anonfunc/xtables-addons
1
0
Fork 0
mirror of git://git.code.sf.net/p/xtables-addons/xtables-addons synced 2025-09-07 21:25:12 +02:00
Code Issues Releases Wiki Activity

xt_TEE: new loop detection logic

Browse Source
This commit is contained in:
Jan Engelhardt
2010-04-05 00:44:44 +02:00
parent a17203e036
commit fb4c49d794
2 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
doc/changelog.txt
View File

@@ -7,6 +7,7 @@ HEAD
- TEE: free skb when route lookup failed - TEE: free skb when route lookup failed
- TEE: do not limit use to mangle table - TEE: do not limit use to mangle table
- TEE: do not retain iif and mark on cloned packet - TEE: do not retain iif and mark on cloned packet
- TEE: new loop detection logic
Xtables-addons 1.24 (March 17 2010) Xtables-addons 1.24 (March 17 2010)

19
extensions/xt_TEE.c
View File

@@ -33,6 +33,7 @@ static struct nf_conn tee_track;
#include "compat_xtables.h" #include "compat_xtables.h"
#include "xt_TEE.h" #include "xt_TEE.h"
static bool tee_active[NR_CPUS];
static const union nf_inet_addr tee_zero_address; static const union nf_inet_addr tee_zero_address;
/* /*
@@ -135,7 +136,10 @@ tee_tg4(struct sk_buff **pskb, const struct xt_target_param *par)
const struct xt_tee_tginfo *info = par->targinfo; const struct xt_tee_tginfo *info = par->targinfo;
struct sk_buff *skb = *pskb; struct sk_buff *skb = *pskb;
struct iphdr *iph; struct iphdr *iph;
unsigned int cpu = smp_processor_id();
if (tee_active[cpu])
return XT_CONTINUE;
/* /*
* Copy the skb, and route the copy. Will later return %XT_CONTINUE for * Copy the skb, and route the copy. Will later return %XT_CONTINUE for
* the original skb, which should continue on its way as if nothing has * the original skb, which should continue on its way as if nothing has
@@ -190,9 +194,11 @@ tee_tg4(struct sk_buff **pskb, const struct xt_target_param *par)
* Also on purpose, no fragmentation is done, to preserve the * Also on purpose, no fragmentation is done, to preserve the
* packet as best as possible. * packet as best as possible.
*/ */
if (tee_tg_route4(skb, info)) if (tee_tg_route4(skb, info)) {
tee_active[cpu] = true;
tee_tg_send(skb); tee_tg_send(skb);
tee_active[cpu] = false;
}
return XT_CONTINUE; return XT_CONTINUE;
} }
@@ -233,7 +239,10 @@ tee_tg6(struct sk_buff **pskb, const struct xt_target_param *par)
{ {
const struct xt_tee_tginfo *info = par->targinfo; const struct xt_tee_tginfo *info = par->targinfo;
struct sk_buff *skb = *pskb; struct sk_buff *skb = *pskb;
unsigned int cpu = smp_processor_id();
if (tee_active[cpu])
return XT_CONTINUE;
if ((skb = skb_copy(skb, GFP_ATOMIC)) == NULL) if ((skb = skb_copy(skb, GFP_ATOMIC)) == NULL)
return XT_CONTINUE; return XT_CONTINUE;
@@ -248,9 +257,11 @@ tee_tg6(struct sk_buff **pskb, const struct xt_target_param *par)
struct ipv6hdr *iph = ipv6_hdr(skb); struct ipv6hdr *iph = ipv6_hdr(skb);
--iph->hop_limit; --iph->hop_limit;
} }
if (tee_tg_route6(skb, info)) if (tee_tg_route6(skb, info)) {
tee_active[cpu] = true;
tee_tg_send(skb); tee_tg_send(skb);
tee_active[cpu] = false;
}
return XT_CONTINUE; return XT_CONTINUE;
} }
#endif /* WITH_IPV6 */ #endif /* WITH_IPV6 */