2 * IPv6 raw table, a port of the IPv4 raw table to IPv6
4 * Copyright (C) 2003 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
6 #include <linux/module.h>
7 #include <linux/netfilter_ipv6/ip6_tables.h>
9 #define RAW_VALID_HOOKS ((1 << NF_IP6_PRE_ROUTING) | (1 << NF_IP6_LOCAL_OUT))
12 #define DEBUGP(x, args...) printk(KERN_DEBUG x, ## args)
14 #define DEBUGP(x, args...)
19 struct ip6t_replace repl;
20 struct ip6t_standard entries[2];
21 struct ip6t_error term;
22 } initial_table __initdata = {
25 .valid_hooks = RAW_VALID_HOOKS,
27 .size = sizeof(struct ip6t_standard) * 2 + sizeof(struct ip6t_error),
29 [NF_IP6_PRE_ROUTING] = 0,
30 [NF_IP6_LOCAL_OUT] = sizeof(struct ip6t_standard)
33 [NF_IP6_PRE_ROUTING] = 0,
34 [NF_IP6_LOCAL_OUT] = sizeof(struct ip6t_standard)
38 IP6T_STANDARD_INIT(NF_ACCEPT), /* PRE_ROUTING */
39 IP6T_STANDARD_INIT(NF_ACCEPT), /* LOCAL_OUT */
41 .term = IP6T_ERROR_INIT, /* ERROR */
44 static struct xt_table packet_raw = {
46 .valid_hooks = RAW_VALID_HOOKS,
47 .lock = RW_LOCK_UNLOCKED,
52 /* The work comes in here from netfilter.c. */
54 ip6t_hook(unsigned int hook,
55 struct sk_buff **pskb,
56 const struct net_device *in,
57 const struct net_device *out,
58 int (*okfn)(struct sk_buff *))
60 return ip6t_do_table(pskb, hook, in, out, &packet_raw);
63 static struct nf_hook_ops ip6t_ops[] = {
67 .hooknum = NF_IP6_PRE_ROUTING,
68 .priority = NF_IP6_PRI_FIRST,
74 .hooknum = NF_IP6_LOCAL_OUT,
75 .priority = NF_IP6_PRI_FIRST,
80 static int __init ip6table_raw_init(void)
85 ret = ip6t_register_table(&packet_raw, &initial_table.repl);
90 ret = nf_register_hooks(ip6t_ops, ARRAY_SIZE(ip6t_ops));
97 ip6t_unregister_table(&packet_raw);
101 static void __exit ip6table_raw_fini(void)
103 nf_unregister_hooks(ip6t_ops, ARRAY_SIZE(ip6t_ops));
104 ip6t_unregister_table(&packet_raw);
107 module_init(ip6table_raw_init);
108 module_exit(ip6table_raw_fini);
109 MODULE_LICENSE("GPL");