#define BUILD_TARGET #define MODULE_DATATYPE struct ipt_tcpmss_info #define MODULE_NAME "TCPMSS" #define __USE_GNU #include "../module_iface.h" #include #include #include #include #include #include static int parse_field(char *field, SV *value, void *myinfo, unsigned int *nfcache, struct ipt_entry *entry, int *flags) { MODULE_DATATYPE *info = (void *)(*(MODULE_ENTRYTYPE **)myinfo)->data; int val; if(!strcmp(field, "set-mss")) { if(SvIOK(value)) val = SvIV(value); else if(SvPOK(value)) { char *extent, *temp, *str; STRLEN len; temp = SvPV(value, len); str = malloc(len + 1); strncpy(str, temp, len); str[len] = '\0'; val = strtoul(str, &extent, 10); if(extent < str + strlen(str)) { SET_ERRSTR("%s: Unable to parse", field); free(str); return(FALSE); } free(str); } else { SET_ERRSTR("%s: Must be passed as integer or string", field); return(FALSE); } if(val < 0 || val > USHRT_MAX - 40) { SET_ERRSTR("%s: Value out of range", field); return(FALSE); } info->mss = val; } else if(!strcmp(field, "clamp-mss-to-pmtu")) { info->mss = IPT_TCPMSS_CLAMP_PMTU; } else return(FALSE); if(*flags) { SET_ERRSTR("%s: Only one of 'set-mss', 'clamp-mss-to-pmtu' allowed " "for TCPMSS target", field); return(FALSE); } if(entry->ip.proto != IPPROTO_TCP || entry->ip.invflags & IPT_INV_PROTO) { SET_ERRSTR("%s: Protocol must be TCP", field); return(FALSE); } *flags = 1; return(TRUE); } static void get_fields(HV *ent_hash, void *myinfo, struct ipt_entry *entry) { MODULE_DATATYPE *info = (void *)((MODULE_ENTRYTYPE *)myinfo)->data; if(info->mss == IPT_TCPMSS_CLAMP_PMTU) hv_store(ent_hash, "clamp-mss-to-pmtu", 17, newSViv(0), 0); else hv_store(ent_hash, "set-mss", 3, newSViv(info->mss), 0); } static int final_check(void *myinfo, int flags) { if(!flags) { SET_ERRSTR("TCPMSS target requires one of 'set-mss', " "'clamp-mss-to-pmtu'"); return(FALSE); } return(TRUE); } static ModuleDef _module = { .type = MODULE_TYPE, .name = MODULE_NAME, .size = IPT_ALIGN(sizeof(MODULE_DATATYPE)), .size_uspace = IPT_ALIGN(sizeof(MODULE_DATATYPE)), .parse_field = parse_field, .get_fields = get_fields, .final_check = final_check, }; ModuleDef *init(void) { return(&_module); } /* vim: ts=4 */