1
2
3
4
5
6
7
8
9#include <linux/kernel.h>
10#include <linux/init.h>
11#include <linux/module.h>
12#include <linux/netlink.h>
13#include <linux/netfilter.h>
14#include <linux/netfilter/nf_tables.h>
15#include <net/netfilter/nf_tables.h>
16#include <net/netfilter/nf_nat.h>
17#include <net/netfilter/nft_masq.h>
18#include <net/netfilter/ipv6/nf_nat_masquerade.h>
19
20static void nft_masq_ipv6_eval(const struct nft_expr *expr,
21 struct nft_regs *regs,
22 const struct nft_pktinfo *pkt)
23{
24 struct nft_masq *priv = nft_expr_priv(expr);
25 struct nf_nat_range range;
26
27 memset(&range, 0, sizeof(range));
28 range.flags = priv->flags;
29 if (priv->sreg_proto_min) {
30 range.min_proto.all =
31 *(__be16 *)®s->data[priv->sreg_proto_min];
32 range.max_proto.all =
33 *(__be16 *)®s->data[priv->sreg_proto_max];
34 }
35 regs->verdict.code = nf_nat_masquerade_ipv6(pkt->skb, &range, pkt->out);
36}
37
38static struct nft_expr_type nft_masq_ipv6_type;
39static const struct nft_expr_ops nft_masq_ipv6_ops = {
40 .type = &nft_masq_ipv6_type,
41 .size = NFT_EXPR_SIZE(sizeof(struct nft_masq)),
42 .eval = nft_masq_ipv6_eval,
43 .init = nft_masq_init,
44 .dump = nft_masq_dump,
45 .validate = nft_masq_validate,
46};
47
48static struct nft_expr_type nft_masq_ipv6_type __read_mostly = {
49 .family = NFPROTO_IPV6,
50 .name = "masq",
51 .ops = &nft_masq_ipv6_ops,
52 .policy = nft_masq_policy,
53 .maxattr = NFTA_MASQ_MAX,
54 .owner = THIS_MODULE,
55};
56
57static int __init nft_masq_ipv6_module_init(void)
58{
59 int ret;
60
61 ret = nft_register_expr(&nft_masq_ipv6_type);
62 if (ret < 0)
63 return ret;
64
65 nf_nat_masquerade_ipv6_register_notifier();
66
67 return ret;
68}
69
70static void __exit nft_masq_ipv6_module_exit(void)
71{
72 nft_unregister_expr(&nft_masq_ipv6_type);
73 nf_nat_masquerade_ipv6_unregister_notifier();
74}
75
76module_init(nft_masq_ipv6_module_init);
77module_exit(nft_masq_ipv6_module_exit);
78
79MODULE_LICENSE("GPL");
80MODULE_AUTHOR("Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>");
81MODULE_ALIAS_NFT_AF_EXPR(AF_INET6, "masq");
82