| /* Copyright 2007-2010 Jozsef Kadlecsik (kadlec@blackhole.kfki.hu) |
| * |
| * This program is free software; you can redistribute it and/or modify |
| * it under the terms of the GNU General Public License version 2 as |
| * published by the Free Software Foundation. |
| */ |
| #include <libipset/data.h> /* IPSET_OPT_* */ |
| #include <libipset/parse.h> /* parser functions */ |
| #include <libipset/print.h> /* printing functions */ |
| #include <libipset/ui.h> /* ipset_port_usage */ |
| #include <libipset/types.h> /* prototypes */ |
| |
| /* Parse commandline arguments */ |
| static const struct ipset_arg hash_netportnet_create_args0[] = { |
| { .name = { "family", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, .print = ipset_print_family, |
| }, |
| /* Alias: family inet */ |
| { .name = { "-4", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| /* Alias: family inet6 */ |
| { .name = { "-6", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| { .name = { "hashsize", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_HASHSIZE, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "maxelem", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_MAXELEM, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "timeout", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_TIMEOUT, |
| .parse = ipset_parse_timeout, .print = ipset_print_number, |
| }, |
| { .name = { "counters", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_COUNTERS, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "comment", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_CREATE_COMMENT, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { }, |
| }; |
| |
| static const struct ipset_arg hash_netportnet_add_args0[] = { |
| { .name = { "timeout", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_TIMEOUT, |
| .parse = ipset_parse_timeout, .print = ipset_print_number, |
| }, |
| { .name = { "nomatch", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_NOMATCH, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "packets", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_PACKETS, |
| .parse = ipset_parse_uint64, .print = ipset_print_number, |
| }, |
| { .name = { "bytes", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_BYTES, |
| .parse = ipset_parse_uint64, .print = ipset_print_number, |
| }, |
| { .name = { "comment", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_ADT_COMMENT, |
| .parse = ipset_parse_comment, .print = ipset_print_comment, |
| }, |
| { }, |
| }; |
| |
| static const struct ipset_arg hash_netportnet_test_args0[] = { |
| { .name = { "nomatch", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_NOMATCH, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { }, |
| }; |
| |
| static const char hash_netportnet_usage0[] = |
| "create SETNAME hash:net,port,net\n" |
| " [family inet|inet6]\n" |
| " [hashsize VALUE] [maxelem VALUE]\n" |
| " [timeout VALUE] [counters] [comment]\n" |
| "add SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR] [timeout VALUE] [nomatch]\n" |
| " [packets VALUE] [bytes VALUE] [comment \"string\"]\n" |
| "del SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n" |
| "test SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n\n" |
| "where depending on the INET family\n" |
| " IP are valid IPv4 or IPv6 addresses (or hostnames),\n" |
| " CIDR is a valid IPv4 or IPv6 CIDR prefix.\n" |
| " Adding/deleting multiple elements in IP/CIDR or FROM-TO form\n" |
| " in both IP components are supported for IPv4.\n" |
| " Adding/deleting multiple elements with TCP/SCTP/UDP/UDPLITE\n" |
| " port range is supported both for IPv4 and IPv6.\n"; |
| |
| static struct ipset_type ipset_hash_netportnet0 = { |
| .name = "hash:net,port,net", |
| .alias = { "netportnethash", NULL }, |
| .revision = 0, |
| .family = NFPROTO_IPSET_IPV46, |
| .dimension = IPSET_DIM_THREE, |
| .elem = { |
| [IPSET_DIM_ONE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP |
| }, |
| [IPSET_DIM_TWO - 1] = { |
| .parse = ipset_parse_proto_port, |
| .print = ipset_print_proto_port, |
| .opt = IPSET_OPT_PORT |
| }, |
| [IPSET_DIM_THREE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP2 |
| }, |
| }, |
| .args = { |
| [IPSET_CREATE] = hash_netportnet_create_args0, |
| [IPSET_ADD] = hash_netportnet_add_args0, |
| [IPSET_TEST] = hash_netportnet_test_args0, |
| }, |
| .mandatory = { |
| [IPSET_CREATE] = 0, |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| }, |
| .full = { |
| [IPSET_CREATE] = IPSET_FLAG(IPSET_OPT_HASHSIZE) |
| | IPSET_FLAG(IPSET_OPT_MAXELEM) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_COUNTERS) |
| | IPSET_FLAG(IPSET_OPT_CREATE_COMMENT), |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH) |
| | IPSET_FLAG(IPSET_OPT_PACKETS) |
| | IPSET_FLAG(IPSET_OPT_BYTES) |
| | IPSET_FLAG(IPSET_OPT_ADT_COMMENT), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH), |
| }, |
| |
| .usage = hash_netportnet_usage0, |
| .usagefn = ipset_port_usage, |
| .description = "initial revision", |
| }; |
| |
| /* Parse commandline arguments */ |
| static const struct ipset_arg hash_netportnet_create_args1[] = { |
| { .name = { "family", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, .print = ipset_print_family, |
| }, |
| /* Alias: family inet */ |
| { .name = { "-4", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| /* Alias: family inet6 */ |
| { .name = { "-6", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| { .name = { "hashsize", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_HASHSIZE, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "maxelem", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_MAXELEM, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "timeout", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_TIMEOUT, |
| .parse = ipset_parse_timeout, .print = ipset_print_number, |
| }, |
| { .name = { "counters", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_COUNTERS, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "comment", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_CREATE_COMMENT, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "forceadd", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FORCEADD, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { }, |
| }; |
| |
| static const char hash_netportnet_usage1[] = |
| "create SETNAME hash:net,port,net\n" |
| " [family inet|inet6]\n" |
| " [hashsize VALUE] [maxelem VALUE]\n" |
| " [timeout VALUE] [counters] [comment]\n" |
| " [forceadd]\n" |
| "add SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR] [timeout VALUE] [nomatch]\n" |
| " [packets VALUE] [bytes VALUE] [comment \"string\"]\n" |
| "del SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n" |
| "test SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n\n" |
| "where depending on the INET family\n" |
| " IP are valid IPv4 or IPv6 addresses (or hostnames),\n" |
| " CIDR is a valid IPv4 or IPv6 CIDR prefix.\n" |
| " Adding/deleting multiple elements in IP/CIDR or FROM-TO form\n" |
| " in both IP components are supported for IPv4.\n" |
| " Adding/deleting multiple elements with TCP/SCTP/UDP/UDPLITE\n" |
| " port range is supported both for IPv4 and IPv6.\n"; |
| |
| static struct ipset_type ipset_hash_netportnet1 = { |
| .name = "hash:net,port,net", |
| .alias = { "netportnethash", NULL }, |
| .revision = 1, |
| .family = NFPROTO_IPSET_IPV46, |
| .dimension = IPSET_DIM_THREE, |
| .elem = { |
| [IPSET_DIM_ONE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP |
| }, |
| [IPSET_DIM_TWO - 1] = { |
| .parse = ipset_parse_proto_port, |
| .print = ipset_print_proto_port, |
| .opt = IPSET_OPT_PORT |
| }, |
| [IPSET_DIM_THREE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP2 |
| }, |
| }, |
| .args = { |
| [IPSET_CREATE] = hash_netportnet_create_args1, |
| [IPSET_ADD] = hash_netportnet_add_args0, |
| [IPSET_TEST] = hash_netportnet_test_args0, |
| }, |
| .mandatory = { |
| [IPSET_CREATE] = 0, |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| }, |
| .full = { |
| [IPSET_CREATE] = IPSET_FLAG(IPSET_OPT_HASHSIZE) |
| | IPSET_FLAG(IPSET_OPT_MAXELEM) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_COUNTERS) |
| | IPSET_FLAG(IPSET_OPT_CREATE_COMMENT) |
| | IPSET_FLAG(IPSET_OPT_FORCEADD), |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH) |
| | IPSET_FLAG(IPSET_OPT_PACKETS) |
| | IPSET_FLAG(IPSET_OPT_BYTES) |
| | IPSET_FLAG(IPSET_OPT_ADT_COMMENT), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH), |
| }, |
| |
| .usage = hash_netportnet_usage1, |
| .usagefn = ipset_port_usage, |
| .description = "forceadd support", |
| }; |
| |
| /* Parse commandline arguments */ |
| static const struct ipset_arg hash_netportnet_create_args2[] = { |
| { .name = { "family", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, .print = ipset_print_family, |
| }, |
| /* Alias: family inet */ |
| { .name = { "-4", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| /* Alias: family inet6 */ |
| { .name = { "-6", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FAMILY, |
| .parse = ipset_parse_family, |
| }, |
| { .name = { "hashsize", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_HASHSIZE, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "maxelem", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_MAXELEM, |
| .parse = ipset_parse_uint32, .print = ipset_print_number, |
| }, |
| { .name = { "timeout", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_TIMEOUT, |
| .parse = ipset_parse_timeout, .print = ipset_print_number, |
| }, |
| { .name = { "counters", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_COUNTERS, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "comment", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_CREATE_COMMENT, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "forceadd", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_FORCEADD, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "skbinfo", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_SKBINFO, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { }, |
| }; |
| |
| static const struct ipset_arg hash_netportnet_add_args2[] = { |
| { .name = { "timeout", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_TIMEOUT, |
| .parse = ipset_parse_timeout, .print = ipset_print_number, |
| }, |
| { .name = { "nomatch", NULL }, |
| .has_arg = IPSET_NO_ARG, .opt = IPSET_OPT_NOMATCH, |
| .parse = ipset_parse_flag, .print = ipset_print_flag, |
| }, |
| { .name = { "packets", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_PACKETS, |
| .parse = ipset_parse_uint64, .print = ipset_print_number, |
| }, |
| { .name = { "bytes", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_BYTES, |
| .parse = ipset_parse_uint64, .print = ipset_print_number, |
| }, |
| { .name = { "comment", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_ADT_COMMENT, |
| .parse = ipset_parse_comment, .print = ipset_print_comment, |
| }, |
| { .name = { "skbmark", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_SKBMARK, |
| .parse = ipset_parse_skbmark, .print = ipset_print_skbmark, |
| }, |
| { .name = { "skbprio", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_SKBPRIO, |
| .parse = ipset_parse_skbprio, .print = ipset_print_skbprio, |
| }, |
| { .name = { "skbqueue", NULL }, |
| .has_arg = IPSET_MANDATORY_ARG, .opt = IPSET_OPT_SKBQUEUE, |
| .parse = ipset_parse_uint16, .print = ipset_print_number, |
| }, |
| { }, |
| }; |
| |
| static const char hash_netportnet_usage2[] = |
| "create SETNAME hash:net,port,net\n" |
| " [family inet|inet6]\n" |
| " [hashsize VALUE] [maxelem VALUE]\n" |
| " [timeout VALUE] [counters] [comment]\n" |
| " [forceadd] [skbinfo]\n" |
| "add SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR] [timeout VALUE] [nomatch]\n" |
| " [packets VALUE] [bytes VALUE] [comment \"string\"]\n" |
| " [skbmark VALUE] [skbprio VALUE] [skbqueue VALUE]\n" |
| "del SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n" |
| "test SETNAME IP[/CIDR],PROTO:PORT,IP[/CIDR]\n\n" |
| "where depending on the INET family\n" |
| " IP are valid IPv4 or IPv6 addresses (or hostnames),\n" |
| " CIDR is a valid IPv4 or IPv6 CIDR prefix.\n" |
| " Adding/deleting multiple elements in IP/CIDR or FROM-TO form\n" |
| " in both IP components are supported for IPv4.\n" |
| " Adding/deleting multiple elements with TCP/SCTP/UDP/UDPLITE\n" |
| " port range is supported both for IPv4 and IPv6.\n"; |
| |
| static struct ipset_type ipset_hash_netportnet2 = { |
| .name = "hash:net,port,net", |
| .alias = { "netportnethash", NULL }, |
| .revision = 2, |
| .family = NFPROTO_IPSET_IPV46, |
| .dimension = IPSET_DIM_THREE, |
| .elem = { |
| [IPSET_DIM_ONE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP |
| }, |
| [IPSET_DIM_TWO - 1] = { |
| .parse = ipset_parse_proto_port, |
| .print = ipset_print_proto_port, |
| .opt = IPSET_OPT_PORT |
| }, |
| [IPSET_DIM_THREE - 1] = { |
| .parse = ipset_parse_ip4_net6, |
| .print = ipset_print_ip, |
| .opt = IPSET_OPT_IP2 |
| }, |
| }, |
| .args = { |
| [IPSET_CREATE] = hash_netportnet_create_args2, |
| [IPSET_ADD] = hash_netportnet_add_args2, |
| [IPSET_TEST] = hash_netportnet_test_args0, |
| }, |
| .mandatory = { |
| [IPSET_CREATE] = 0, |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2), |
| }, |
| .full = { |
| [IPSET_CREATE] = IPSET_FLAG(IPSET_OPT_HASHSIZE) |
| | IPSET_FLAG(IPSET_OPT_MAXELEM) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_COUNTERS) |
| | IPSET_FLAG(IPSET_OPT_CREATE_COMMENT) |
| | IPSET_FLAG(IPSET_OPT_FORCEADD) |
| | IPSET_FLAG(IPSET_OPT_SKBINFO), |
| [IPSET_ADD] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO) |
| | IPSET_FLAG(IPSET_OPT_TIMEOUT) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH) |
| | IPSET_FLAG(IPSET_OPT_PACKETS) |
| | IPSET_FLAG(IPSET_OPT_BYTES) |
| | IPSET_FLAG(IPSET_OPT_ADT_COMMENT) |
| | IPSET_FLAG(IPSET_OPT_SKBMARK) |
| | IPSET_FLAG(IPSET_OPT_SKBPRIO) |
| | IPSET_FLAG(IPSET_OPT_SKBQUEUE), |
| [IPSET_DEL] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_IP_TO) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PORT_TO) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_IP2_TO), |
| [IPSET_TEST] = IPSET_FLAG(IPSET_OPT_IP) |
| | IPSET_FLAG(IPSET_OPT_CIDR) |
| | IPSET_FLAG(IPSET_OPT_PORT) |
| | IPSET_FLAG(IPSET_OPT_PROTO) |
| | IPSET_FLAG(IPSET_OPT_IP2) |
| | IPSET_FLAG(IPSET_OPT_CIDR2) |
| | IPSET_FLAG(IPSET_OPT_NOMATCH), |
| }, |
| |
| .usage = hash_netportnet_usage2, |
| .usagefn = ipset_port_usage, |
| .description = "skbinfo support", |
| }; |
| |
| void _init(void); |
| void _init(void) |
| { |
| ipset_type_add(&ipset_hash_netportnet0); |
| ipset_type_add(&ipset_hash_netportnet1); |
| ipset_type_add(&ipset_hash_netportnet2); |
| } |
