1/*
2 * Copyright (C) 2012 by Darren Reed.
3 *
4 * See the IPFILTER.LICENCE file for details on licencing.
5 * $Id$
6 */
7
8#ifndef __IP_SCAN_H__
9#define __IP_SCAN_H__ 1
10
11#ifdef sun
12# include <sys/ioccom.h>
13#endif
14
15#define IPSCAN_NAME "/dev/ipscan"
16#define IPL_SCAN IPSCAN_NAME
17#define ISC_TLEN 16
18
19
20struct fr_info;
21struct frentry;
22struct ip;
23struct ipstate;
24
25
26# define SIOCADSCA _IOWR('r', 60, struct ipscan *)
27# define SIOCRMSCA _IOWR('r', 61, struct ipscan *)
28# define SIOCGSCST _IOWR('r', 62, struct ipscan *)
29
30struct action {
31 int act_val; /* what to do */
32 struct in_addr act_ip; /* redirect IP# */
33 u_short act_port; /* redirect port number */
34 int act_else; /* what to do */
35 struct in_addr act_eip; /* redirect IP# */
36 u_short act_eport; /* redirect port number */
37};
38
39
40typedef struct sinfo {
41 char s_txt[ISC_TLEN]; /* text to match */
42 char s_msk[ISC_TLEN]; /* mask of the above to check */
43 int s_len; /* length of server text */
44} sinfo_t;
45
46
47typedef struct ipscan {
48 struct ipscan *ipsc_next;
49 struct ipscan **ipsc_pnext;
50 char ipsc_tag[ISC_TLEN]; /* table entry protocol tag */
51 sinfo_t ipsc_si[2]; /* client/server side information */
52 int ipsc_hits; /* times this has been matched */
53 int ipsc_active; /* # of active matches */
54 int ipsc_fref; /* # of references from filter rules */
55 int ipsc_sref; /* # of references from state entries */
56 struct action ipsc_act;
57} ipscan_t;
58
59
60#define ipsc_cl ipsc_si[0]
61#define ipsc_sl ipsc_si[1]
62#define ipsc_ctxt ipsc_cl.s_txt
63#define ipsc_cmsk ipsc_cl.s_msk
64#define ipsc_clen ipsc_cl.s_len
65#define ipsc_stxt ipsc_sl.s_txt
66#define ipsc_smsk ipsc_sl.s_msk
67#define ipsc_slen ipsc_sl.s_len
68#define ipsc_action ipsc_act.act_val
69#define ipsc_ip ipsc_act.act_ip
70#define ipsc_port ipsc_act.act_port
71#define ipsc_else ipsc_act.act_else
72#define ipsc_eip ipsc_act.act_eip
73#define ipsc_eport ipsc_act.act_eport
74
75#define ISC_A_NONE 0
76#define ISC_A_TRACK 1
77#define ISC_A_CLOSE 2
78#define ISC_A_REDIRECT 3
79
80
81typedef struct ipscanstat {
82 struct ipscan *iscs_list;
83 u_long iscs_acted;
84 u_long iscs_else;
85 int iscs_entries;
86} ipscanstat_t;
87
88
89extern int ipf_scan_ioctl(ipf_main_softc_t *, caddr_t, ioctlcmd_t, int, int, void *);
90extern int ipf_scan_init(void);
91extern int ipf_scan_attachis(struct ipstate *);
92extern int ipf_scan_attachfr(struct frentry *);
93extern int ipf_scan_detachis(struct ipstate *);
94extern int ipf_scan_detachfr(struct frentry *);
95extern int ipf_scan_packet(struct fr_info *, struct ipstate *);
96extern void ipf_scan_unload(ipf_main_softc_t *);
97
98#endif /* __IP_SCAN_H__ */