LXR linux/net/ipv6/netfilter/ip6table

   1/*
   2 * IPv6 raw table, a port of the IPv4 raw table to IPv6
   3 *
   4 * Copyright (C) 2003 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
   5 */
   6#include <linux/module.h>
   7#include <linux/netfilter_ipv6/ip6_tables.h>
   8#include <linux/slab.h>
   9
  10#define RAW_VALID_HOOKS ((1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_OUT))
  11
  12static const struct xt_table packet_raw = {
  13        .name = "raw",
  14        .valid_hooks = RAW_VALID_HOOKS,
  15        .me = THIS_MODULE,
  16        .af = NFPROTO_IPV6,
  17        .priority = NF_IP6_PRI_RAW,
  18};
  19
  20/* The work comes in here from netfilter.c. */
  21static unsigned int
  22ip6table_raw_hook(unsigned int hook, struct sk_buff *skb,
  23                  const struct net_device *in, const struct net_device *out,
  24                  int (*okfn)(struct sk_buff *))
  25{
  26        const struct net *net = dev_net((in != NULL) ? in : out);
  27
  28        return ip6t_do_table(skb, hook, in, out, net->ipv6.ip6table_raw);
  29}
  30
  31static struct nf_hook_ops *rawtable_ops __read_mostly;
  32
  33static int __net_init ip6table_raw_net_init(struct net *net)
  34{
  35        struct ip6t_replace *repl;
  36
  37        repl = ip6t_alloc_initial_table(&packet_raw);
  38        if (repl == NULL)
  39                return -ENOMEM;
  40        net->ipv6.ip6table_raw =
  41                ip6t_register_table(net, &packet_raw, repl);
  42        kfree(repl);
  43        return PTR_RET(net->ipv6.ip6table_raw);
  44}
  45
  46static void __net_exit ip6table_raw_net_exit(struct net *net)
  47{
  48        ip6t_unregister_table(net, net->ipv6.ip6table_raw);
  49}
  50
  51static struct pernet_operations ip6table_raw_net_ops = {
  52        .init = ip6table_raw_net_init,
  53        .exit = ip6table_raw_net_exit,
  54};
  55
  56static int __init ip6table_raw_init(void)
  57{
  58        int ret;
  59
  60        ret = register_pernet_subsys(&ip6table_raw_net_ops);
  61        if (ret < 0)
  62                return ret;
  63
  64        /* Register hooks */
  65        rawtable_ops = xt_hook_link(&packet_raw, ip6table_raw_hook);
  66        if (IS_ERR(rawtable_ops)) {
  67                ret = PTR_ERR(rawtable_ops);
  68                goto cleanup_table;
  69        }
  70
  71        return ret;
  72
  73 cleanup_table:
  74        unregister_pernet_subsys(&ip6table_raw_net_ops);
  75        return ret;
  76}
  77
  78static void __exit ip6table_raw_fini(void)
  79{
  80        xt_hook_unlink(&packet_raw, rawtable_ops);
  81        unregister_pernet_subsys(&ip6table_raw_net_ops);
  82}
  83
  84module_init(ip6table_raw_init);
  85module_exit(ip6table_raw_fini);
  86MODULE_LICENSE("GPL");
  87