11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * 802_3 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Author: 51da177e4SLinus Torvalds * Chris Vitale csv@bluetail.com 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * May 2003 81da177e4SLinus Torvalds * 91da177e4SLinus Torvalds */ 1018219d3fSJan Engelhardt #include <linux/module.h> 1118219d3fSJan Engelhardt #include <linux/netfilter/x_tables.h> 121da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebtables.h> 131da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebt_802_3.h> 141da177e4SLinus Torvalds 158cc784eeSJan Engelhardt static bool ebt_filter_802_3(const struct sk_buff *skb, 168cc784eeSJan Engelhardt const struct net_device *in, 171da177e4SLinus Torvalds const struct net_device *out, const void *data, unsigned int datalen) 181da177e4SLinus Torvalds { 19abfdf1c4SJan Engelhardt const struct ebt_802_3_info *info = data; 20abfdf1c4SJan Engelhardt const struct ebt_802_3_hdr *hdr = ebt_802_3_hdr(skb); 2147c183faSAl Viro __be16 type = hdr->llc.ui.ctrl & IS_UI ? hdr->llc.ui.type : hdr->llc.ni.type; 221da177e4SLinus Torvalds 231da177e4SLinus Torvalds if (info->bitmask & EBT_802_3_SAP) { 241da177e4SLinus Torvalds if (FWINV(info->sap != hdr->llc.ui.ssap, EBT_802_3_SAP)) 258cc784eeSJan Engelhardt return false; 261da177e4SLinus Torvalds if (FWINV(info->sap != hdr->llc.ui.dsap, EBT_802_3_SAP)) 278cc784eeSJan Engelhardt return false; 281da177e4SLinus Torvalds } 291da177e4SLinus Torvalds 301da177e4SLinus Torvalds if (info->bitmask & EBT_802_3_TYPE) { 311da177e4SLinus Torvalds if (!(hdr->llc.ui.dsap == CHECK_TYPE && hdr->llc.ui.ssap == CHECK_TYPE)) 328cc784eeSJan Engelhardt return false; 331da177e4SLinus Torvalds if (FWINV(info->type != type, EBT_802_3_TYPE)) 348cc784eeSJan Engelhardt return false; 351da177e4SLinus Torvalds } 361da177e4SLinus Torvalds 378cc784eeSJan Engelhardt return true; 381da177e4SLinus Torvalds } 391da177e4SLinus Torvalds 401da177e4SLinus Torvalds static struct ebt_match filter_802_3; 4119eda879SJan Engelhardt static bool ebt_802_3_check(const char *tablename, unsigned int hookmask, 421da177e4SLinus Torvalds const struct ebt_entry *e, void *data, unsigned int datalen) 431da177e4SLinus Torvalds { 44abfdf1c4SJan Engelhardt const struct ebt_802_3_info *info = data; 451da177e4SLinus Torvalds 461da177e4SLinus Torvalds if (info->bitmask & ~EBT_802_3_MASK || info->invflags & ~EBT_802_3_MASK) 4719eda879SJan Engelhardt return false; 481da177e4SLinus Torvalds 4919eda879SJan Engelhardt return true; 501da177e4SLinus Torvalds } 511da177e4SLinus Torvalds 5230083c95SJan Engelhardt static struct ebt_match filter_802_3 __read_mostly = { 531da177e4SLinus Torvalds .name = EBT_802_3_MATCH, 541da177e4SLinus Torvalds .match = ebt_filter_802_3, 551da177e4SLinus Torvalds .check = ebt_802_3_check, 5618219d3fSJan Engelhardt .matchsize = XT_ALIGN(sizeof(struct ebt_802_3_info)), 571da177e4SLinus Torvalds .me = THIS_MODULE, 581da177e4SLinus Torvalds }; 591da177e4SLinus Torvalds 6065b4b4e8SAndrew Morton static int __init ebt_802_3_init(void) 611da177e4SLinus Torvalds { 621da177e4SLinus Torvalds return ebt_register_match(&filter_802_3); 631da177e4SLinus Torvalds } 641da177e4SLinus Torvalds 6565b4b4e8SAndrew Morton static void __exit ebt_802_3_fini(void) 661da177e4SLinus Torvalds { 671da177e4SLinus Torvalds ebt_unregister_match(&filter_802_3); 681da177e4SLinus Torvalds } 691da177e4SLinus Torvalds 7065b4b4e8SAndrew Morton module_init(ebt_802_3_init); 7165b4b4e8SAndrew Morton module_exit(ebt_802_3_fini); 72f776c4cdSJan Engelhardt MODULE_DESCRIPTION("Ebtables: DSAP/SSAP field and SNAP type matching"); 731da177e4SLinus Torvalds MODULE_LICENSE("GPL"); 74