netsukuku/src/mark.h

#ifndef MARK_H
#define MARK_H

#include <linux/version.h>

//original inclusions
#if LINUX_VERSION_CODE <= KERNEL_VERSION(2, 7, 0)
#if 0
#include "libiptc/libiptc.h"
#include <linux/netfilter_ipv4/ip_conntrack.h>
#include <linux/netfilter_ipv4/ip_conntrack_tuple.h>
#include "libiptc/ipt_conntrack.h"
#include "libiptc/ipt_connmark.h"
#include "libiptc/ipt_CONNMARK.h"
#endif

#if 1
#include "libiptc/libiptc.h"
#if 1
#include <linux/netfilter/nf_conntrack_common.h>
#endif
#if 0
#include <linux/netfilter_ipv4/ipt_conntrack_tuple.h>
#endif
#include "libiptc/ipt_conntrack.h"
#include "libiptc/ipt_connmark.h"
#include "libiptc/ipt_CONNMARK.h"
#endif

 /* 2010 fixes for debian package */
#if 0
#include "libiptc/libiptc.h"
#include <linux/netfilter/nf_conntrack_common.h>
#include <linux/netfilter_ipv4/ipt_conntrack.h>
#include <linux/netfilter_ipv4/ipt_connmark.h>
#include <linux/netfilter_ipv4/ipt_CONNMARK.h>
#endif
#endif

#include "libiptc/libiptc.h"
#include <linux/netfilter/nf_conntrack_common.h>
#include "libiptc/ipt_conntrack.h"
#include "libiptc/ipt_connmark.h"
#include "libiptc/ipt_CONNMARK.h"

#define MANGLE_TABLE		"mangle"
#define FILTER_TABLE		"filter"
#define NTK_MARK_CHAIN		"ntk_mark_chain"
#define CHAIN_OUTPUT		"OUTPUT"
#define CHAIN_POSTROUTING	"POSTROUTING"
#define CHAIN_PREROUTING	"PREROUTING"
#define CHAIN_POSTROUTING	"POSTROUTING"
#define CHAIN_FORWARD		"FORWARD"

#define MOD_CONNTRACK		"conntrack"
#define MOD_CONNMARK		"CONNMARK"
#define MARK_TARGET		"MARK"

#define NTK_NET_STR		"10.0.0.0"
#define NTK_NET_MASK_STR	"255.0.0.0"

#define IPT_ENTRY_SZ		sizeof(struct ipt_entry)
#define IPT_ENTRY_MATCH_SZ	sizeof(struct ipt_entry_match)
#define IPT_ENTRY_TARGET_SZ	sizeof(struct ipt_entry_target)
#define IPT_CT_INFO_SZ		sizeof(struct ipt_conntrack_info)
#define IPT_CM_TARGET_INFO_SZ	sizeof(struct ipt_connmark_target_info)

#define MATCH_SZ		IPT_ENTRY_MATCH_SZ+IPT_CT_INFO_SZ
#define TARGET_SZ		IPT_ENTRY_TARGET_SZ+IPT_CM_TARGET_INFO_SZ

#define RESTORE_OUTPUT_RULE_SZ	IPT_ENTRY_SZ+MATCH_SZ+TARGET_SZ

#define OFFSET_MATCH		IPT_ENTRY_SZ
#define OFFSET_MATCH_INFO	OFFSET_MATCH+IPT_ENTRY_MATCH_SZ
#define OFFSET_TARGET		OFFSET_MATCH_INFO+IPT_CT_INFO_SZ
#define OFFSET_TARGET_INFO	OFFSET_TARGET+IPT_ENTRY_TARGET_SZ

#define MARK_RULE_SZ		IPT_ENTRY_SZ+TARGET_SZ
#define MAX_MARK_RULES		100

#define NTK_FORWARD_RULE_SZ	OFFSET_TARGET_INFO+4

#define IGW_FILTER_RULE_SZ	IPT_ENTRY_SZ+IPT_ENTRY_SZ+4
#define INET_MARK		25

#define MAX_RULE_SZ		RESTORE_OUTPUT_RULE_SZ

//struct in_addr inet_dst,inet_dst_mask;

typedef struct rule_store {
	char e[RESTORE_OUTPUT_RULE_SZ];
	int sz;
	char *chain;
} rule_store;

/* Functions */

int table_init(const char *table, iptc_handle_t * t);
int insert_rule(const char *rule, iptc_handle_t * t, const char *chain,
				int pos);
int append_rule(const char *rule, iptc_handle_t * t, const char *chain);
int commit_rules(iptc_handle_t * t);
void restore_output_rule_init(char *rule);
void ntk_forward_rule_init(char *rule);
void mark_rule_init(char *rule, char *outiface, int outiface_num);
void igw_mark_rule_init(char *rule);
int ntk_mark_chain_init(iptc_handle_t * t);
int store_rules();
int mark_init(int igw);
int count_ntk_mark_chain(iptc_handle_t * t);
int create_mark_rules(int n);
int delete_ntk_forward_chain(iptc_handle_t * t);
int delete_first_rule(iptc_handle_t * t, const char *chain);
int rule_position(rule_store * rule, iptc_handle_t * t);
int delete_rule(rule_store * rule, iptc_handle_t * t);
int mark_close();

#endif							/* MARK_H */