| 1 | |
| 2 |
|
| 3 |
|
| 4 | |
| 5 | * (C) 2002-2004 Netfilter Core Team <[email protected]>
|
| 6 |
|
| 7 |
|
| 8 | #include <linux/module.h>
|
| 9 | #include <linux/skbuff.h>
|
| 10 | #include <linux/if_arp.h>
|
| 11 | #include <linux/if_ether.h>
|
| 12 | #include <linux/etherdevice.h>
|
| 13 |
|
| 14 | #include <linux/netfilter_ipv4.h>
|
| 15 | #include <linux/netfilter_ipv6.h>
|
| 16 | #include <linux/netfilter/xt_mac.h>
|
| 17 | #include <linux/netfilter/x_tables.h>
|
| 18 |
|
| 19 | MODULE_LICENSE("GPL");
|
| 20 | MODULE_AUTHOR("Netfilter Core Team <[email protected]>");
|
| 21 | MODULE_DESCRIPTION("Xtables: MAC address match");
|
| 22 | MODULE_ALIAS("ipt_mac");
|
| 23 | MODULE_ALIAS("ip6t_mac");
|
| 24 |
|
| 25 | static bool mac_mt(const struct sk_buff *skb, struct xt_action_param *par)
|
| 26 | {
|
| 27 | const struct xt_mac_info *info = par->matchinfo;
|
| 28 | bool ret;
|
| 29 |
|
| 30 | if (skb->dev == NULL || skb->dev->type != ARPHRD_ETHER)
|
| 31 | return false;
|
| 32 | if (!skb_mac_header_was_set(skb) || skb_mac_header_len(skb) < ETH_HLEN)
|
| 33 | return false;
|
| 34 | ret = ether_addr_equal(eth_hdr(skb)->h_source, info->srcaddr);
|
| 35 | ret ^= info->invert;
|
| 36 | return ret;
|
| 37 | }
|
| 38 |
|
| 39 | static struct xt_match mac_mt_reg[] __read_mostly = {
|
| 40 | {
|
| 41 | .name = "mac",
|
| 42 | .family = NFPROTO_IPV4,
|
| 43 | .match = mac_mt,
|
| 44 | .matchsize = sizeof(struct xt_mac_info),
|
| 45 | .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| 46 | (1 << NF_INET_LOCAL_IN) |
|
| 47 | (1 << NF_INET_FORWARD),
|
| 48 | .me = THIS_MODULE,
|
| 49 | },
|
| 50 | {
|
| 51 | .name = "mac",
|
| 52 | .family = NFPROTO_IPV6,
|
| 53 | .match = mac_mt,
|
| 54 | .matchsize = sizeof(struct xt_mac_info),
|
| 55 | .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| 56 | (1 << NF_INET_LOCAL_IN) |
|
| 57 | (1 << NF_INET_FORWARD),
|
| 58 | .me = THIS_MODULE,
|
| 59 | },
|
| 60 | };
|
| 61 |
|
| 62 | static int __init mac_mt_init(void)
|
| 63 | {
|
| 64 | return xt_register_matches(mac_mt_reg, ARRAY_SIZE(mac_mt_reg));
|
| 65 | }
|
| 66 |
|
| 67 | static void __exit mac_mt_exit(void)
|
| 68 | {
|
| 69 | xt_unregister_matches(mac_mt_reg, ARRAY_SIZE(mac_mt_reg));
|
| 70 | }
|
| 71 |
|
| 72 | module_init(mac_mt_init);
|
| 73 | module_exit(mac_mt_exit);
|