2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
22 static struct fw3_option forward_opts[] = {
23 FW3_OPT("name", string, forward, name),
24 FW3_OPT("family", family, forward, family),
26 FW3_OPT("src", device, forward, src),
27 FW3_OPT("dest", device, forward, dest),
32 fw3_load_forwards(struct fw3_state *state, struct uci_package *p)
34 struct uci_section *s;
35 struct uci_element *e;
36 struct fw3_forward *forward;
38 INIT_LIST_HEAD(&state->forwards);
40 uci_foreach_element(&p->sections, e)
42 s = uci_to_section(e);
44 if (strcmp(s->type, "forwarding"))
47 forward = malloc(sizeof(*forward));
52 memset(forward, 0, sizeof(*forward));
54 fw3_parse_options(forward, forward_opts, ARRAY_SIZE(forward_opts), s);
56 if (forward->src.invert || forward->dest.invert)
58 warn_elem(e, "must not have inverted 'src' or 'dest' options");
59 fw3_free_forward(forward);
62 else if (forward->src.set && !forward->src.any &&
63 !(forward->_src = fw3_lookup_zone(state, forward->src.name)))
65 warn_elem(e, "refers to not existing zone '%s'", forward->src.name);
66 fw3_free_forward(forward);
69 else if (forward->dest.set && !forward->dest.any &&
70 !(forward->_dest = fw3_lookup_zone(state, forward->dest.name)))
72 warn_elem(e, "refers to not existing zone '%s'", forward->dest.name);
73 fw3_free_forward(forward);
79 setbit(forward->_dest->has_dest_target, FW3_TARGET_ACCEPT);
82 (forward->_src->conntrack || forward->_dest->conntrack))
84 forward->_src->conntrack = forward->_dest->conntrack = true;
88 list_add_tail(&forward->list, &state->forwards);
95 print_chain(struct fw3_forward *forward)
97 if (forward->src.any || !forward->src.set)
98 fw3_pr("-A delegate_forward");
100 fw3_pr("-A zone_%s_forward", forward->src.name);
103 static void print_target(struct fw3_forward *forward)
105 if (forward->dest.any || !forward->dest.set)
106 fw3_pr(" -j ACCEPT\n");
108 fw3_pr(" -j zone_%s_dest_ACCEPT\n", forward->dest.name);
112 print_forward(enum fw3_table table, enum fw3_family family,
113 struct fw3_forward *forward)
117 if (table != FW3_TABLE_FILTER)
120 if (!fw3_is_family(forward, family) ||
121 (forward->_src && !fw3_is_family(forward->_src, family)) ||
122 (forward->_dest && !fw3_is_family(forward->_dest, family)))
125 s = forward->_src ? forward->_src->name : "*";
126 d = forward->_dest ? forward->_dest->name : "*";
129 info(" * Forward '%s'", forward->name);
131 info(" * Forward %s->%s", s, d);
133 print_chain(forward);
134 fw3_format_comment("forwarding ", s, "->", d);
135 print_target(forward);
139 fw3_print_forwards(enum fw3_table table, enum fw3_family family,
140 struct fw3_state *state)
142 struct fw3_forward *forward;
144 list_for_each_entry(forward, &state->forwards, list)
145 print_forward(table, family, forward);