Home | History | Annotate | Line # | Download | only in npfctl
npfctl.h revision 1.6.4.4
      1  1.6.4.4   yamt /*	$NetBSD: npfctl.h,v 1.6.4.4 2013/01/16 05:34:10 yamt Exp $	*/
      2      1.1  rmind 
      3      1.1  rmind /*-
      4  1.6.4.2   yamt  * Copyright (c) 2009-2012 The NetBSD Foundation, Inc.
      5      1.1  rmind  * All rights reserved.
      6      1.1  rmind  *
      7      1.1  rmind  * Redistribution and use in source and binary forms, with or without
      8      1.1  rmind  * modification, are permitted provided that the following conditions
      9      1.1  rmind  * are met:
     10      1.1  rmind  * 1. Redistributions of source code must retain the above copyright
     11      1.1  rmind  *    notice, this list of conditions and the following disclaimer.
     12      1.1  rmind  * 2. Redistributions in binary form must reproduce the above copyright
     13      1.1  rmind  *    notice, this list of conditions and the following disclaimer in the
     14      1.1  rmind  *    documentation and/or other materials provided with the distribution.
     15      1.1  rmind  *
     16      1.1  rmind  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     17      1.1  rmind  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     18      1.1  rmind  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     19      1.1  rmind  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     20      1.1  rmind  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     21      1.1  rmind  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     22      1.1  rmind  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     23      1.1  rmind  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     24      1.1  rmind  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     25      1.1  rmind  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     26      1.1  rmind  * POSSIBILITY OF SUCH DAMAGE.
     27      1.1  rmind  */
     28      1.1  rmind 
     29      1.1  rmind #ifndef _NPFCTL_H_
     30      1.1  rmind #define _NPFCTL_H_
     31      1.1  rmind 
     32      1.1  rmind #include <stdio.h>
     33      1.1  rmind #include <stdbool.h>
     34  1.6.4.2   yamt #include <inttypes.h>
     35  1.6.4.3   yamt #include <assert.h>
     36  1.6.4.4   yamt #include <util.h>
     37      1.1  rmind 
     38      1.6  rmind #include <net/npf_ncode.h>
     39      1.1  rmind #include <net/npf.h>
     40      1.6  rmind 
     41      1.6  rmind #define	_NPF_PRIVATE
     42      1.6  rmind #include <npf.h>
     43      1.1  rmind 
     44  1.6.4.2   yamt #include "npf_var.h"
     45      1.1  rmind 
     46      1.1  rmind #define	NPF_DEV_PATH	"/dev/npf"
     47      1.1  rmind #define	NPF_CONF_PATH	"/etc/npf.conf"
     48      1.4  rmind #define	NPF_SESSDB_PATH	"/var/db/npf_sessions.db"
     49      1.1  rmind 
     50  1.6.4.2   yamt typedef struct fam_addr_mask {
     51  1.6.4.2   yamt 	sa_family_t	fam_family;
     52  1.6.4.2   yamt 	npf_addr_t	fam_addr;
     53  1.6.4.2   yamt 	npf_netmask_t	fam_mask;
     54  1.6.4.4   yamt 	unsigned long	fam_ifindex;
     55  1.6.4.2   yamt } fam_addr_mask_t;
     56  1.6.4.2   yamt 
     57  1.6.4.4   yamt typedef struct ifnet_addr {
     58  1.6.4.4   yamt 	unsigned long	ifna_index;
     59  1.6.4.4   yamt 	sa_family_t	ifna_family;
     60  1.6.4.4   yamt 	npfvar_t *	ifna_filter;
     61  1.6.4.4   yamt 	npfvar_t *	ifna_addrs;
     62  1.6.4.4   yamt } ifnet_addr_t;
     63  1.6.4.4   yamt 
     64  1.6.4.2   yamt typedef struct port_range {
     65  1.6.4.2   yamt 	in_port_t	pr_start;
     66  1.6.4.2   yamt 	in_port_t	pr_end;
     67  1.6.4.2   yamt } port_range_t;
     68  1.6.4.2   yamt 
     69  1.6.4.3   yamt typedef struct addr_port {
     70  1.6.4.3   yamt 	npfvar_t *	ap_netaddr;
     71  1.6.4.3   yamt 	npfvar_t *	ap_portrange;
     72  1.6.4.3   yamt } addr_port_t;
     73  1.6.4.3   yamt 
     74  1.6.4.2   yamt typedef struct filt_opts {
     75  1.6.4.3   yamt 	addr_port_t	fo_from;
     76  1.6.4.3   yamt 	addr_port_t	fo_to;
     77  1.6.4.2   yamt } filt_opts_t;
     78  1.6.4.2   yamt 
     79  1.6.4.2   yamt typedef struct opt_proto {
     80  1.6.4.2   yamt 	int		op_proto;
     81  1.6.4.2   yamt 	npfvar_t *	op_opts;
     82  1.6.4.2   yamt } opt_proto_t;
     83  1.6.4.2   yamt 
     84  1.6.4.2   yamt typedef struct rule_group {
     85  1.6.4.2   yamt 	const char *	rg_name;
     86  1.6.4.3   yamt 	uint32_t	rg_attr;
     87  1.6.4.2   yamt 	u_int		rg_ifnum;
     88  1.6.4.2   yamt } rule_group_t;
     89  1.6.4.2   yamt 
     90  1.6.4.3   yamt typedef struct proc_call {
     91  1.6.4.3   yamt 	const char *	pc_name;
     92  1.6.4.3   yamt 	npfvar_t *	pc_opts;
     93  1.6.4.3   yamt } proc_call_t;
     94  1.6.4.3   yamt 
     95  1.6.4.3   yamt typedef struct proc_param {
     96  1.6.4.3   yamt 	const char *	pp_param;
     97  1.6.4.3   yamt 	const char *	pp_value;
     98  1.6.4.3   yamt } proc_param_t;
     99      1.6  rmind 
    100  1.6.4.2   yamt void		yyerror(const char *, ...) __printflike(1, 2) __dead;
    101  1.6.4.2   yamt 
    102  1.6.4.2   yamt void		npfctl_print_error(const nl_error_t *);
    103  1.6.4.3   yamt char *		npfctl_print_addrmask(int, npf_addr_t *, npf_netmask_t);
    104  1.6.4.2   yamt bool		npfctl_table_exists_p(const char *);
    105  1.6.4.3   yamt int		npfctl_protono(const char *);
    106  1.6.4.2   yamt in_port_t	npfctl_portno(const char *);
    107  1.6.4.3   yamt uint8_t		npfctl_icmpcode(int, uint8_t, const char *);
    108  1.6.4.3   yamt uint8_t		npfctl_icmptype(int, const char *);
    109  1.6.4.2   yamt unsigned long   npfctl_find_ifindex(const char *);
    110  1.6.4.4   yamt npfvar_t *	npfctl_parse_ifnet(const char *, const int);
    111  1.6.4.2   yamt npfvar_t *	npfctl_parse_tcpflag(const char *);
    112  1.6.4.2   yamt npfvar_t *	npfctl_parse_table_id(const char *);
    113  1.6.4.3   yamt npfvar_t * 	npfctl_parse_icmp(int, int, int);
    114  1.6.4.2   yamt npfvar_t *	npfctl_parse_port_range(in_port_t, in_port_t);
    115  1.6.4.2   yamt npfvar_t *	npfctl_parse_port_range_variable(const char *);
    116  1.6.4.2   yamt npfvar_t *	npfctl_parse_fam_addr_mask(const char *, const char *,
    117  1.6.4.2   yamt 		    unsigned long *);
    118  1.6.4.3   yamt bool		npfctl_parse_cidr(char *, fam_addr_mask_t *, int *);
    119  1.6.4.3   yamt 
    120  1.6.4.3   yamt /*
    121  1.6.4.3   yamt  * NPF extension loading.
    122  1.6.4.3   yamt  */
    123  1.6.4.3   yamt 
    124  1.6.4.3   yamt typedef struct npf_extmod npf_extmod_t;
    125  1.6.4.3   yamt 
    126  1.6.4.3   yamt npf_extmod_t *	npf_extmod_get(const char *, nl_ext_t **);
    127  1.6.4.3   yamt int		npf_extmod_param(npf_extmod_t *, nl_ext_t *,
    128  1.6.4.3   yamt 		    const char *, const char *);
    129  1.6.4.2   yamt 
    130  1.6.4.2   yamt /*
    131  1.6.4.2   yamt  * N-code generation interface.
    132  1.6.4.2   yamt  */
    133      1.1  rmind 
    134  1.6.4.2   yamt typedef struct nc_ctx nc_ctx_t;
    135      1.1  rmind 
    136  1.6.4.2   yamt #define	NC_MATCH_DST		0x01
    137  1.6.4.2   yamt #define	NC_MATCH_SRC		0x02
    138  1.6.4.2   yamt 
    139  1.6.4.2   yamt #define	NC_MATCH_TCP		0x04
    140  1.6.4.2   yamt #define	NC_MATCH_UDP		0x08
    141  1.6.4.3   yamt #define	NC_MATCH_ICMP		0x10
    142  1.6.4.3   yamt #define	NC_MATCH_ICMP6		0x20
    143  1.6.4.2   yamt 
    144  1.6.4.2   yamt nc_ctx_t *	npfctl_ncgen_create(void);
    145  1.6.4.2   yamt void *		npfctl_ncgen_complete(nc_ctx_t *, size_t *);
    146  1.6.4.2   yamt void		npfctl_ncgen_print(const void *, size_t);
    147  1.6.4.2   yamt 
    148  1.6.4.2   yamt void		npfctl_ncgen_group(nc_ctx_t *);
    149  1.6.4.2   yamt void		npfctl_ncgen_endgroup(nc_ctx_t *);
    150  1.6.4.2   yamt 
    151  1.6.4.2   yamt void		npfctl_gennc_v4cidr(nc_ctx_t *, int, const npf_addr_t *,
    152  1.6.4.2   yamt 		    const npf_netmask_t);
    153  1.6.4.2   yamt void		npfctl_gennc_v6cidr(nc_ctx_t *, int, const npf_addr_t *,
    154  1.6.4.2   yamt 		    const npf_netmask_t);
    155  1.6.4.2   yamt void		npfctl_gennc_ports(nc_ctx_t *, int, in_port_t, in_port_t);
    156  1.6.4.2   yamt void		npfctl_gennc_icmp(nc_ctx_t *, int, int);
    157  1.6.4.3   yamt void		npfctl_gennc_icmp6(nc_ctx_t *, int, int);
    158  1.6.4.2   yamt void		npfctl_gennc_tbl(nc_ctx_t *, int, u_int);
    159  1.6.4.2   yamt void		npfctl_gennc_tcpfl(nc_ctx_t *, uint8_t, uint8_t);
    160  1.6.4.3   yamt void		npfctl_gennc_proto(nc_ctx_t *ctx, uint8_t, uint8_t);
    161  1.6.4.3   yamt 
    162  1.6.4.3   yamt /*
    163  1.6.4.3   yamt  * N-code disassembler.
    164  1.6.4.3   yamt  */
    165  1.6.4.3   yamt 
    166  1.6.4.3   yamt typedef struct nc_inf nc_inf_t;
    167  1.6.4.3   yamt 
    168  1.6.4.3   yamt nc_inf_t *	npfctl_ncode_disinf(FILE *);
    169  1.6.4.3   yamt int		npfctl_ncode_disassemble(nc_inf_t *, const void *, size_t);
    170  1.6.4.2   yamt 
    171  1.6.4.2   yamt /*
    172  1.6.4.2   yamt  * Configuration building interface.
    173  1.6.4.2   yamt  */
    174      1.1  rmind 
    175  1.6.4.3   yamt #define	NPFCTL_NAT_DYNAMIC	1
    176  1.6.4.3   yamt #define	NPFCTL_NAT_STATIC	2
    177  1.6.4.2   yamt 
    178  1.6.4.2   yamt void		npfctl_config_init(bool);
    179  1.6.4.3   yamt int		npfctl_config_send(int, const char *);
    180  1.6.4.4   yamt nl_config_t *	npfctl_config_ref(void);
    181  1.6.4.3   yamt int		npfctl_config_show(int);
    182  1.6.4.3   yamt unsigned long	npfctl_debug_addif(const char *);
    183  1.6.4.2   yamt 
    184  1.6.4.2   yamt void		npfctl_build_rproc(const char *, npfvar_t *);
    185  1.6.4.2   yamt void		npfctl_build_group(const char *, int, u_int);
    186  1.6.4.2   yamt void		npfctl_build_rule(int, u_int, sa_family_t,
    187  1.6.4.2   yamt 		    const opt_proto_t *, const filt_opts_t *, const char *);
    188  1.6.4.3   yamt void		npfctl_build_natseg(int, int, u_int, const addr_port_t *,
    189  1.6.4.3   yamt 		    const addr_port_t *, const filt_opts_t *);
    190  1.6.4.2   yamt void		npfctl_build_table(const char *, u_int, const char *);
    191      1.1  rmind 
    192      1.1  rmind #endif
    193