2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
32 #include <libubox/list.h>
36 #define FW3_STATEFILE "/var/run/fw3.state"
37 #define FW3_LOCKFILE "/var/run/fw3.lock"
39 extern bool fw3_pr_debug;
41 void warn_elem(struct uci_element *e, const char *format, ...);
42 void warn(const char *format, ...);
43 void error(const char *format, ...);
44 void info(const char *format, ...);
46 #define setbit(field, flag) field |= (1 << (flag))
47 #define delbit(field, flag) field &= ~(1 << (flag))
48 #define hasbit(field, flag) (field & (1 << (flag)))
50 #define set(field, family, flag) setbit(field[family == FW3_FAMILY_V6], flag)
51 #define del(field, family, flag) delbit(field[family == FW3_FAMILY_V6], flag)
52 #define has(field, family, flag) hasbit(field[family == FW3_FAMILY_V6], flag)
54 #define fw3_foreach(p, h) \
55 for (p = list_empty(h) ? NULL : list_first_entry(h, typeof(*p), list); \
56 list_empty(h) ? (p == NULL) : (&p->list != (h)); \
57 p = list_empty(h) ? list_first_entry(h, typeof(*p), list) \
58 : list_entry(p->list.next, typeof(*p), list))
60 #define fw3_is_family(p, f) \
61 (!p || (p)->family == FW3_FAMILY_ANY || (p)->family == f)
63 #define fw3_no_family(flags) \
64 (!(flags & ((1 << FW3_FAMILY_V4) | (1 << FW3_FAMILY_V6))))
66 #define fw3_no_table(flags) \
67 (!(flags & ((1<<FW3_TABLE_FILTER)|(1<<FW3_TABLE_NAT)| \
68 (1<<FW3_TABLE_MANGLE)|(1<<FW3_TABLE_RAW))))
71 const char * fw3_find_command(const char *cmd);
73 bool fw3_stdout_pipe(void);
74 bool __fw3_command_pipe(bool silent, const char *command, ...);
75 #define fw3_command_pipe(...) __fw3_command_pipe(__VA_ARGS__, NULL)
77 void fw3_command_close(void);
78 void fw3_pr(const char *fmt, ...);
80 bool fw3_has_table(bool ipv6, const char *table);
83 void fw3_unlock(void);
86 enum fw3_statefile_type
88 FW3_TYPE_DEFAULTS = 0,
94 bool fw3_read_statefile(void *state);
95 void fw3_write_statefile(void *state);
97 void fw3_set_running(void *object, struct list_head *dest);
99 void fw3_free_object(void *obj, const void *opts);
102 struct fw3_rule_spec {
109 bool fw3_pr_rulespec(int table, int family, uint32_t *flags, uint32_t mask,
110 const struct fw3_rule_spec *r, const char *fmt, ...);