From mboxrd@z Thu Jan 1 00:00:00 1970 From: KOVACS Krisztian Subject: [iptables PATCH 2/2] [TPROXY] Add userspace component of the socket match Date: Wed, 08 Oct 2008 09:15:41 +0200 Message-ID: <20081008071541.9224.68351.stgit@nessa.odu> References: <20081008071541.9224.66180.stgit@nessa.odu> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7BIT Cc: netfilter-devel@vger.kernel.org To: Patrick McHardy Return-path: Received: from balu.sch.bme.hu ([152.66.208.40]:56505 "EHLO balu.sch.bme.hu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752257AbYJHHTp (ORCPT ); Wed, 8 Oct 2008 03:19:45 -0400 Received: from [192.168.1.103] ([89.132.101.55]) by balu.sch.bme.hu (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTPSA id <0K8E008GXSBS3CF0@balu.sch.bme.hu> for netfilter-devel@vger.kernel.org; Wed, 08 Oct 2008 09:19:04 +0200 (CEST) In-reply-to: <20081008071541.9224.66180.stgit@nessa.odu> Sender: netfilter-devel-owner@vger.kernel.org List-ID: From: Balazs Scheidler --- extensions/libxt_socket.c | 39 +++++++++++++++++++++++++++++++++++++++ extensions/libxt_socket.man | 2 ++ 2 files changed, 41 insertions(+), 0 deletions(-) create mode 100644 extensions/libxt_socket.c create mode 100644 extensions/libxt_socket.man diff --git a/extensions/libxt_socket.c b/extensions/libxt_socket.c new file mode 100644 index 0000000..213bb9c --- /dev/null +++ b/extensions/libxt_socket.c @@ -0,0 +1,39 @@ +/* + * Shared library add-on to iptables to add early socket matching support. + * + * Copyright (C) 2007 BalaBit IT Ltd. + */ +#include +#include +#include + +static void socket_help(void) +{ + printf("socket v%s has no options\n\n", XTABLES_VERSION); +} + +static int socket_parse(int c, char **argv, int invert, unsigned int *flags, + const void *entry, struct xt_entry_match **match) +{ + return 0; +} + +static void socket_check(unsigned int flags) +{ +} + +static struct xtables_match socket_reg = { + .name = "socket", + .version = XTABLES_VERSION, + .family = AF_INET, + .size = XT_ALIGN(0), + .userspacesize = XT_ALIGN(0), + .parse = socket_parse, + .final_check = socket_check, + .help = socket_help, +}; + +void _init(void) +{ + xtables_register_match(&socket_reg); +} diff --git a/extensions/libxt_socket.man b/extensions/libxt_socket.man new file mode 100644 index 0000000..50c8854 --- /dev/null +++ b/extensions/libxt_socket.man @@ -0,0 +1,2 @@ +This matches if an open socket can be found by doing a socket lookup on the +packet.