 | ||
| 63 | skb->sk = NULL; | |
| 64 | skb->destructor = NULL; | |
| 65 | ||
| 66 | if (sk) | |
| 67 | nf_tproxy_put_sock(sk); | |
| 68 | } | |
| 69 | ||
| 70 | /* consumes sk */ | |
| 71 | int | |
| 72 | nf_tproxy_assign_sock(struct sk_buff *skb, struct sock *sk) | |
| 73 | { | |
| 74 | if (inet_sk(sk)->transparent) { | |
| 75 | skb->sk = sk; | |
| 76 | skb->destructor = nf_tproxy_destructor; | |
| 77 | return 1; | |
| 78 | } else | |
| 79 | nf_tproxy_put_sock(sk); | |
| 80 | ||
| 81 | return 0; | |
| 82 | } | |
| 83 | EXPORT_SYMBOL_GPL(nf_tproxy_assign_sock); | |
| 84 | ||
| 85 | static int __init nf_tproxy_init(void) | |
| 86 | { | |
| 87 | pr_info("NF_TPROXY: Transparent proxy support initialized, version 4.1.0\n"); | |
| 88 | pr_info("NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.\n"); | |
| 89 | return 0; | |
| 90 | } | |
| 91 | ||
| 92 | module_init(nf_tproxy_init); | |
| 93 | ||
| 94 | MODULE_LICENSE("GPL"); | |
| 95 | MODULE_AUTHOR("Krisztian Kovacs"); | |
| 96 | MODULE_DESCRIPTION("Transparent proxy support core routines"); |