cregit-Linux how code gets into the kernel

Release 4.8 net/ipv6/netfilter/ip6table_nat.c

/*
 * Copyright (c) 2011 Patrick McHardy <kaber@trash.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * Based on Rusty Russell's IPv4 NAT code. Development of IPv6 NAT
 * funded by Astaro.
 */

#include <linux/module.h>
#include <linux/netfilter.h>
#include <linux/netfilter_ipv6.h>
#include <linux/netfilter_ipv6/ip6_tables.h>
#include <linux/ipv6.h>
#include <net/ipv6.h>

#include <net/netfilter/nf_nat.h>
#include <net/netfilter/nf_nat_core.h>
#include <net/netfilter/nf_nat_l3proto.h>

static int __net_init ip6table_nat_table_init(struct net *net);


static const struct xt_table nf_nat_ipv6_table = {
	.name		= "nat",
	.valid_hooks	= (1 << NF_INET_PRE_ROUTING) |
			  (1 << NF_INET_POST_ROUTING) |
			  (1 << NF_INET_LOCAL_OUT) |
			  (1 << NF_INET_LOCAL_IN),
	.me		= THIS_MODULE,
	.af		= NFPROTO_IPV6,
	.table_init	= ip6table_nat_table_init,
};


static unsigned int ip6table_nat_do_chain(void *priv, struct sk_buff *skb, const struct nf_hook_state *state, struct nf_conn *ct) { return ip6t_do_table(skb, state, state->net->ipv6.ip6table_nat); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy3479.07%120.00%
eric w. biedermaneric w. biederman49.30%240.00%
david s. millerdavid s. miller36.98%120.00%
pablo neira ayusopablo neira ayuso24.65%120.00%
Total43100.00%5100.00%


static unsigned int ip6table_nat_fn(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { return nf_nat_ipv6_fn(priv, skb, state, ip6table_nat_do_chain); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy2367.65%233.33%
pablo neira ayusopablo neira ayuso38.82%116.67%
david s. millerdavid s. miller38.82%116.67%
eric w. biedermaneric w. biederman38.82%116.67%
jozsef kadlecsikjozsef kadlecsik25.88%116.67%
Total34100.00%6100.00%


static unsigned int ip6table_nat_in(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { return nf_nat_ipv6_in(priv, skb, state, ip6table_nat_do_chain); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy2470.59%240.00%
pablo neira ayusopablo neira ayuso411.76%120.00%
david s. millerdavid s. miller38.82%120.00%
eric w. biedermaneric w. biederman38.82%120.00%
Total34100.00%5100.00%


static unsigned int ip6table_nat_out(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { return nf_nat_ipv6_out(priv, skb, state, ip6table_nat_do_chain); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy2573.53%240.00%
eric w. biedermaneric w. biederman38.82%120.00%
david s. millerdavid s. miller38.82%120.00%
pablo neira ayusopablo neira ayuso38.82%120.00%
Total34100.00%5100.00%


static unsigned int ip6table_nat_local_fn(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { return nf_nat_ipv6_local_fn(priv, skb, state, ip6table_nat_do_chain); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy2573.53%240.00%
eric w. biedermaneric w. biederman38.82%120.00%
david s. millerdavid s. miller38.82%120.00%
pablo neira ayusopablo neira ayuso38.82%120.00%
Total34100.00%5100.00%

static struct nf_hook_ops nf_nat_ipv6_ops[] __read_mostly = { /* Before packet filtering, change destination */ { .hook = ip6table_nat_in, .pf = NFPROTO_IPV6, .hooknum = NF_INET_PRE_ROUTING, .priority = NF_IP6_PRI_NAT_DST, }, /* After packet filtering, change source */ { .hook = ip6table_nat_out, .pf = NFPROTO_IPV6, .hooknum = NF_INET_POST_ROUTING, .priority = NF_IP6_PRI_NAT_SRC, }, /* Before packet filtering, change destination */ { .hook = ip6table_nat_local_fn, .pf = NFPROTO_IPV6, .hooknum = NF_INET_LOCAL_OUT, .priority = NF_IP6_PRI_NAT_DST, }, /* After packet filtering, change source */ { .hook = ip6table_nat_fn, .pf = NFPROTO_IPV6, .hooknum = NF_INET_LOCAL_IN, .priority = NF_IP6_PRI_NAT_SRC, }, };
static int __net_init ip6table_nat_table_init(struct net *net) { struct ip6t_replace *repl; int ret; if (net->ipv6.ip6table_nat) return 0; repl = ip6t_alloc_initial_table(&nf_nat_ipv6_table); if (repl == NULL) return -ENOMEM; ret = ip6t_register_table(net, &nf_nat_ipv6_table, repl, nf_nat_ipv6_ops, &net->ipv6.ip6table_nat); kfree(repl); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy5266.67%133.33%
florian westphalflorian westphal2633.33%266.67%
Total78100.00%3100.00%


static void __net_exit ip6table_nat_net_exit(struct net *net) { if (!net->ipv6.ip6table_nat) return; ip6t_unregister_table(net, net->ipv6.ip6table_nat, nf_nat_ipv6_ops); net->ipv6.ip6table_nat = NULL; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy2353.49%133.33%
florian westphalflorian westphal2046.51%266.67%
Total43100.00%3100.00%

static struct pernet_operations ip6table_nat_net_ops = { .exit = ip6table_nat_net_exit, };
static int __init ip6table_nat_init(void) { int ret = register_pernet_subsys(&ip6table_nat_net_ops); if (ret) return ret; ret = ip6table_nat_table_init(&init_net); if (ret) unregister_pernet_subsys(&ip6table_nat_net_ops); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy3371.74%150.00%
florian westphalflorian westphal1328.26%150.00%
Total46100.00%2100.00%


static void __exit ip6table_nat_exit(void) { unregister_pernet_subsys(&ip6table_nat_net_ops); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy15100.00%1100.00%
Total15100.00%1100.00%

module_init(ip6table_nat_init); module_exit(ip6table_nat_exit); MODULE_LICENSE("GPL");

Overall Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy45678.22%220.00%
florian westphalflorian westphal7512.86%220.00%
pablo neira ayusopablo neira ayuso193.26%110.00%
eric w. biedermaneric w. biederman162.74%220.00%
david s. millerdavid s. miller152.57%220.00%
jozsef kadlecsikjozsef kadlecsik20.34%110.00%
Total583100.00%10100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.