2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
22 static struct fw3_option forward_opts
[] = {
23 FW3_OPT("name", string
, forward
, name
),
24 FW3_OPT("family", family
, forward
, family
),
26 FW3_OPT("src", device
, forward
, src
),
27 FW3_OPT("dest", device
, forward
, dest
),
32 fw3_load_forwards(struct fw3_state
*state
, struct uci_package
*p
)
34 struct uci_section
*s
;
35 struct uci_element
*e
;
36 struct fw3_forward
*forward
;
38 INIT_LIST_HEAD(&state
->forwards
);
40 uci_foreach_element(&p
->sections
, e
)
42 s
= uci_to_section(e
);
44 if (strcmp(s
->type
, "forwarding"))
47 forward
= malloc(sizeof(*forward
));
52 memset(forward
, 0, sizeof(*forward
));
54 fw3_parse_options(forward
, forward_opts
, ARRAY_SIZE(forward_opts
), s
);
56 if (forward
->src
.invert
|| forward
->dest
.invert
)
58 warn_elem(e
, "must not have inverted 'src' or 'dest' options");
59 fw3_free_forward(forward
);
62 else if (forward
->src
.set
&& !forward
->src
.any
&&
63 !(forward
->_src
= fw3_lookup_zone(state
, forward
->src
.name
, false)))
65 warn_elem(e
, "refers to not existing zone '%s'", forward
->src
.name
);
66 fw3_free_forward(forward
);
69 else if (forward
->dest
.set
&& !forward
->dest
.any
&&
70 !(forward
->_dest
= fw3_lookup_zone(state
, forward
->dest
.name
, false)))
72 warn_elem(e
, "refers to not existing zone '%s'", forward
->dest
.name
);
73 fw3_free_forward(forward
);
79 setbit(forward
->_dest
->dst_flags
, FW3_TARGET_ACCEPT
);
82 (forward
->_src
->conntrack
|| forward
->_dest
->conntrack
))
84 forward
->_src
->conntrack
= forward
->_dest
->conntrack
= true;
88 list_add_tail(&forward
->list
, &state
->forwards
);
95 print_chain(struct fw3_forward
*forward
)
97 if (forward
->src
.any
|| !forward
->src
.set
)
98 fw3_pr("-A delegate_forward");
100 fw3_pr("-A zone_%s_forward", forward
->src
.name
);
103 static void print_target(struct fw3_forward
*forward
)
105 if (forward
->dest
.any
|| !forward
->dest
.set
)
106 fw3_pr(" -j ACCEPT\n");
108 fw3_pr(" -j zone_%s_dest_ACCEPT\n", forward
->dest
.name
);
112 print_forward(enum fw3_table table
, enum fw3_family family
,
113 struct fw3_forward
*forward
)
117 if (table
!= FW3_TABLE_FILTER
)
120 if (!fw3_is_family(forward
, family
))
123 s
= forward
->_src
? forward
->_src
->name
: "*";
124 d
= forward
->_dest
? forward
->_dest
->name
: "*";
127 info(" * Forward '%s'", forward
->name
);
129 info(" * Forward %s->%s", s
, d
);
131 if (!fw3_is_family(forward
->_src
, family
) ||
132 !fw3_is_family(forward
->_dest
, family
))
134 info(" ! Skipping due to different family of zone");
138 print_chain(forward
);
139 fw3_format_comment("forwarding ", s
, "->", d
);
140 print_target(forward
);
144 fw3_print_forwards(enum fw3_table table
, enum fw3_family family
,
145 struct fw3_state
*state
)
147 struct fw3_forward
*forward
;
149 list_for_each_entry(forward
, &state
->forwards
, list
)
150 print_forward(table
, family
, forward
);