xref: /src/sys/net/pfil.c

/*	$NetBSD: pfil.c,v 1.4 1996/10/13 02:11:08 christos Exp $	*/

/*
 * Copyright (c) 1996 Matthew R. Green
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *      This product includes software developed by Matthew R. Green for
 *      the NetBSD Project.
 * 4. The name of the author may not be used to endorse or promote products
 *    derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include <sys/param.h>
#include <sys/errno.h>
#include <sys/malloc.h>
#include <sys/socket.h>
#include <sys/socketvar.h>
#include <sys/systm.h>
#include <sys/proc.h>
#include <sys/queue.h>

#include <net/if.h>
#include <net/pfil.h>

typedef LIST_HEAD(, packet_filter_hook) pfil_list_t;
pfil_list_t pfil_in_list;
pfil_list_t pfil_out_list;
pfil_list_t pfil_bad_list;
static int done_pfil_init;

void pfil_init __P((void));
void pfil_list_add(pfil_list_t *,
    int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)), int);
void pfil_list_remove(struct packet_filter_hook *,
    int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)));

void
pfil_init()
{
	LIST_INIT(&pfil_in_list);
	LIST_INIT(&pfil_out_list);
	LIST_INIT(&pfil_bad_list);
	done_pfil_init = 1;
}

/*
 * pfil_add_hook() adds a function to the packet filter hook.  the
 * flags are:
 *	PFIL_IN		call me on incoming packets
 *	PFIL_OUT	call me on outgoing packets
 *	PFIL_BAD	call me when rejecting a packet (that was
 *			not already reject by in/out filters).
 *	PFIL_ALL	call me on all of the above
 *	PFIL_WAITOK	OK to call malloc with M_WAITOK.
 */
void
pfil_add_hook(func, flags)
	int	(*func) __P((void *, int, struct ifnet *, int,
			     struct mbuf **));
	int	flags;
{

	if (done_pfil_init == 0)
		pfil_init();

	if (flags & PFIL_IN)
		pfil_list_add(&pfil_in_list, func, flags);
	if (flags & PFIL_OUT)
		pfil_list_add(&pfil_out_list, func, flags);
	if (flags & PFIL_BAD)
		pfil_list_add(&pfil_bad_list, func, flags);
}

void
pfil_list_add(list, func, flags)
	pfil_list_t *list;
	int	(*func) __P((void *, int, struct ifnet *, int,
			     struct mbuf **));
	int	flags;
{
	struct packet_filter_hook *pfh;

	pfh = (struct packet_filter_hook *)malloc(sizeof(*pfh), M_IFADDR,
	    flags & PFIL_WAITOK ? M_WAITOK : M_NOWAIT);
	if (pfh == NULL)
		panic("no memory for packet filter hook");

	pfh->pfil_func = func;
	LIST_INSERT_HEAD(list, pfh, pfil_link);
}

/*
 * pfil_remove_hook removes a specific function from the packet filter
 * hook list.
 */
void
pfil_remove_hook(func, flags)
	int	(*func) __P((void *, int, struct ifnet *, int,
			     struct mbuf **));
	int	flags;
{

	if (done_pfil_init == 0)
		pfil_init();

	if (flags & PFIL_IN)
		pfil_list_remove(pfil_in_list.lh_first, func);
	if (flags & PFIL_OUT)
		pfil_list_remove(pfil_out_list.lh_first, func);
	if (flags & PFIL_BAD)
		pfil_list_remove(pfil_bad_list.lh_first, func);
}

/*
 * pfil_list_remove is an internal function that takes a function off the
 * specified list.
 */
void
pfil_list_remove(list, func)
	struct packet_filter_hook *list;
	int	(*func) __P((void *, int, struct ifnet *, int,
			     struct mbuf **));
{
	struct packet_filter_hook *pfh;

	for (pfh = list; pfh; pfh = pfh->pfil_link.le_next)
		if (pfh->pfil_func == func) {
			LIST_REMOVE(pfh, pfil_link);
			free(pfh, M_IFADDR);
			return;
		}
	printf("pfil_list_remove:  no function on list\n");
#ifdef DIAGNOSTIC
	panic("pfil_list_remove");
#endif
}

struct packet_filter_hook *
pfil_hook_get(flag)
	int flag;
{
	if (done_pfil_init)
		switch (flag) {
		case PFIL_IN:
			return (pfil_in_list.lh_first);
		case PFIL_OUT:
			return (pfil_out_list.lh_first);
		case PFIL_BAD:
			return (pfil_bad_list.lh_first);
		}
	return NULL;
}