X-Git-Url: http://git.archive.openwrt.org/?p=project%2Ffirewall3.git;a=blobdiff_plain;f=forwards.c;h=c7e7ba1874fb2fe2cc51a8682d4fd8c51027f4e5;hp=b7e056f220851eb79e6d4aaff9c5d2671765c35a;hb=e5c8c87ce6e9423f1445020440e715ea9f9fc466;hpb=16037f5d804ef952d61f93d09d7f9f0060072401 diff --git a/forwards.c b/forwards.c index b7e056f..c7e7ba1 100644 --- a/forwards.c +++ b/forwards.c @@ -72,14 +72,14 @@ fw3_load_forwards(struct fw3_state *state, struct uci_package *p) continue; } else if (forward->src.set && !forward->src.any && - !(forward->_src = fw3_lookup_zone(state, forward->src.name, false))) + !(forward->_src = fw3_lookup_zone(state, forward->src.name))) { warn_elem(e, "refers to not existing zone '%s'", forward->src.name); fw3_free_forward(forward); continue; } else if (forward->dest.set && !forward->dest.any && - !(forward->_dest = fw3_lookup_zone(state, forward->dest.name, false))) + !(forward->_dest = fw3_lookup_zone(state, forward->dest.name))) { warn_elem(e, "refers to not existing zone '%s'", forward->dest.name); fw3_free_forward(forward); @@ -89,8 +89,8 @@ fw3_load_forwards(struct fw3_state *state, struct uci_package *p) /* NB: forward family... */ if (forward->_dest) { - setbit(forward->_dest->flags[0], FW3_TARGET_ACCEPT); - setbit(forward->_dest->flags[1], FW3_TARGET_ACCEPT); + setbit(forward->_dest->flags[0], FW3_FLAG_ACCEPT); + setbit(forward->_dest->flags[1], FW3_FLAG_ACCEPT); if (forward->_src && (forward->_src->conntrack || forward->_dest->conntrack)) @@ -106,32 +106,32 @@ fw3_load_forwards(struct fw3_state *state, struct uci_package *p) static void -print_chain(struct fw3_forward *forward) +append_chain(struct fw3_ipt_rule *r, struct fw3_forward *forward) { if (forward->src.any || !forward->src.set) - fw3_pr("-A delegate_forward"); + fw3_ipt_rule_append(r, "delegate_forward"); else - fw3_pr("-A zone_%s_forward", forward->src.name); + fw3_ipt_rule_append(r, "zone_%s_forward", forward->src.name); } -static void print_target(struct fw3_forward *forward) +static void set_target(struct fw3_ipt_rule *r, struct fw3_forward *forward) { if (forward->dest.any || !forward->dest.set) - fw3_pr(" -j ACCEPT\n"); + fw3_ipt_rule_target(r, "ACCEPT"); else - fw3_pr(" -j zone_%s_dest_ACCEPT\n", forward->dest.name); + fw3_ipt_rule_target(r, "zone_%s_dest_ACCEPT", forward->dest.name); } static void -print_forward(enum fw3_table table, enum fw3_family family, - struct fw3_forward *forward) +print_forward(struct fw3_ipt_handle *handle, struct fw3_forward *forward) { const char *s, *d; + struct fw3_ipt_rule *r; - if (table != FW3_TABLE_FILTER) + if (handle->table != FW3_TABLE_FILTER) return; - if (!fw3_is_family(forward, family)) + if (!fw3_is_family(forward, handle->family)) return; s = forward->_src ? forward->_src->name : "*"; @@ -139,24 +139,24 @@ print_forward(enum fw3_table table, enum fw3_family family, info(" * Forward '%s' -> '%s'", s, d); - if (!fw3_is_family(forward->_src, family) || - !fw3_is_family(forward->_dest, family)) + if (!fw3_is_family(forward->_src, handle->family) || + !fw3_is_family(forward->_dest, handle->family)) { info(" ! Skipping due to different family of zone"); return; } - print_chain(forward); - fw3_format_comment("forwarding ", s, "->", d); - print_target(forward); + r = fw3_ipt_rule_new(handle); + fw3_ipt_rule_comment(r, "forwarding %s -> %s", s, d); + set_target(r, forward); + append_chain(r, forward); } void -fw3_print_forwards(enum fw3_table table, enum fw3_family family, - struct fw3_state *state) +fw3_print_forwards(struct fw3_ipt_handle *handle, struct fw3_state *state) { struct fw3_forward *forward; list_for_each_entry(forward, &state->forwards, list) - print_forward(table, family, forward); + print_forward(handle, forward); }