cc01dcbd26
nf_nat_setup_info gets the hook number and translates that to the manip type to perform. This is a relict from the time when one manip per hook could exist, the exact hook number doesn't matter anymore, its converted to the manip type. Most callers already know what kind of NAT they want to perform, so pass the maniptype in directly. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
98 lines
2.4 KiB
C
98 lines
2.4 KiB
C
#ifndef _NF_NAT_H
|
|
#define _NF_NAT_H
|
|
#include <linux/netfilter_ipv4.h>
|
|
#include <net/netfilter/nf_conntrack_tuple.h>
|
|
|
|
#define NF_NAT_MAPPING_TYPE_MAX_NAMELEN 16
|
|
|
|
enum nf_nat_manip_type
|
|
{
|
|
IP_NAT_MANIP_SRC,
|
|
IP_NAT_MANIP_DST
|
|
};
|
|
|
|
/* SRC manip occurs POST_ROUTING or LOCAL_IN */
|
|
#define HOOK2MANIP(hooknum) ((hooknum) != NF_INET_POST_ROUTING && \
|
|
(hooknum) != NF_INET_LOCAL_IN)
|
|
|
|
#define IP_NAT_RANGE_MAP_IPS 1
|
|
#define IP_NAT_RANGE_PROTO_SPECIFIED 2
|
|
#define IP_NAT_RANGE_PROTO_RANDOM 4
|
|
|
|
/* NAT sequence number modifications */
|
|
struct nf_nat_seq {
|
|
/* position of the last TCP sequence number modification (if any) */
|
|
u_int32_t correction_pos;
|
|
|
|
/* sequence number offset before and after last modification */
|
|
int16_t offset_before, offset_after;
|
|
};
|
|
|
|
/* Single range specification. */
|
|
struct nf_nat_range
|
|
{
|
|
/* Set to OR of flags above. */
|
|
unsigned int flags;
|
|
|
|
/* Inclusive: network order. */
|
|
__be32 min_ip, max_ip;
|
|
|
|
/* Inclusive: network order */
|
|
union nf_conntrack_man_proto min, max;
|
|
};
|
|
|
|
/* For backwards compat: don't use in modern code. */
|
|
struct nf_nat_multi_range_compat
|
|
{
|
|
unsigned int rangesize; /* Must be 1. */
|
|
|
|
/* hangs off end. */
|
|
struct nf_nat_range range[1];
|
|
};
|
|
|
|
#ifdef __KERNEL__
|
|
#include <linux/list.h>
|
|
#include <linux/netfilter/nf_conntrack_pptp.h>
|
|
#include <net/netfilter/nf_conntrack_extend.h>
|
|
|
|
/* per conntrack: nat application helper private data */
|
|
union nf_conntrack_nat_help
|
|
{
|
|
/* insert nat helper private data here */
|
|
struct nf_nat_pptp nat_pptp_info;
|
|
};
|
|
|
|
struct nf_conn;
|
|
|
|
/* The structure embedded in the conntrack structure. */
|
|
struct nf_conn_nat
|
|
{
|
|
struct hlist_node bysource;
|
|
struct nf_nat_seq seq[IP_CT_DIR_MAX];
|
|
struct nf_conn *ct;
|
|
union nf_conntrack_nat_help help;
|
|
#if defined(CONFIG_IP_NF_TARGET_MASQUERADE) || \
|
|
defined(CONFIG_IP_NF_TARGET_MASQUERADE_MODULE)
|
|
int masq_index;
|
|
#endif
|
|
};
|
|
|
|
/* Set up the info structure to map into this range. */
|
|
extern unsigned int nf_nat_setup_info(struct nf_conn *ct,
|
|
const struct nf_nat_range *range,
|
|
enum nf_nat_manip_type maniptype);
|
|
|
|
/* Is this tuple already taken? (not by us)*/
|
|
extern int nf_nat_used_tuple(const struct nf_conntrack_tuple *tuple,
|
|
const struct nf_conn *ignored_conntrack);
|
|
|
|
static inline struct nf_conn_nat *nfct_nat(const struct nf_conn *ct)
|
|
{
|
|
return nf_ct_ext_find(ct, NF_CT_EXT_NAT);
|
|
}
|
|
|
|
#else /* !__KERNEL__: iptables wants this to compile. */
|
|
#define nf_nat_multi_range nf_nat_multi_range_compat
|
|
#endif /*__KERNEL__*/
|
|
#endif
|