/* $NetBSD: pfil.c,v 1.2 1996/10/05 23:41:53 mrg Exp $ */ /* * Copyright (c) 1996 Matthew R. Green * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by Matthew R. Green for * the NetBSD Project. * 4. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #include #include #include #include #include #include #include #include #include #include typedef LIST_HEAD(, packet_filter_hook) pfil_list_t; pfil_list_t pfil_in_list; pfil_list_t pfil_out_list; pfil_list_t pfil_bad_list; static int done_pfil_init; void pfil_init __P((void)); void pfil_list_add(pfil_list_t *, int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)), int); void pfil_list_remove(struct packet_filter_hook *, int (*) __P((void *, int, struct ifnet *, int, struct mbuf **))); void pfil_init() { LIST_INIT(&pfil_in_list); LIST_INIT(&pfil_out_list); LIST_INIT(&pfil_bad_list); done_pfil_init = 1; } /* * pfil_add_hook() adds a function to the packet filter hook. the * flags are: * PFIL_IN call me on incoming packets * PFIL_OUT call me on outgoing packets * PFIL_BAD call me when rejecting a packet (that was * not already reject by in/out filters). * PFIL_ALL call me on all of the above * PFIL_WAITOK OK to call malloc with M_WAITOK. */ void pfil_add_hook(func, flags) int (*func) __P((void *, int, struct ifnet *, int, struct mbuf **)); int flags; { if (done_pfil_init == 0) pfil_init(); if (flags & PFIL_IN) pfil_list_add(&pfil_in_list, func, flags); if (flags & PFIL_OUT) pfil_list_add(&pfil_out_list, func, flags); if (flags & PFIL_BAD) pfil_list_add(&pfil_bad_list, func, flags); } void pfil_list_add(list, func, flags) pfil_list_t *list; int (*func) __P((void *, int, struct ifnet *, int, struct mbuf **)); int flags; { struct packet_filter_hook *pfh; pfh = (struct packet_filter_hook *)malloc(sizeof(*pfh), M_IFADDR, flags & PFIL_WAITOK ? M_WAITOK : M_NOWAIT); if (pfh == NULL) panic("no memory for packet filter hook"); pfh->pfil_func = func; LIST_INSERT_HEAD(list, pfh, pfil_link); } /* * pfil_remove_hook removes a specific function from the packet filter * hook list. */ void pfil_remove_hook(func, flags) int (*func) __P((void *, int, struct ifnet *, int, struct mbuf **)); int flags; { if (done_pfil_init == 0) pfil_init(); if (flags & PFIL_IN) pfil_list_remove(pfil_in_list.lh_first, func); if (flags & PFIL_OUT) pfil_list_remove(pfil_out_list.lh_first, func); if (flags & PFIL_BAD) pfil_list_remove(pfil_bad_list.lh_first, func); } /* * pfil_list_remove is an internal function that takes a function off the * specified list. */ void pfil_list_remove(list, func) struct packet_filter_hook *list; int (*func) __P((void *, int, struct ifnet *, int, struct mbuf **)); { struct packet_filter_hook *pfh; for (pfh = list; pfh; pfh = pfh->pfil_link.le_next) if (pfh->pfil_func == func) { LIST_REMOVE(pfh, pfil_link); free(pfh, M_IFADDR); return; } printf("pfil_list_remove: no function on list\n"); #ifdef DIAGNOSTIC panic("pfil_list_remove"); #endif } struct packet_filter_hook * pfil_hook_get(flag) int flag; { if (done_pfil_init) switch (flag) { case PFIL_IN: return (pfil_in_list.lh_first); case PFIL_OUT: return (pfil_out_list.lh_first); case PFIL_BAD: return (pfil_bad_list.lh_first); } return NULL; }