hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openwrt/target/linux/lantiq/files/net/ipv4/svip_nat.c

1570 lines
41 KiB
C
Raw Blame History

/******************************************************************************
Copyright (c) 2009
Lantiq Deutschland GmbH
Am Campeon 3; 81726 Munich, Germany
THE DELIVERY OF THIS SOFTWARE AS WELL AS THE HEREBY GRANTED NON-EXCLUSIVE,
WORLDWIDE LICENSE TO USE, COPY, MODIFY, DISTRIBUTE AND SUBLICENSE THIS
SOFTWARE IS FREE OF CHARGE.
THE LICENSED SOFTWARE IS PROVIDED "AS IS" AND INFINEON EXPRESSLY DISCLAIMS
ALL REPRESENTATIONS AND WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING
WITHOUT LIMITATION, WARRANTIES OR REPRESENTATIONS OF WORKMANSHIP,
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, DURABILITY, THAT THE
OPERATING OF THE LICENSED SOFTWARE WILL BE ERROR FREE OR FREE OF ANY THIRD
PARTY CLAIMS, INCLUDING WITHOUT LIMITATION CLAIMS OF THIRD PARTY INTELLECTUAL
PROPERTY INFRINGEMENT.
EXCEPT FOR ANY LIABILITY DUE TO WILFUL ACTS OR GROSS NEGLIGENCE AND EXCEPT
FOR ANY PERSONAL INJURY INFINEON SHALL IN NO EVENT BE LIABLE FOR ANY CLAIM
OR DAMAGES OF ANY KIND, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.
****************************************************************************
Description : This file contains implementation of Custom NAT function
for Infineon's VINETIC-SVIP16
*******************************************************************************/
#include <linux/module.h>
#include <linux/netfilter_ipv4.h>
#include <linux/if_ether.h>
#include <linux/netdevice.h>
#include <linux/inetdevice.h>
#include <linux/in.h>
#include <linux/ip.h>
#include <linux/if_vlan.h>
#include <linux/udp.h>
#include <linux/kernel.h>
#include <linux/version.h>
#include <linux/proc_fs.h>
#include <linux/in6.h> /* just to shut up a warning */
#include <linux/miscdevice.h>
#include <asm/checksum.h>
#include <linux/svip_nat.h>
MODULE_AUTHOR("Lantiq Deutschland GmbH");
MODULE_DESCRIPTION("SVIP Network Address Translation module");
MODULE_LICENSE("GPL");
#define SVIP_NAT_INFO_STR "@(#)SVIP NAT, version "SVIP_NAT_VERSION
/** maximum voice packet channels possible on the SVIP LC system
(equals maximum number of Codec channels possible) */
#define SVIP_SYS_CODEC_NUM ((SVIP_SYS_NUM) * (SVIP_CODEC_NUM))
/** end UDP port number of the SVIP Linecard System */
#define SVIP_UDP_TO ((SVIP_UDP_FROM) + (SVIP_SYS_CODEC_NUM) - 1)
/** end UDP port number of the Master SVIP in SVIP Linecard System */
#define SVIP_UDP_TO_VOFW0 ((SVIP_UDP_FROM) + (SVIP_CODEC_NUM) - 1)
#define SVIP_PORT_INRANGE(nPort) \
((nPort) >= (SVIP_UDP_FROM) && (nPort) <= (SVIP_UDP_TO))
#define SVIP_PORT_INDEX(nPort) (nPort - SVIP_UDP_FROM)
#define SVIP_NET_DEV_ETH0_IDX 0
#define SVIP_NET_DEV_VETH0_IDX 1
#define SVIP_NET_DEV_LO_IDX 2
#define SVIP_NET_DEV_ETH0_NAME "eth0"
#define SVIP_NET_DEV_ETH1_NAME "eth1"
#define SVIP_NET_DEV_VETH1_NAME "veth0"
#define SVIP_NET_DEV_LO_NAME "lo"
#define SVIP_NAT_STATS_LOC2REM 0
#define SVIP_NAT_STATS_REM2LOC 1
#define SVIP_NAT_STATS_TYPES 2
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
#define SVIP_NAT_FOR_EACH_NETDEV(d) for_each_netdev(&init_net, dev)
#define SVIP_NAT_IP_HDR(ethhdr) ip_hdr(ethhdr)
#else
#define SVIP_NAT_FOR_EACH_NETDEV(d) for(d=dev_base; dev; dev = dev->next)
#define SVIP_NAT_IP_HDR(ethhdr) (ethhdr)->nh.iph
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24) */
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
#define SVIP_NAT_SKB_MAC_HEADER(ethhdr) (ethhdr)->mac.ethernet
#elif LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
#define SVIP_NAT_SKB_MAC_HEADER(ethhdr) (ethhdr)->mac.raw
#else
#define SVIP_NAT_SKB_MAC_HEADER(ethhdr) skb_mac_header(ethhdr)
#endif
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
#define VLAN_DEV_REAL_DEV(dev) vlan_dev_real_dev(dev)
#define VLAN_DEV_VLAN_ID(dev) vlan_dev_vlan_id(dev)
#else
#define VLAN_DEV_REAL_DEV(dev) (VLAN_DEV_INFO(dev)->real_dev)
#define VLAN_DEV_VLAN_ID(dev) (VLAN_DEV_INFO(dev)->vlan_id)
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24) */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0))
#define MOD_INC_USE_COUNT
#define MOD_DEC_USE_COUNT
#endif
#if ! ((LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)) && \
(defined(CONFIG_VLAN_8021Q) || defined(CONFIG_VLAN_8021Q_MODULE)))
#define VLAN_8021Q_UNUSED
#endif
extern spinlock_t vlan_group_lock;
extern struct net_device *__vlan_find_dev_deep(struct net_device *real_dev, unsigned short VID);
typedef struct SVIP_NAT_stats
{
unsigned long inPackets;
unsigned long outPackets;
unsigned long outErrors;
} SVIP_NAT_stats_t;
typedef struct SVIP_NAT_table_entry
{
SVIP_NAT_IO_Rule_t natRule;
SVIP_NAT_stats_t natStats[SVIP_NAT_STATS_TYPES];
} SVIP_NAT_table_entry_t;
/* pointer to the SVIP NAT table */
static SVIP_NAT_table_entry_t *pNatTable = NULL;
struct net_device *net_devs[3];
static u32 *paddr_eth0;
static u32 *paddr_eth0_0;
static u32 *paddr_veth0;
static u32 *pmask_veth0;
static struct semaphore *sem_nat_tbl_access;
static int proc_read_in_progress = 0;
static int nDeviceOpen = 0;
/* saves the NAT table index between subsequent invocation */
static int nProcReadIdx = 0;
static long SVIP_NAT_device_ioctl(struct file *,unsigned int ,unsigned long);
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,2,0)
static int SVIP_NAT_device_release (struct inode *,struct file *);
#else
static void SVIP_NAT_device_release (struct inode *,struct file *);
#endif
static int SVIP_NAT_device_open (struct inode *,struct file *);
/* This structure holds the interface functions supported by
the SVIP NAT configuration device. */
struct file_operations SVIP_NAT_Fops = {
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,4,0)
owner: THIS_MODULE,
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2,4,0) */
llseek: NULL, /* seek */
read: NULL,
write: NULL,
readdir: NULL, /* readdir */
poll: NULL, /* select */
unlocked_ioctl: SVIP_NAT_device_ioctl, /* ioctl */
mmap: NULL, /* mmap */
open: SVIP_NAT_device_open, /* open, */
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,2,0)
flush: NULL, /* flush */
#endif
release: SVIP_NAT_device_release /* close */
};
/** Structure holding MISC module operations */
static struct miscdevice SVIP_NAT_miscdev =
{
minor: MINOR_NUM_SVIP_NAT,
name: SVIP_NAT_DEVICE_NAME,
fops: &SVIP_NAT_Fops
};
#ifdef CONFIG_SVIP_FW_PKT_SNIFFER
int nSVIP_NAT_Sniffer;
unsigned char pSVIP_NAT_SnifferMAC[ETH_ALEN];
int nSVIP_NAT_SnifferMacSet;
#endif
/******************************************************************************/
/**
Function to read /proc/net/svip_nat/nat proc entry
\arguments
page - pointer to page buffer
start - pointer to start address pointer
off - offset
count - maximum data length to read
eof - end of file flag
data - proc read data (provided by the function
pointed to by data)
\return
length of read data
\remarks:
Each call of this routine forces a copy_to_user of the data returned by
'fn'. This routine will be called by the user until 'len = 0'.
****************************************************************************/
static int SVIP_NAT_ProcRead (char *page, char **start, off_t off,
int count, int *eof, void *data)
{
unsigned long flags;
int (*fn)(char *buf, int size);
int len;
/* If the NAT table index is negative, the reading has completed */
if (nProcReadIdx < 0)
{
nProcReadIdx = 0;
*eof = 1;
proc_read_in_progress = 0;
up(sem_nat_tbl_access);
return 0;
}
local_irq_save(flags);
if (!proc_read_in_progress)
{
proc_read_in_progress = 1;
local_irq_restore(flags);
/* we use this semaphore in order to ensure no other party(could be ioctl
FIO_SVIP_NAT_RULE_LIST), uses function SVIP_NAT_ProcReadNAT(), during
the time read of the proc file takes place */
down(sem_nat_tbl_access);
}
else
{
local_irq_restore(flags);
}
if (data != NULL)
{
fn = data;
len = fn (page, count);
/* In this setup each read of the proc entries returns the read data by
'fn' to the user. The user keeps issuing read requests as long as the
returned value of 'len' is greater than zero. */
*eof = 1;
*start = page;
}
else
{
len = 0;
}
return len;
}
#ifdef CONFIG_SVIP_FW_PKT_SNIFFER
/**
Function to read remaining proc entries
*/
static int SVIP_NAT_ProcReadGen (char *page, char **start, off_t off,
int count, int *eof, void *data)
{
int (*fn)(char *buf, int size);
int len = 0;
MOD_INC_USE_COUNT;
if (data == NULL)
{
MOD_DEC_USE_COUNT;
return 0;
}
fn = data;
len = fn (page, count);
if (len <= off + count)
{
*eof = 1;
}
*start = page + off;
len -= off;
if (len > count)
{
len = count;
}
if (len < 0)
{
len = 0;
}
MOD_DEC_USE_COUNT;
return len;
}
#endif
/******************************************************************************/
/**
Function for setting up /proc/net/svip_nat read data
\arguments
buf - pointer to read buffer
count - size of read buffer
\return
length of read data into buffer
\remarks:
The global variable 'nProcReadIdx' is used to save the table index where
the reading of the NAT table stopped. Reading is stopped when the end of
the read buffer is approached. On the next itteration the reading continues
from the saved index.
*******************************************************************************/
static int SVIP_NAT_ProcReadNAT(char *buf, int count)
{
int i, j;
int len = 0;
SVIP_NAT_IO_Rule_t *pNatRule;
if (nProcReadIdx == -1)
{
nProcReadIdx = 0;
return 0;
}
if (nProcReadIdx == 0)
{
len = sprintf(buf+len,
"Remote host IP " /* 16 char */
"Remote host MAC " /* 19 char */
"Local host IP " /* 15 char */
"Local host MAC " /* 19 char */
"Local host UDP " /* 16 char */
"Loc->Rem(in/out/err) " /* 22 char */
"Rem->Loc(in/out/err)\n\r");
}
for (i = nProcReadIdx; i < SVIP_SYS_CODEC_NUM; i++)
{
int slen;
pNatRule = &pNatTable[i].natRule;
if (pNatRule->remIP != 0)
{
/* make sure not to overwrite the buffer */
if (count < len+120)
break;
/* remIP */
slen = sprintf(buf+len, "%d.%d.%d.%d",
(int)((pNatRule->remIP >> 24) & 0xff),
(int)((pNatRule->remIP >> 16) & 0xff),
(int)((pNatRule->remIP >> 8) & 0xff),
(int)((pNatRule->remIP >> 0) & 0xff));
len += slen;
for (j = 0; j < (16-slen); j++)
len += sprintf(buf+len, " ");
/* remMAC */
slen = 0;
for (j = 0; j < ETH_ALEN; j++)
{
slen += sprintf(buf+len+slen, "%02x%s",
pNatRule->remMAC[j], j < ETH_ALEN-1 ? ":" : " ");
}
len += slen;
for (j = 0; j < (19-slen); j++)
len += sprintf(buf+len, " ");
/* locIP */
slen = sprintf(buf+len, "%d.%d.%d.%d",
(int)((pNatRule->locIP >> 24) & 0xff),
(int)((pNatRule->locIP >> 16) & 0xff),
(int)((pNatRule->locIP >> 8) & 0xff),
(int)((pNatRule->locIP >> 0) & 0xff));
len += slen;
for (j = 0; j < (15-slen); j++)
len += sprintf(buf+len, " ");
/* locMAC */
slen = 0;
for (j = 0; j < ETH_ALEN; j++)
{
slen += sprintf(buf+len+slen, "%02x%s",
pNatRule->locMAC[j], j < ETH_ALEN-1 ? ":" : " ");
}
len += slen;
for (j = 0; j < (19-slen); j++)
len += sprintf(buf+len, " ");
/* locUDP */
slen = sprintf(buf+len, "%d", pNatRule->locUDP);
len += slen;
for (j = 0; j < (16-slen); j++)
len += sprintf(buf+len, " ");
/* NAT statistics, Local to Remote translation */
slen = sprintf(buf+len, "(%ld/%ld/%ld)",
pNatTable[i].natStats[SVIP_NAT_STATS_LOC2REM].inPackets,
pNatTable[i].natStats[SVIP_NAT_STATS_LOC2REM].outPackets,
pNatTable[i].natStats[SVIP_NAT_STATS_LOC2REM].outErrors);
len += slen;
for (j = 0; j < (22-slen); j++)
len += sprintf(buf+len, " ");
/* NAT statistics, Remote to Local translation */
len += sprintf(buf+len, "(%ld/%ld/%ld)\n\r",
pNatTable[i].natStats[SVIP_NAT_STATS_REM2LOC].inPackets,
pNatTable[i].natStats[SVIP_NAT_STATS_REM2LOC].outPackets,
pNatTable[i].natStats[SVIP_NAT_STATS_REM2LOC].outErrors);
}
}
if (i == SVIP_SYS_CODEC_NUM)
nProcReadIdx = -1; /* reading completed */
else
nProcReadIdx = i; /* reading still in process, buffer was full */
return len;
}
#ifdef CONFIG_SVIP_FW_PKT_SNIFFER
/**
Converts MAC address from ascii to hex respesentaion
*/
static int SVIP_NAT_MacAsciiToHex(const char *pMacStr, unsigned char *pMacHex)
{
int i=0, c=0, b=0, n=0;
memset(pMacHex, 0, ETH_ALEN);
while (pMacStr[i] != '\0')
{
if (n >= 0)
{
unsigned char nToHex = 0;
/* check for hex digit */
if (pMacStr[i] >= '0' && pMacStr[i] <= '9')
nToHex = 0x30;
else if (pMacStr[i] >= 'a' && pMacStr[i] <= 'f')
nToHex = 0x57;
else if (pMacStr[i] >= 'A' && pMacStr[i] <= 'F')
nToHex = 0x37;
else
{
if (n != 0)
{
printk(KERN_ERR "SVIP NAT: invalid MAC address format[%s]\n", pMacStr);
return -1;
}
i++;
continue;
}
n^=1;
pMacHex[b] |= ((pMacStr[i] - nToHex)&0xf) << (4*n);
if (n == 0)
{
/* advance to next byte, check if complete */
if (++b >= ETH_ALEN)
return 0;
/* byte completed, next we expect a colon... */
c = 1;
/* and, do not check for hex digit */
n = -1;
}
i++;
continue;
}
if (c == 1)
{
if (pMacStr[i] == ':')
{
/* next we expect hex digit, again */
n = 0;
}
else
{
printk(KERN_ERR "SVIP NAT: invalid MAC address format[%s]\n", pMacStr);
return -1;
}
}
i++;
}
return 0;
}
/**
Used to set the destination MAC address of a host where incoming
SVIP VoFW packets are to be addressed. In case the address is set
to 00:00:00:00:00:00 (the default case), the packets will written
out to eth0 with its original MAC addess.
\remark
usage: 'echo "00:03:19:00:15:D1" > cat /proc/net/svip_nat/snifferMAC'
*/
int SVIP_NAT_ProcWriteSnifferMAC (struct file *file, const char *buffer,
unsigned long count, void *data)
{
/* at least strlen("xx:xx:xx:xx:xx:xx") characters, followed by '\0' */
if (count >= 18)
{
int ret;
ret = SVIP_NAT_MacAsciiToHex(buffer, pSVIP_NAT_SnifferMAC);
if (ret != 0)
return 0;
if (!(pSVIP_NAT_SnifferMAC[0]==0 && pSVIP_NAT_SnifferMAC[1]==0 &&
pSVIP_NAT_SnifferMAC[2]==0 && pSVIP_NAT_SnifferMAC[3]==0 &&
pSVIP_NAT_SnifferMAC[4]==0 && pSVIP_NAT_SnifferMAC[5]==0))
{
nSVIP_NAT_SnifferMacSet = 1;
}
}
return count;
}
/**
Used to read the destination MAC address of a sniffer host
*/
int SVIP_NAT_ProcReadSnifferMAC (char *buf, int count)
{
int len = 0;
len = snprintf(buf, count, "%02x:%02x:%02x:%02x:%02x:%02x\n",
pSVIP_NAT_SnifferMAC[0], pSVIP_NAT_SnifferMAC[1],
pSVIP_NAT_SnifferMAC[2], pSVIP_NAT_SnifferMAC[3],
pSVIP_NAT_SnifferMAC[4], pSVIP_NAT_SnifferMAC[5]);
if (len > count)
{
printk(KERN_ERR "SVIP NAT: Only part of the text could be put into the buffer\n");
return count;
}
return len;
}
/**
Used to switch VoFW message sniffer on/off
\remark
usage: 'echo "1" > cat /proc/net/svip_nat/snifferOnOff'
*/
int SVIP_NAT_ProcWriteSnifferOnOff (struct file *file, const char *buffer,
unsigned long count, void *data)
{
/* at least one digit expected, followed by '\0' */
if (count >= 2)
{
int ret, nSnifferOnOff;
ret = sscanf(buffer, "%d", &nSnifferOnOff);
if (ret != 1)
return count;
if (nSnifferOnOff > 0)
nSnifferOnOff = 1;
nSVIP_NAT_Sniffer = nSnifferOnOff;
}
return count;
}
/**
Used to read the VoFW message sniffer configuration (on/off)
*/
int SVIP_NAT_ProcReadSnifferOnOff (char *buf, int count)
{
int len = 0;
len = snprintf(buf, count, "%d\n", nSVIP_NAT_Sniffer);
if (len > count)
{
printk(KERN_ERR "SVIP NAT: Only part of the text could be put into the buffer\n");
return count;
}
return len;
}
#endif
/******************************************************************************/
/**
Creates proc read/write entries
\return
0 on success, -1 on error
*/
/******************************************************************************/
static int SVIP_NAT_ProcInstall(void)
{
struct proc_dir_entry *pProcParentDir, *pProcDir;
struct proc_dir_entry *pProcNode;
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
pProcParentDir = proc_net;
#else
pProcParentDir = init_net.proc_net;
#endif
pProcDir = proc_mkdir(SVIP_NAT_DEVICE_NAME, pProcParentDir);
if (pProcDir == NULL)
{
printk(KERN_ERR "SVIP NAT: cannot create proc dir %s/%s\n\r",
pProcParentDir->name, SVIP_NAT_DEVICE_NAME);
return -1;
}
pProcNode = create_proc_read_entry("nat", S_IFREG|S_IRUGO, pProcDir,
SVIP_NAT_ProcRead, (void *)SVIP_NAT_ProcReadNAT);
if (pProcNode == NULL)
{
printk(KERN_ERR "SVIP NAT: cannot create proc entry %s/%s",
pProcDir->name, "nat");
return -1;
}
#ifdef CONFIG_SVIP_FW_PKT_SNIFFER
nSVIP_NAT_Sniffer = 0;
/* creates proc entry for switching on/off sniffer to VoFW messages */
pProcNode = create_proc_read_entry("snifferOnOff", S_IFREG|S_IRUGO|S_IWUGO,
pProcDir, SVIP_NAT_ProcReadGen, (void *)SVIP_NAT_ProcReadSnifferOnOff);
if (pProcNode == NULL)
{
printk(KERN_ERR "SVIP NAT: cannot create proc entry %s/%s\n\r",
pProcDir->name, "snifferOnOff");
return -1;
}
pProcNode->write_proc = SVIP_NAT_ProcWriteSnifferOnOff;
memset (pSVIP_NAT_SnifferMAC, 0, ETH_ALEN);
nSVIP_NAT_SnifferMacSet = 0;
/* creates proc entry for setting MAC address of sniffer host to VoFW messages */
pProcNode = create_proc_read_entry("snifferMAC", S_IFREG|S_IRUGO|S_IWUGO,
pProcDir, SVIP_NAT_ProcReadGen, (void *)SVIP_NAT_ProcReadSnifferMAC);
if (pProcNode == NULL)
{
printk(KERN_ERR "SVIP NAT: cannot create proc entry %s/%s\n\r",
pProcDir->name, "snifferMAC");
return -1;
}
pProcNode->write_proc = SVIP_NAT_ProcWriteSnifferMAC;
#endif
return 0;
}
/******************************************************************************/
/**
No actions done here, simply a check is performed if an open has already
been performed. Currently only a single open is allowed as it is a sufficient
to have hat a single process configuring the SVIP NAT at one time.
\arguments
inode - pointer to disk file data
file - pointer to device file data
\return
0 on success, else -1
*/
/******************************************************************************/
static int SVIP_NAT_device_open(struct inode *inode, struct file *file)
{
unsigned long flags;
struct in_device *in_dev;
struct in_ifaddr *ifa;
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
local_irq_save(flags);
#else
local_save_flags(flags);
#endif
if (nDeviceOpen)
{
MOD_INC_USE_COUNT;
local_irq_restore(flags);
nDeviceOpen++;
return 0;
}
/* find pointer to IP address of eth0 */
if ((in_dev=in_dev_get(net_devs[SVIP_NET_DEV_ETH0_IDX])) != NULL)
{
for (ifa = in_dev->ifa_list; ifa != NULL; ifa = ifa->ifa_next)
{
if (!paddr_eth0 && ifa->ifa_address != 0)
{
paddr_eth0 = &ifa->ifa_address;
continue;
}
if (paddr_eth0 && ifa->ifa_address != 0)
{
paddr_eth0_0 = &ifa->ifa_address;
break;
}
}
in_dev_put(in_dev);
}
if (paddr_eth0 == NULL || paddr_eth0_0 == NULL)
{
local_irq_restore(flags);
return -ENODATA;
}
/* find pointer to IP address of veth0 */
if ((in_dev=in_dev_get(net_devs[SVIP_NET_DEV_VETH0_IDX])) != NULL)
{
for (ifa = in_dev->ifa_list; ifa != NULL; ifa = ifa->ifa_next)
{
if (ifa->ifa_address != 0)
{
paddr_veth0 = &ifa->ifa_address;
pmask_veth0 = &ifa->ifa_mask;
break;
}
}
in_dev_put(in_dev);
}
if (paddr_veth0 == NULL)
{
local_irq_restore(flags);
return -ENODATA;
}
MOD_INC_USE_COUNT;
nDeviceOpen++;
local_irq_restore(flags);
return 0;
}
/******************************************************************************/
/**
This function is called when a process closes the SVIP NAT device file
\arguments
inode - pointer to disk file data
file - pointer to device file data
\return
0 on success, else -1
*/
/******************************************************************************/
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,2,0)
static int SVIP_NAT_device_release(struct inode *inode,
struct file *file)
#else
static void SVIP_NAT_device_release(struct inode *inode,
struct file *file)
#endif
{
unsigned long flags;
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
save_flags(flags);
cli();
#else
local_save_flags(flags);
#endif
/* The device can now be openned by the next caller */
nDeviceOpen--;
MOD_DEC_USE_COUNT;
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
restore_flags(flags);
#else
local_irq_restore(flags);
#endif
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,2,0)
return 0;
#endif
}
/******************************************************************************/
/**
This function is called when a process closes the SVIP NAT device file
\arguments
inode - pointer to disk file data
file - pointer to device file data
ioctl_num - ioctl number requested
ioctl_param - pointer to data related to the ioctl number
\return
0 on success, else -1
*/
/******************************************************************************/
long SVIP_NAT_device_ioctl (struct file *file,
unsigned int ioctl_num, unsigned long ioctl_param)
{
int ret = 0;
SVIP_NAT_IO_Rule_t *pNatRule, *pNatRuleIn;
SVIP_UDP_PORT_t nPort;
int nNatIdx;
int bWrite = 0;
int bRead = 0;
unsigned char *pData = 0;
int nSize;
if (_IOC_DIR(ioctl_num) & _IOC_WRITE)
bWrite = 1;
if (_IOC_DIR(ioctl_num) & _IOC_READ)
bRead = 1;
nSize = _IOC_SIZE(ioctl_num);
if (nSize > sizeof(int))
{
if (bRead || bWrite)
{
pData = kmalloc (nSize, GFP_KERNEL);
if (bWrite)
{
if (copy_from_user ((void *)pData, (void *)ioctl_param, nSize) != 0)
{
printk(KERN_ERR "SVIP NAT: ioctl %x: copy_from_user() failed!\n", ioctl_num);
ret = -1;
goto error;
}
}
}
}
switch (ioctl_num)
{
case FIO_SVIP_NAT_RULE_ADD:
pNatRuleIn = (SVIP_NAT_IO_Rule_t *)pData;
/* check if destination UDP port is within range */
nPort = ntohs(pNatRuleIn->locUDP);
if (!SVIP_PORT_INRANGE(nPort))
{
printk(KERN_ERR "SVIP NAT: Error, UDP port(%d) is out of range(%d..%d)\n",
nPort, SVIP_UDP_FROM, SVIP_UDP_TO);
ret = -1;
goto error;
}
nNatIdx = SVIP_PORT_INDEX(nPort);
down(sem_nat_tbl_access);
pNatRule = &pNatTable[nNatIdx].natRule;
/* add rule to the NAT table */
pNatRule->remIP = pNatRuleIn->remIP;
memcpy((char *)pNatRule->remMAC, (char *)pNatRuleIn->remMAC, ETH_ALEN);
pNatRule->locIP = pNatRuleIn->locIP;
memcpy((char *)pNatRule->locMAC, (char *)pNatRuleIn->locMAC, ETH_ALEN);
pNatRule->locUDP = pNatRuleIn->locUDP;
memset(pNatTable[nNatIdx].natStats, 0,
sizeof(SVIP_NAT_stats_t)*SVIP_NAT_STATS_TYPES);
up(sem_nat_tbl_access);
break;
case FIO_SVIP_NAT_RULE_REMOVE:
pNatRuleIn = (SVIP_NAT_IO_Rule_t *)pData;
/* check if destination UDP port is within range */
nPort = ntohs(pNatRuleIn->locUDP);
if (!SVIP_PORT_INRANGE(nPort))
{
printk(KERN_ERR "SVIP NAT: Error, UDP port(%d) is out of range(%d..%d)\n",
nPort, SVIP_UDP_FROM, SVIP_UDP_TO);
ret = -1;
goto error;
}
nNatIdx = SVIP_PORT_INDEX(nPort);
down(sem_nat_tbl_access);
/* remove rule from the NAT table */
memset(&pNatTable[nNatIdx], 0, sizeof(SVIP_NAT_table_entry_t));
up(sem_nat_tbl_access);
break;
case FIO_SVIP_NAT_RULE_LIST:
{
int len;
char buf[256];
down(sem_nat_tbl_access);
while (nProcReadIdx != -1)
{
len = SVIP_NAT_ProcReadNAT(buf, 256);
if (len > 0)
printk("%s", buf);
}
nProcReadIdx = 0;
up(sem_nat_tbl_access);
break;
}
default:
printk(KERN_ERR "SVIP NAT: unsupported ioctl (%x) command for device %s\n",
ioctl_num, PATH_SVIP_NAT_DEVICE_NAME);
ret = -1;
goto error;
}
if (nSize > sizeof(int))
{
if (bRead)
{
if (copy_to_user ((void *)ioctl_param, (void *)pData, nSize) != 0)
{
printk(KERN_ERR "SVIP NAT: ioctl %x: copy_to_user() failed!\n", ioctl_num);
ret = -1;
goto error;
}
}
}
error:
if (pData)
kfree(pData);
return ret;
}
#if 0
void dump_msg(unsigned char *pData, unsigned int nLen)
{
int i;
for (i=0; i<nLen; i++)
{
if (!i || !(i%16))
printk("\n ");
else if (i && !(i%4))
printk(" ");
printk("%02x", pData[i]);
}
if (--i%16)
printk("\n");
}
#endif
/******************************************************************************/
/**
Used to recalculate IP/UDP checksum using the original IP/UDP checksum
coming with the packet. The original source and destination IP addresses
are accounted for, and, the checksum is updated using the new source and
destination IP addresses.
\arguments
skb - pointer to the receiving socket buffer
csum_old - original checksum
saddr_old - pointer to original source IP address
saddr_new - pointer to new source IP address
daddr_old - pointer to original destination IP address
daddr_new - pointer to new destination IP address
\return
recalculated IP/UDP checksum
*/
/******************************************************************************/
static inline u16 ip_udp_quick_csum(u16 csum_old, u16 *saddr_old, u16 *saddr_new,
u16 *daddr_old, u16 *daddr_new)
{
u32 sum;
sum = csum_old;
/* convert back from one's complement */
sum = ~sum & 0xffff;
if (sum < saddr_old[0]) sum += 0xffff;
sum -= saddr_old[0];
if (sum < saddr_old[1]) sum += 0xffff;
sum -= saddr_old[1];
if (sum < daddr_old[0]) sum += 0xffff;
sum -= daddr_old[0];
if (sum < daddr_old[1]) sum += 0xffff;
sum -= daddr_old[1];
sum += saddr_new[0];
sum += saddr_new[1];
sum += daddr_new[0];
sum += daddr_new[1];
/* take only 16 bits out of the 32 bit sum and add up the carries */
while (sum >> 16)
sum = (sum & 0xffff)+((sum >> 16) & 0xffff);
/* one's complement the result */
sum = ~sum;
return (u16)(sum & 0xffff);
}
/******************************************************************************/
/**
Returns a pointer to an ipv4 address assigned to device dev. The ipv4
instance checked is pointed to by ifa_start. The function is suited for
itterative calls.
\arguments
dev - pointer to network interface
ifa_start - pointer to ipv4 instance to return ipv4 address assigned
to, NULL for the first one
ppifa_addr - output parameter
\return
pointer to the next ipv4 instance, which can be null if ifa_start was
the last instance present
*/
/******************************************************************************/
static struct in_ifaddr *get_ifaddr(struct net_device *dev,
struct in_ifaddr *ifa_start, unsigned int **ppifa_addr)
{
struct in_device *in_dev;
struct in_ifaddr *ifa = NULL;
if ((in_dev=in_dev_get(dev)) != NULL)
{
if (ifa_start == NULL)
ifa = in_dev->ifa_list;
else
ifa = ifa_start;
if (ifa)
{
*ppifa_addr = &ifa->ifa_address;
ifa = ifa->ifa_next;
}
in_dev_put(in_dev);
return ifa;
}
*ppifa_addr = NULL;
return NULL;
}
/******************************************************************************/
/**
This function performs IP NAT for received packets satisfying the
following requirements:
- packet is destined to local IP host
- transport protocol type is UDP
- destination UDP port is within range
\arguments
skb - pointer to the receiving socket buffer
\return
returns 1 on performed SVIP NAT, else returns 0
\remarks
When function returns 0, it indicates the caller to pass the
packet up the IP stack to make further decision about it
*/
/******************************************************************************/
int do_SVIP_NAT (struct sk_buff *skb)
{
struct net_device *real_dev;
struct iphdr *iph;
struct udphdr *udph;
SVIP_NAT_IO_Rule_t *pNatRule;
int nNatIdx, in_eth0, nDir;
#ifndef VLAN_8021Q_UNUSED
int vlan;
unsigned short vid;
#endif /* ! VLAN_8021Q_UNUSED */
SVIP_UDP_PORT_t nPort;
u32 orgSrcIp, orgDstIp, *pSrcIp, *pDstIp;
struct ethhdr *ethh;
/* do not consider if SVIP NAT device not open. */
if (!nDeviceOpen)
{
return 0;
}
/* consider only UDP packets. */
iph = SVIP_NAT_IP_HDR(skb);
if (iph->protocol != IPPROTO_UDP)
{
return 0;
}
udph = (struct udphdr *)((u_int32_t *)iph + iph->ihl);
/* consider only packets which UDP port numbers reside within
the predefined SVIP NAT UDP port range. */
if ((!SVIP_PORT_INRANGE(ntohs(udph->dest))) &&
(!SVIP_PORT_INRANGE(ntohs(udph->source))))
{
return 0;
}
#ifndef VLAN_8021Q_UNUSED
/* check if packet delivered over VLAN. VLAN packets will be routed over
the VLAN interfaces of the respective real Ethernet interface, if one
exists(VIDs must match). Else, the packet will be send out as IEEE 802.3
Ethernet frame */
if (skb->dev->priv_flags & IFF_802_1Q_VLAN)
{
vlan = 1;
vid = VLAN_DEV_VLAN_ID(skb->dev);
real_dev = VLAN_DEV_REAL_DEV(skb->dev);
}
else
{
vlan = 0;
vid = 0;
real_dev = skb->dev;
}
#endif /* ! VLAN_8021Q_UNUSED */
#ifdef CONFIG_SVIP_FW_PKT_SNIFFER
/** Debugging feature which can be enabled by writing,
'echo 1 > /proc/net/svip_nat/snifferOnOff'.
It copies all packets received on veth0 and, sends them out over eth0.
When a destination MAC address is specified through
/proc/net/svip_nat/snifferMAC, this MAC addess will substitute the
original MAC address of the packet.
It is recommended to specify a MAC address of some host where Wireshark
runs and sniffs for this traffic, else you may flood your LAN with
undeliverable traffic.
NOTE: In case of VLAN traffic the VLAN header information is lost. */
if (nSVIP_NAT_Sniffer)
{
if (real_dev == net_devs[SVIP_NET_DEV_VETH0_IDX])
{
struct sk_buff *copied_skb;
/* gain the Ethernet header from the skb */
skb_push(skb, ETH_HLEN);
copied_skb = skb_copy (skb, GFP_ATOMIC);
if (nSVIP_NAT_SnifferMacSet == 1)
{
ethh = (struct ethhdr *)SVIP_NAT_SKB_MAC_HEADER(copied_skb);
memcpy((char *)ethh->h_dest, (char *)pSVIP_NAT_SnifferMAC, ETH_ALEN);
}
copied_skb->dev = net_devs[SVIP_NET_DEV_ETH0_IDX];
dev_queue_xmit(copied_skb);
/* skip the ETH header again */
skb_pull(skb, ETH_HLEN);
}
}
#endif
/* check if packet arrived on eth0 */
if (real_dev == net_devs[SVIP_NET_DEV_ETH0_IDX])
{
/* check if destination IP address equals the primary assigned IP address
of interface eth0. This is the case of packets originating from a
remote peer that are to be delivered to a channel residing on THIS
voice linecard system. This is typical SVIP NAT case, therefore this
rule is placed on top. */
if (iph->daddr == *paddr_eth0)
{
nPort = ntohs(udph->dest);
nDir = SVIP_NAT_STATS_REM2LOC;
}
/* check if destination IP address equals the secondary assigned IP address
of interface eth0. This is not a typical SVIP NAT case. It is basically
there, as someone might like for debugging purpose to use the LCC to route
Slave SVIP packets which are part of voice/fax streaming. */
else if (iph->daddr == *paddr_eth0_0)
{
nPort = ntohs(udph->source);
nDir = SVIP_NAT_STATS_LOC2REM;
}
#ifndef VLAN_8021Q_UNUSED
/* when the packet did not hit the top two rules, here we check if the packet
has addressed any of the IP addresses assigned to the VLAN interface attached
to eth0. This is not recommended approach because of the CPU cost incurred. */
else if (vlan)
{
unsigned int *pifa_addr;
struct in_ifaddr *ifa_start = NULL;
int i = 0;
do
{
ifa_start = get_ifaddr(skb->dev, ifa_start, &pifa_addr);
if (!pifa_addr)
{
/* VLAN packet received on vlan interface attached to eth0,
however no IP address assigned to the interface.
The packet is ignored. */
return 0;
}
if (iph->daddr == *pifa_addr)
{
/* packet destined to... */
break;
}
if (!ifa_start)
{
return 0;
}
i++;
} while (ifa_start);
if (!i)
{
/* ...primary assigned IP address to the VLAN interface. */
nPort = ntohs(udph->dest);
nDir = SVIP_NAT_STATS_REM2LOC;
}
else
{
/* ...secondary assigned IP address to the VLAN interface. */
nPort = ntohs(udph->source);
nDir = SVIP_NAT_STATS_LOC2REM;
}
}
#endif /* ! VLAN_8021Q_UNUSED */
else
{
return 0;
}
in_eth0 = 1;
}
/* check if packet arrived on veth0 */
else if (real_dev == net_devs[SVIP_NET_DEV_VETH0_IDX])
{
nPort = ntohs(udph->source);
nDir = SVIP_NAT_STATS_LOC2REM;
in_eth0 = 0;
}
else
{
/* packet arrived neither on eth0, nor veth0 */
return 0;
}
/* calculate the respective index of the NAT table */
nNatIdx = SVIP_PORT_INDEX(nPort);
/* process the packet if a respective NAT rule exists */
pNatRule = &pNatTable[nNatIdx].natRule;
ethh = (struct ethhdr *)SVIP_NAT_SKB_MAC_HEADER(skb);
/* copy packet's original source and destination IP addresses to use
later on to perform efficient checksum recalculation */
orgSrcIp = iph->saddr;
orgDstIp = iph->daddr;
if (in_eth0)
{
u8 *pDstMac;
/* Process packet arrived on eth0 */
if (nDir == SVIP_NAT_STATS_REM2LOC && iph->saddr == pNatRule->remIP)
{
pDstIp = &pNatRule->locIP;
pDstMac = pNatRule->locMAC;
}
else if (nDir == SVIP_NAT_STATS_LOC2REM && iph->saddr == pNatRule->locIP)
{
pDstIp = &pNatRule->remIP;
pDstMac = pNatRule->remMAC;
}
else
{
/* Rule check failed. The packet is passed up the layers,
it will be dropped by UDP */
return 0;
}
if ((*pDstIp & *pmask_veth0) == (*paddr_veth0 & *pmask_veth0))
{
#ifndef VLAN_8021Q_UNUSED
if (vlan)
{
struct net_device *vlan_dev;
spin_lock_bh(&vlan_group_lock);
vlan_dev = __vlan_find_dev_deep(net_devs[SVIP_NET_DEV_VETH0_IDX], vid);
spin_unlock_bh(&vlan_group_lock);
if (vlan_dev)
{
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
struct vlan_ethhdr *vethh;
skb_push(skb, VLAN_ETH_HLEN);
/* reconstruct the VLAN header.
NOTE: priority information is lost */
vethh = (struct vlan_ethhdr *)skb->data;
vethh->h_vlan_proto = htons(ETH_P_8021Q);
vethh->h_vlan_TCI = htons(vid);
vethh->h_vlan_encapsulated_proto = htons(ETH_P_IP);
ethh = (struct ethhdr *)vethh;
#else
skb_push(skb, ETH_HLEN);
#endif
skb->dev = vlan_dev;
}
else
{
skb->dev = net_devs[SVIP_NET_DEV_VETH0_IDX];
skb_push(skb, ETH_HLEN);
}
}
else
#endif /* ! VLAN_8021Q_UNUSED */
{
skb->dev = net_devs[SVIP_NET_DEV_VETH0_IDX];
skb_push(skb, ETH_HLEN);
}
pSrcIp = paddr_veth0;
}
else
{
#ifndef VLAN_8021Q_UNUSED
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
if (vlan)
{
struct vlan_ethhdr *vethh;
/* reconstruct the VLAN header.
NOTE: priority information is lost */
skb_push(skb, VLAN_ETH_HLEN);
vethh = (struct vlan_ethhdr *)skb->data;
vethh->h_vlan_proto = htons(ETH_P_8021Q);
vethh->h_vlan_TCI = htons(vid);
vethh->h_vlan_encapsulated_proto = htons(ETH_P_IP);
ethh = (struct ethhdr *)vethh;
}
else
#endif
#endif /* ! VLAN_8021Q_UNUSED */
{
skb_push(skb, ETH_HLEN);
}
/* source IP address equals the destination IP address
of the incoming packet */
pSrcIp = &iph->daddr;
}
iph->saddr = *pSrcIp;
memcpy((char *)ethh->h_source, (char *)skb->dev->dev_addr, ETH_ALEN);
iph->daddr = *pDstIp;
memcpy((char *)ethh->h_dest, (char *)pDstMac, ETH_ALEN);
}
else
{
/* Process packet arrived on veth0 */
if (iph->saddr != pNatRule->locIP)
{
/* Rule check failed. The packet is passed up the layers,
it will be dropped by UDP */
return 0;
}
if (!((pNatRule->remIP & *pmask_veth0) == (*paddr_veth0 & *pmask_veth0)))
{
#ifndef VLAN_8021Q_UNUSED
if (vlan)
{
struct net_device *vlan_dev;
spin_lock_bh(&vlan_group_lock);
vlan_dev = __vlan_find_dev_deep(net_devs[SVIP_NET_DEV_ETH0_IDX], vid);
spin_unlock_bh(&vlan_group_lock);
if (vlan_dev)
{
unsigned int *pifa_addr;
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
struct vlan_ethhdr *vethh;
skb_push(skb, VLAN_ETH_HLEN);
/* construct the VLAN header, note priority information is lost */
vethh = (struct vlan_ethhdr *)skb->data;
vethh->h_vlan_proto = htons(ETH_P_8021Q);
vethh->h_vlan_TCI = htons(vid);
vethh->h_vlan_encapsulated_proto = htons(ETH_P_IP);
ethh = (struct ethhdr *)vethh;
#else
skb_push(skb, ETH_HLEN);
#endif
skb->dev = vlan_dev;
get_ifaddr(skb->dev, NULL, &pifa_addr);
if (pifa_addr)
{
pSrcIp = pifa_addr;
}
else
{
pSrcIp = paddr_eth0;
}
}
else
{
skb->dev = net_devs[SVIP_NET_DEV_ETH0_IDX];
pSrcIp = paddr_eth0;
skb_push(skb, ETH_HLEN);
}
}
else
#endif /* ! VLAN_8021Q_UNUSED */
{
skb->dev = net_devs[SVIP_NET_DEV_ETH0_IDX];
pSrcIp = paddr_eth0;
skb_push(skb, ETH_HLEN);
}
}
else
{
pSrcIp = paddr_veth0;
#ifndef VLAN_8021Q_UNUSED
#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
if (vlan)
{
struct vlan_ethhdr *vethh;
skb_push(skb, VLAN_ETH_HLEN);
/* reconstruct the VLAN header.
NOTE: priority information is lost. */
vethh = (struct vlan_ethhdr *)skb->data;
vethh->h_vlan_proto = htons(ETH_P_8021Q);
vethh->h_vlan_TCI = htons(vid);
vethh->h_vlan_encapsulated_proto = htons(ETH_P_IP);
ethh = (struct ethhdr *)vethh;
}
else
#endif
#endif /* ! VLAN_8021Q_UNUSED */
{
skb_push(skb, ETH_HLEN);
}
}
iph->saddr = *pSrcIp;
memcpy((char *)ethh->h_source, (char *)skb->dev->dev_addr, ETH_ALEN);
iph->daddr = pNatRule->remIP;
memcpy((char *)ethh->h_dest, (char *)pNatRule->remMAC, ETH_ALEN);
}
pNatTable[nNatIdx].natStats[nDir].inPackets++;
iph->check = ip_udp_quick_csum(iph->check, (u16 *)&orgSrcIp, (u16 *)&iph->saddr,
(u16 *)&orgDstIp, (u16 *)&iph->daddr);
if (udph->check != 0)
{
udph->check = ip_udp_quick_csum(udph->check, (u16 *)&orgSrcIp, (u16 *)&iph->saddr,
(u16 *)&orgDstIp, (u16 *)&iph->daddr);
}
/* write the packet out, directly to the network device */
if (dev_queue_xmit(skb) < 0)
pNatTable[nNatIdx].natStats[nDir].outErrors++;
else
pNatTable[nNatIdx].natStats[nDir].outPackets++;
return 1;
}
/******************************************************************************/
/**
Function executed upon unloading of the SVIP NAT module. It unregisters the
SVIP NAT configuration device and frees the memory used for the NAT table.
\remarks:
Currently the SVIP NAT module is statically linked into the Linux kernel
therefore this routine cannot be executed.
*******************************************************************************/
static int __init init(void)
{
int ret = 0;
struct net_device *dev;
if (misc_register(&SVIP_NAT_miscdev) != 0)
{
printk(KERN_ERR "%s: cannot register SVIP NAT device node.\n",
SVIP_NAT_miscdev.name);
return -EIO;
}
/* allocation of memory for NAT table */
pNatTable = (SVIP_NAT_table_entry_t *)kmalloc(
sizeof(SVIP_NAT_table_entry_t) * SVIP_SYS_CODEC_NUM, GFP_ATOMIC);
if (pNatTable == NULL)
{
printk (KERN_ERR "SVIP NAT: Error(%d), allocating memory for NAT table\n", ret);
return -1;
}
/* clear the NAT table */
memset((void *)pNatTable, 0, sizeof(SVIP_NAT_table_entry_t) * SVIP_SYS_CODEC_NUM);
if ((sem_nat_tbl_access = kmalloc(sizeof(struct semaphore), GFP_KERNEL)))
{
sema_init(sem_nat_tbl_access, 1);
}
SVIP_NAT_ProcInstall();
/* find pointers to 'struct net_device' of eth0 and veth0, respectevely */
read_lock(&dev_base_lock);
SVIP_NAT_FOR_EACH_NETDEV(dev)
{
if (!strcmp(dev->name, SVIP_NET_DEV_ETH0_NAME))
{
net_devs[SVIP_NET_DEV_ETH0_IDX] = dev;
}
if (!strcmp(dev->name, SVIP_NET_DEV_VETH1_NAME))
{
net_devs[SVIP_NET_DEV_VETH0_IDX] = dev;
}
else if (!strcmp(dev->name, SVIP_NET_DEV_ETH1_NAME))
{
net_devs[SVIP_NET_DEV_VETH0_IDX] = dev;
}
}
read_unlock(&dev_base_lock);
if (net_devs[SVIP_NET_DEV_ETH0_IDX] == NULL ||
net_devs[SVIP_NET_DEV_VETH0_IDX] == NULL)
{
printk (KERN_ERR "SVIP NAT: Error, unable to locate eth0 and veth0 interfaces\n");
return -1;
}
printk ("%s, (c) 2009, Lantiq Deutschland GmbH\n", &SVIP_NAT_INFO_STR[4]);
return ret;
}
/******************************************************************************/
/**
Function executed upon unloading of the SVIP NAT module. It unregisters the
SVIP NAT configuration device and frees the memory used for the NAT table.
\remarks:
Currently the SVIP NAT module is statically linked into the Linux kernel
therefore this routine cannot be executed.
*******************************************************************************/
static void __exit fini(void)
{
MOD_DEC_USE_COUNT;
/* unregister SVIP NAT configuration device */
misc_deregister(&SVIP_NAT_miscdev);
/* release memory of SVIP NAT table */
if (pNatTable != NULL)
{
kfree (pNatTable);
}
}
module_init(init);
module_exit(fini);
Reference in New Issue View Git Blame Copy Permalink