diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2026-02-13 16:21:33 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2026-02-16 12:42:50 +0000 |
| commit | 281282e9357b95b679d36ca6d8561e96c1263937 (patch) | |
| tree | 116fdccfb97bba48b7c1ea27b56dc295999e4074 /sys | |
| parent | 4ccca2100887943b11187787004bc8efc2a149c6 (diff) | |
pf: convert DIOCRTSTADDRS to netlink
Sponsored by: Rubicon Communications, LLC ("Netgate")
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/netpfil/pf/pf_nl.c | 41 | ||||
| -rw-r--r-- | sys/netpfil/pf/pf_nl.h | 1 |
2 files changed, 42 insertions, 0 deletions
diff --git a/sys/netpfil/pf/pf_nl.c b/sys/netpfil/pf/pf_nl.c index 7a7655d7d9c8..c2ea65f4b043 100644 --- a/sys/netpfil/pf/pf_nl.c +++ b/sys/netpfil/pf/pf_nl.c @@ -2467,6 +2467,40 @@ pf_handle_table_clear_astats(struct nlmsghdr *hdr, struct nl_pstate *npt) return (error); } +static int +pf_handle_table_test_addrs(struct nlmsghdr *hdr, struct nl_pstate *npt) +{ + struct nl_parsed_table_addrs attrs = { 0 }; + struct nl_writer *nw = npt->nw; + struct genlmsghdr *ghdr_new; + int error; + + PF_RULES_RLOCK_TRACKER; + + error = nl_parse_nlmsg(hdr, &table_addr_parser, npt, &attrs); + if (error != 0) + return (error); + + PF_RULES_RLOCK(); + error = pfr_tst_addrs(&attrs.table, &attrs.addrs[0], + attrs.addr_count, &attrs.nchange, + attrs.flags | PFR_FLAG_USERIOCTL); + PF_RULES_RUNLOCK(); + + if (!nlmsg_reply(nw, hdr, sizeof(struct genlmsghdr))) + return (ENOMEM); + + ghdr_new = nlmsg_reserve_object(nw, struct genlmsghdr); + ghdr_new->cmd = PFNL_CMD_TABLE_TEST_ADDRS; + + nlattr_add_u32(nw, PF_TAS_ASTATS_COUNT, attrs.nchange); + + if (!nlmsg_end(nw)) + return (ENOMEM); + + return (error); +} + static const struct nlattr_parser nla_p_rate[] = { { .type = PF_LR_LIMIT, .off = 0, .cb = nlattr_get_uint32 }, { .type = PF_LR_SECONDS, .off = sizeof(unsigned int), .cb = nlattr_get_uint32 }, @@ -3154,6 +3188,13 @@ static const struct genl_cmd pf_cmds[] = { .cmd_flags = GENL_CMD_CAP_DO | GENL_CMD_CAP_HASPOL, .cmd_priv = PRIV_NETINET_PF, }, + { + .cmd_num = PFNL_CMD_TABLE_TEST_ADDRS, + .cmd_name = "TABLE_TEST_ADDRS", + .cmd_cb = pf_handle_table_test_addrs, + .cmd_flags = GENL_CMD_CAP_DUMP | GENL_CMD_CAP_HASPOL, + .cmd_priv = PRIV_NETINET_PF, + }, }; void diff --git a/sys/netpfil/pf/pf_nl.h b/sys/netpfil/pf/pf_nl.h index 84e9d3a97303..6591c707d9a4 100644 --- a/sys/netpfil/pf/pf_nl.h +++ b/sys/netpfil/pf/pf_nl.h @@ -82,6 +82,7 @@ enum { PFNL_CMD_SOURCE_GET = 44, PFNL_CMD_SOURCE_NGET = 45, PFNL_CMD_SOURCE_CLEAR = 46, + PFNL_CMD_TABLE_TEST_ADDRS = 47, __PFNL_CMD_MAX, }; #define PFNL_CMD_MAX (__PFNL_CMD_MAX -1) |
