11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * 802_3 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Author: 51da177e4SLinus Torvalds * Chris Vitale csv@bluetail.com 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * May 2003 81da177e4SLinus Torvalds * 91da177e4SLinus Torvalds */ 101da177e4SLinus Torvalds 111da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebtables.h> 121da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebt_802_3.h> 131da177e4SLinus Torvalds #include <linux/module.h> 141da177e4SLinus Torvalds 151da177e4SLinus Torvalds static int ebt_filter_802_3(const struct sk_buff *skb, const struct net_device *in, 161da177e4SLinus Torvalds const struct net_device *out, const void *data, unsigned int datalen) 171da177e4SLinus Torvalds { 181da177e4SLinus Torvalds struct ebt_802_3_info *info = (struct ebt_802_3_info *)data; 191da177e4SLinus Torvalds struct ebt_802_3_hdr *hdr = ebt_802_3_hdr(skb); 2047c183faSAl Viro __be16 type = hdr->llc.ui.ctrl & IS_UI ? hdr->llc.ui.type : hdr->llc.ni.type; 211da177e4SLinus Torvalds 221da177e4SLinus Torvalds if (info->bitmask & EBT_802_3_SAP) { 231da177e4SLinus Torvalds if (FWINV(info->sap != hdr->llc.ui.ssap, EBT_802_3_SAP)) 241da177e4SLinus Torvalds return EBT_NOMATCH; 251da177e4SLinus Torvalds if (FWINV(info->sap != hdr->llc.ui.dsap, EBT_802_3_SAP)) 261da177e4SLinus Torvalds return EBT_NOMATCH; 271da177e4SLinus Torvalds } 281da177e4SLinus Torvalds 291da177e4SLinus Torvalds if (info->bitmask & EBT_802_3_TYPE) { 301da177e4SLinus Torvalds if (!(hdr->llc.ui.dsap == CHECK_TYPE && hdr->llc.ui.ssap == CHECK_TYPE)) 311da177e4SLinus Torvalds return EBT_NOMATCH; 321da177e4SLinus Torvalds if (FWINV(info->type != type, EBT_802_3_TYPE)) 331da177e4SLinus Torvalds return EBT_NOMATCH; 341da177e4SLinus Torvalds } 351da177e4SLinus Torvalds 361da177e4SLinus Torvalds return EBT_MATCH; 371da177e4SLinus Torvalds } 381da177e4SLinus Torvalds 391da177e4SLinus Torvalds static struct ebt_match filter_802_3; 401da177e4SLinus Torvalds static int ebt_802_3_check(const char *tablename, unsigned int hookmask, 411da177e4SLinus Torvalds const struct ebt_entry *e, void *data, unsigned int datalen) 421da177e4SLinus Torvalds { 431da177e4SLinus Torvalds struct ebt_802_3_info *info = (struct ebt_802_3_info *)data; 441da177e4SLinus Torvalds 451da177e4SLinus Torvalds if (datalen < sizeof(struct ebt_802_3_info)) 461da177e4SLinus Torvalds return -EINVAL; 471da177e4SLinus Torvalds if (info->bitmask & ~EBT_802_3_MASK || info->invflags & ~EBT_802_3_MASK) 481da177e4SLinus Torvalds return -EINVAL; 491da177e4SLinus Torvalds 501da177e4SLinus Torvalds return 0; 511da177e4SLinus Torvalds } 521da177e4SLinus Torvalds 531da177e4SLinus Torvalds static struct ebt_match filter_802_3 = 541da177e4SLinus Torvalds { 551da177e4SLinus Torvalds .name = EBT_802_3_MATCH, 561da177e4SLinus Torvalds .match = ebt_filter_802_3, 571da177e4SLinus Torvalds .check = ebt_802_3_check, 581da177e4SLinus Torvalds .me = THIS_MODULE, 591da177e4SLinus Torvalds }; 601da177e4SLinus Torvalds 6165b4b4e8SAndrew Morton static int __init ebt_802_3_init(void) 621da177e4SLinus Torvalds { 631da177e4SLinus Torvalds return ebt_register_match(&filter_802_3); 641da177e4SLinus Torvalds } 651da177e4SLinus Torvalds 6665b4b4e8SAndrew Morton static void __exit ebt_802_3_fini(void) 671da177e4SLinus Torvalds { 681da177e4SLinus Torvalds ebt_unregister_match(&filter_802_3); 691da177e4SLinus Torvalds } 701da177e4SLinus Torvalds 7165b4b4e8SAndrew Morton module_init(ebt_802_3_init); 7265b4b4e8SAndrew Morton module_exit(ebt_802_3_fini); 731da177e4SLinus Torvalds MODULE_LICENSE("GPL"); 74