npfctl.h revision 1.6.4.4 1 1.6.4.4 yamt /* $NetBSD: npfctl.h,v 1.6.4.4 2013/01/16 05:34:10 yamt Exp $ */
2 1.1 rmind
3 1.1 rmind /*-
4 1.6.4.2 yamt * Copyright (c) 2009-2012 The NetBSD Foundation, Inc.
5 1.1 rmind * All rights reserved.
6 1.1 rmind *
7 1.1 rmind * Redistribution and use in source and binary forms, with or without
8 1.1 rmind * modification, are permitted provided that the following conditions
9 1.1 rmind * are met:
10 1.1 rmind * 1. Redistributions of source code must retain the above copyright
11 1.1 rmind * notice, this list of conditions and the following disclaimer.
12 1.1 rmind * 2. Redistributions in binary form must reproduce the above copyright
13 1.1 rmind * notice, this list of conditions and the following disclaimer in the
14 1.1 rmind * documentation and/or other materials provided with the distribution.
15 1.1 rmind *
16 1.1 rmind * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
17 1.1 rmind * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
18 1.1 rmind * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
19 1.1 rmind * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
20 1.1 rmind * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 1.1 rmind * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 1.1 rmind * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
23 1.1 rmind * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
24 1.1 rmind * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
25 1.1 rmind * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26 1.1 rmind * POSSIBILITY OF SUCH DAMAGE.
27 1.1 rmind */
28 1.1 rmind
29 1.1 rmind #ifndef _NPFCTL_H_
30 1.1 rmind #define _NPFCTL_H_
31 1.1 rmind
32 1.1 rmind #include <stdio.h>
33 1.1 rmind #include <stdbool.h>
34 1.6.4.2 yamt #include <inttypes.h>
35 1.6.4.3 yamt #include <assert.h>
36 1.6.4.4 yamt #include <util.h>
37 1.1 rmind
38 1.6 rmind #include <net/npf_ncode.h>
39 1.1 rmind #include <net/npf.h>
40 1.6 rmind
41 1.6 rmind #define _NPF_PRIVATE
42 1.6 rmind #include <npf.h>
43 1.1 rmind
44 1.6.4.2 yamt #include "npf_var.h"
45 1.1 rmind
46 1.1 rmind #define NPF_DEV_PATH "/dev/npf"
47 1.1 rmind #define NPF_CONF_PATH "/etc/npf.conf"
48 1.4 rmind #define NPF_SESSDB_PATH "/var/db/npf_sessions.db"
49 1.1 rmind
50 1.6.4.2 yamt typedef struct fam_addr_mask {
51 1.6.4.2 yamt sa_family_t fam_family;
52 1.6.4.2 yamt npf_addr_t fam_addr;
53 1.6.4.2 yamt npf_netmask_t fam_mask;
54 1.6.4.4 yamt unsigned long fam_ifindex;
55 1.6.4.2 yamt } fam_addr_mask_t;
56 1.6.4.2 yamt
57 1.6.4.4 yamt typedef struct ifnet_addr {
58 1.6.4.4 yamt unsigned long ifna_index;
59 1.6.4.4 yamt sa_family_t ifna_family;
60 1.6.4.4 yamt npfvar_t * ifna_filter;
61 1.6.4.4 yamt npfvar_t * ifna_addrs;
62 1.6.4.4 yamt } ifnet_addr_t;
63 1.6.4.4 yamt
64 1.6.4.2 yamt typedef struct port_range {
65 1.6.4.2 yamt in_port_t pr_start;
66 1.6.4.2 yamt in_port_t pr_end;
67 1.6.4.2 yamt } port_range_t;
68 1.6.4.2 yamt
69 1.6.4.3 yamt typedef struct addr_port {
70 1.6.4.3 yamt npfvar_t * ap_netaddr;
71 1.6.4.3 yamt npfvar_t * ap_portrange;
72 1.6.4.3 yamt } addr_port_t;
73 1.6.4.3 yamt
74 1.6.4.2 yamt typedef struct filt_opts {
75 1.6.4.3 yamt addr_port_t fo_from;
76 1.6.4.3 yamt addr_port_t fo_to;
77 1.6.4.2 yamt } filt_opts_t;
78 1.6.4.2 yamt
79 1.6.4.2 yamt typedef struct opt_proto {
80 1.6.4.2 yamt int op_proto;
81 1.6.4.2 yamt npfvar_t * op_opts;
82 1.6.4.2 yamt } opt_proto_t;
83 1.6.4.2 yamt
84 1.6.4.2 yamt typedef struct rule_group {
85 1.6.4.2 yamt const char * rg_name;
86 1.6.4.3 yamt uint32_t rg_attr;
87 1.6.4.2 yamt u_int rg_ifnum;
88 1.6.4.2 yamt } rule_group_t;
89 1.6.4.2 yamt
90 1.6.4.3 yamt typedef struct proc_call {
91 1.6.4.3 yamt const char * pc_name;
92 1.6.4.3 yamt npfvar_t * pc_opts;
93 1.6.4.3 yamt } proc_call_t;
94 1.6.4.3 yamt
95 1.6.4.3 yamt typedef struct proc_param {
96 1.6.4.3 yamt const char * pp_param;
97 1.6.4.3 yamt const char * pp_value;
98 1.6.4.3 yamt } proc_param_t;
99 1.6 rmind
100 1.6.4.2 yamt void yyerror(const char *, ...) __printflike(1, 2) __dead;
101 1.6.4.2 yamt
102 1.6.4.2 yamt void npfctl_print_error(const nl_error_t *);
103 1.6.4.3 yamt char * npfctl_print_addrmask(int, npf_addr_t *, npf_netmask_t);
104 1.6.4.2 yamt bool npfctl_table_exists_p(const char *);
105 1.6.4.3 yamt int npfctl_protono(const char *);
106 1.6.4.2 yamt in_port_t npfctl_portno(const char *);
107 1.6.4.3 yamt uint8_t npfctl_icmpcode(int, uint8_t, const char *);
108 1.6.4.3 yamt uint8_t npfctl_icmptype(int, const char *);
109 1.6.4.2 yamt unsigned long npfctl_find_ifindex(const char *);
110 1.6.4.4 yamt npfvar_t * npfctl_parse_ifnet(const char *, const int);
111 1.6.4.2 yamt npfvar_t * npfctl_parse_tcpflag(const char *);
112 1.6.4.2 yamt npfvar_t * npfctl_parse_table_id(const char *);
113 1.6.4.3 yamt npfvar_t * npfctl_parse_icmp(int, int, int);
114 1.6.4.2 yamt npfvar_t * npfctl_parse_port_range(in_port_t, in_port_t);
115 1.6.4.2 yamt npfvar_t * npfctl_parse_port_range_variable(const char *);
116 1.6.4.2 yamt npfvar_t * npfctl_parse_fam_addr_mask(const char *, const char *,
117 1.6.4.2 yamt unsigned long *);
118 1.6.4.3 yamt bool npfctl_parse_cidr(char *, fam_addr_mask_t *, int *);
119 1.6.4.3 yamt
120 1.6.4.3 yamt /*
121 1.6.4.3 yamt * NPF extension loading.
122 1.6.4.3 yamt */
123 1.6.4.3 yamt
124 1.6.4.3 yamt typedef struct npf_extmod npf_extmod_t;
125 1.6.4.3 yamt
126 1.6.4.3 yamt npf_extmod_t * npf_extmod_get(const char *, nl_ext_t **);
127 1.6.4.3 yamt int npf_extmod_param(npf_extmod_t *, nl_ext_t *,
128 1.6.4.3 yamt const char *, const char *);
129 1.6.4.2 yamt
130 1.6.4.2 yamt /*
131 1.6.4.2 yamt * N-code generation interface.
132 1.6.4.2 yamt */
133 1.1 rmind
134 1.6.4.2 yamt typedef struct nc_ctx nc_ctx_t;
135 1.1 rmind
136 1.6.4.2 yamt #define NC_MATCH_DST 0x01
137 1.6.4.2 yamt #define NC_MATCH_SRC 0x02
138 1.6.4.2 yamt
139 1.6.4.2 yamt #define NC_MATCH_TCP 0x04
140 1.6.4.2 yamt #define NC_MATCH_UDP 0x08
141 1.6.4.3 yamt #define NC_MATCH_ICMP 0x10
142 1.6.4.3 yamt #define NC_MATCH_ICMP6 0x20
143 1.6.4.2 yamt
144 1.6.4.2 yamt nc_ctx_t * npfctl_ncgen_create(void);
145 1.6.4.2 yamt void * npfctl_ncgen_complete(nc_ctx_t *, size_t *);
146 1.6.4.2 yamt void npfctl_ncgen_print(const void *, size_t);
147 1.6.4.2 yamt
148 1.6.4.2 yamt void npfctl_ncgen_group(nc_ctx_t *);
149 1.6.4.2 yamt void npfctl_ncgen_endgroup(nc_ctx_t *);
150 1.6.4.2 yamt
151 1.6.4.2 yamt void npfctl_gennc_v4cidr(nc_ctx_t *, int, const npf_addr_t *,
152 1.6.4.2 yamt const npf_netmask_t);
153 1.6.4.2 yamt void npfctl_gennc_v6cidr(nc_ctx_t *, int, const npf_addr_t *,
154 1.6.4.2 yamt const npf_netmask_t);
155 1.6.4.2 yamt void npfctl_gennc_ports(nc_ctx_t *, int, in_port_t, in_port_t);
156 1.6.4.2 yamt void npfctl_gennc_icmp(nc_ctx_t *, int, int);
157 1.6.4.3 yamt void npfctl_gennc_icmp6(nc_ctx_t *, int, int);
158 1.6.4.2 yamt void npfctl_gennc_tbl(nc_ctx_t *, int, u_int);
159 1.6.4.2 yamt void npfctl_gennc_tcpfl(nc_ctx_t *, uint8_t, uint8_t);
160 1.6.4.3 yamt void npfctl_gennc_proto(nc_ctx_t *ctx, uint8_t, uint8_t);
161 1.6.4.3 yamt
162 1.6.4.3 yamt /*
163 1.6.4.3 yamt * N-code disassembler.
164 1.6.4.3 yamt */
165 1.6.4.3 yamt
166 1.6.4.3 yamt typedef struct nc_inf nc_inf_t;
167 1.6.4.3 yamt
168 1.6.4.3 yamt nc_inf_t * npfctl_ncode_disinf(FILE *);
169 1.6.4.3 yamt int npfctl_ncode_disassemble(nc_inf_t *, const void *, size_t);
170 1.6.4.2 yamt
171 1.6.4.2 yamt /*
172 1.6.4.2 yamt * Configuration building interface.
173 1.6.4.2 yamt */
174 1.1 rmind
175 1.6.4.3 yamt #define NPFCTL_NAT_DYNAMIC 1
176 1.6.4.3 yamt #define NPFCTL_NAT_STATIC 2
177 1.6.4.2 yamt
178 1.6.4.2 yamt void npfctl_config_init(bool);
179 1.6.4.3 yamt int npfctl_config_send(int, const char *);
180 1.6.4.4 yamt nl_config_t * npfctl_config_ref(void);
181 1.6.4.3 yamt int npfctl_config_show(int);
182 1.6.4.3 yamt unsigned long npfctl_debug_addif(const char *);
183 1.6.4.2 yamt
184 1.6.4.2 yamt void npfctl_build_rproc(const char *, npfvar_t *);
185 1.6.4.2 yamt void npfctl_build_group(const char *, int, u_int);
186 1.6.4.2 yamt void npfctl_build_rule(int, u_int, sa_family_t,
187 1.6.4.2 yamt const opt_proto_t *, const filt_opts_t *, const char *);
188 1.6.4.3 yamt void npfctl_build_natseg(int, int, u_int, const addr_port_t *,
189 1.6.4.3 yamt const addr_port_t *, const filt_opts_t *);
190 1.6.4.2 yamt void npfctl_build_table(const char *, u_int, const char *);
191 1.1 rmind
192 1.1 rmind #endif
193