1 /* Kernel module to match EUI64 address parameters. */
2 #include <linux/module.h>
3 #include <linux/skbuff.h>
4 #include <linux/ipv6.h>
5 #include <linux/if_ether.h>
7 #include <linux/netfilter_ipv6/ip6_tables.h>
10 match(const struct sk_buff *skb,
11 const struct net_device *in,
12 const struct net_device *out,
13 const void *matchinfo,
20 unsigned char eui64[8];
23 if ( !(skb->mac.raw >= skb->head
24 && (skb->mac.raw + ETH_HLEN) <= skb->data)
30 memset(eui64, 0, sizeof(eui64));
32 if (skb->mac.ethernet->h_proto == ntohs(ETH_P_IPV6)) {
33 if (skb->nh.ipv6h->version == 0x6) {
34 memcpy(eui64, skb->mac.ethernet->h_source, 3);
35 memcpy(eui64 + 5, skb->mac.ethernet->h_source + 3, 3);
41 while ((skb->nh.ipv6h->saddr.in6_u.u6_addr8[8+i] ==
42 eui64[i]) && (i<8)) i++;
53 ip6t_eui64_checkentry(const char *tablename,
54 const struct ip6t_ip6 *ip,
56 unsigned int matchsize,
57 unsigned int hook_mask)
60 & ~((1 << NF_IP6_PRE_ROUTING) | (1 << NF_IP6_LOCAL_IN) |
61 (1 << NF_IP6_PRE_ROUTING) )) {
62 printk("ip6t_eui64: only valid for PRE_ROUTING, LOCAL_IN or FORWARD.\n");
66 if (matchsize != IP6T_ALIGN(sizeof(int)))
72 static struct ip6t_match eui64_match
73 = { { NULL, NULL }, "eui64", &match, &ip6t_eui64_checkentry, NULL, THIS_MODULE };
75 static int __init init(void)
77 return ip6t_register_match(&eui64_match);
80 static void __exit fini(void)
82 ip6t_unregister_match(&eui64_match);
87 MODULE_DESCRIPTION("IPv6 EUI64 address checking match");
88 MODULE_LICENSE("GPL");
89 MODULE_AUTHOR("Andras Kis-Szabo <kisza@sch.bme.hu>");