1/* $NetBSD: pfil.h,v 1.33 2017/01/16 09:28:40 ryo Exp $ */ 2 3/* 4 * Copyright (c) 1996 Matthew R. Green 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 17 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 18 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 19 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 20 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 21 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 22 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED 23 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 24 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26 * SUCH DAMAGE. 27 */ 28 29#ifndef _NET_PFIL_H_ 30#define _NET_PFIL_H_ 31 32#include <sys/queue.h> 33 34struct mbuf; 35struct ifnet; 36struct ifaddr; 37 38/* 39 * The packet filter hooks are designed for anything to call them to 40 * possibly intercept the packet. 41 */ 42typedef int (*pfil_func_t)(void *, struct mbuf **, struct ifnet *, int); 43typedef void (*pfil_ifunc_t)(void *, unsigned long, void *); 44 45#define PFIL_IN 0x00000001 46#define PFIL_OUT 0x00000002 47#define PFIL_ALL (PFIL_IN|PFIL_OUT) 48#define PFIL_IFADDR 0x00000008 49#define PFIL_IFNET 0x00000010 50 51/* events notified by PFIL_IFNET */ 52#define PFIL_IFNET_ATTACH 0 53#define PFIL_IFNET_DETACH 1 54 55#define PFIL_TYPE_AF 1 /* key is AF_* type */ 56#define PFIL_TYPE_IFNET 2 /* key is ifnet or ifaddr pointer */ 57 58typedef struct pfil_head pfil_head_t; 59 60#ifdef _KERNEL 61 62void pfil_init(void); 63int pfil_run_hooks(pfil_head_t *, struct mbuf **, struct ifnet *, int); 64void pfil_run_addrhooks(pfil_head_t *, unsigned long, struct ifaddr *); 65void pfil_run_ifhooks(pfil_head_t *, unsigned long, struct ifnet *); 66 67int pfil_add_hook(pfil_func_t, void *, int, pfil_head_t *); 68int pfil_remove_hook(pfil_func_t, void *, int, pfil_head_t *); 69 70int pfil_add_ihook(pfil_ifunc_t, void *, int, pfil_head_t *); 71int pfil_remove_ihook(pfil_ifunc_t, void *, int, pfil_head_t *); 72 73pfil_head_t * pfil_head_create(int, void *); 74void pfil_head_destroy(pfil_head_t *); 75pfil_head_t * pfil_head_get(int, void *); 76 77/* Packet filtering hook for interfaces (in sys/net/if.c module). */ 78extern pfil_head_t *if_pfil; 79 80#endif /* _KERNEL */ 81 82#endif /* !_NET_PFIL_H_ */ 83