109 lines
2.8 KiB
C
109 lines
2.8 KiB
C
/* $NetBSD$ */
|
|
|
|
/*
|
|
* Copyright (C) 1993-2001 by Darren Reed.
|
|
*
|
|
* See the IPFILTER.LICENCE file for details on licencing.
|
|
*
|
|
* @(#)ip_fil.h 1.35 6/5/96
|
|
* Id: ip_scan.h,v 2.9 2003/07/25 22:05:01 darrenr Exp
|
|
*/
|
|
|
|
#ifndef __IP_SCAN_H__
|
|
#define __IP_SCAN_H__ 1
|
|
|
|
#ifdef sun
|
|
# include <sys/ioccom.h>
|
|
#endif
|
|
|
|
#define IPSCAN_NAME "/dev/ipscan"
|
|
#define IPL_SCAN IPSCAN_NAME
|
|
#define ISC_TLEN 16
|
|
|
|
|
|
struct fr_info;
|
|
struct frentry;
|
|
struct ip;
|
|
struct ipstate;
|
|
|
|
|
|
#if defined(__STDC__) || defined(__GNUC__)
|
|
# define SIOCADSCA _IOWR('r', 60, struct ipscan *)
|
|
# define SIOCRMSCA _IOWR('r', 61, struct ipscan *)
|
|
# define SIOCGSCST _IOWR('r', 62, struct ipscan *)
|
|
#else
|
|
# define SIOCADSCA _IOWR(r, 60, struct ipscan *)
|
|
# define SIOCRMSCA _IOWR(r, 61, struct ipscan *)
|
|
# define SIOCGSCST _IOWR(r, 62, struct ipscan *)
|
|
#endif
|
|
|
|
struct action {
|
|
int act_val; /* what to do */
|
|
struct in_addr act_ip; /* redirect IP# */
|
|
u_short act_port; /* redirect port number */
|
|
int act_else; /* what to do */
|
|
struct in_addr act_eip; /* redirect IP# */
|
|
u_short act_eport; /* redirect port number */
|
|
};
|
|
|
|
|
|
typedef struct sinfo {
|
|
char s_txt[ISC_TLEN]; /* text to match */
|
|
char s_msk[ISC_TLEN]; /* mask of the above to check */
|
|
int s_len; /* length of server text */
|
|
} sinfo_t;
|
|
|
|
|
|
typedef struct ipscan {
|
|
struct ipscan *ipsc_next;
|
|
struct ipscan **ipsc_pnext;
|
|
char ipsc_tag[ISC_TLEN]; /* table entry protocol tag */
|
|
sinfo_t ipsc_si[2]; /* client/server side information */
|
|
int ipsc_hits; /* times this has been matched */
|
|
int ipsc_active; /* # of active matches */
|
|
int ipsc_fref; /* # of references from filter rules */
|
|
int ipsc_sref; /* # of references from state entries */
|
|
struct action ipsc_act;
|
|
} ipscan_t;
|
|
|
|
|
|
#define ipsc_cl ipsc_si[0]
|
|
#define ipsc_sl ipsc_si[1]
|
|
#define ipsc_ctxt ipsc_cl.s_txt
|
|
#define ipsc_cmsk ipsc_cl.s_msk
|
|
#define ipsc_clen ipsc_cl.s_len
|
|
#define ipsc_stxt ipsc_sl.s_txt
|
|
#define ipsc_smsk ipsc_sl.s_msk
|
|
#define ipsc_slen ipsc_sl.s_len
|
|
#define ipsc_action ipsc_act.act_val
|
|
#define ipsc_ip ipsc_act.act_ip
|
|
#define ipsc_port ipsc_act.act_port
|
|
#define ipsc_else ipsc_act.act_else
|
|
#define ipsc_eip ipsc_act.act_eip
|
|
#define ipsc_eport ipsc_act.act_eport
|
|
|
|
#define ISC_A_NONE 0
|
|
#define ISC_A_TRACK 1
|
|
#define ISC_A_CLOSE 2
|
|
#define ISC_A_REDIRECT 3
|
|
|
|
|
|
typedef struct ipscanstat {
|
|
struct ipscan *iscs_list;
|
|
u_long iscs_acted;
|
|
u_long iscs_else;
|
|
int iscs_entries;
|
|
} ipscanstat_t;
|
|
|
|
|
|
extern int fr_scan_ioctl __P((caddr_t, ioctlcmd_t, int));
|
|
extern int ipsc_init __P((void));
|
|
extern int ipsc_attachis __P((struct ipstate *));
|
|
extern int ipsc_attachfr __P((struct frentry *));
|
|
extern int ipsc_detachis __P((struct ipstate *));
|
|
extern int ipsc_detachfr __P((struct frentry *));
|
|
extern int ipsc_packet __P((struct fr_info *, struct ipstate *));
|
|
extern void fr_scanunload __P((void));
|
|
|
|
#endif /* __IP_SCAN_H__ */
|