NetBSD/sys/netinet/ip_proxy.h

176 lines
4.4 KiB
C
Raw Normal View History

2002-09-19 12:08:14 +04:00
/* $NetBSD: ip_proxy.h,v 1.18 2002/09/19 08:09:18 martti Exp $ */
/*
2002-01-24 11:21:30 +03:00
* Copyright (C) 1997-2001 by Darren Reed.
*
2002-01-24 11:21:30 +03:00
* See the IPFILTER.LICENCE file for details on licencing.
*
2002-09-19 12:08:14 +04:00
* Id: ip_proxy.h,v 2.8.2.13 2002/07/04 11:07:37 darrenr Exp
*/
#ifndef _NETINET_IP_PROXY_H_
#define _NETINET_IP_PROXY_H_
#ifndef SOLARIS
#define SOLARIS (defined(sun) && (defined(__svr4__) || defined(__SVR4)))
#endif
1997-07-05 09:38:14 +04:00
#ifndef APR_LABELLEN
#define APR_LABELLEN 16
1997-07-05 09:38:14 +04:00
#endif
#define AP_SESS_SIZE 53
struct nat;
struct ipnat;
typedef struct ap_tcp {
u_short apt_sport; /* source port */
u_short apt_dport; /* destination port */
1998-11-22 18:17:18 +03:00
short apt_sel[2]; /* {seq,ack}{off,min} set selector */
short apt_seqoff[2]; /* sequence # difference */
1998-11-22 18:17:18 +03:00
tcp_seq apt_seqmin[2]; /* don't change seq-off until after this */
short apt_ackoff[2]; /* sequence # difference */
tcp_seq apt_ackmin[2]; /* don't change seq-off until after this */
u_char apt_state[2]; /* connection state */
} ap_tcp_t;
typedef struct ap_udp {
u_short apu_sport; /* source port */
u_short apu_dport; /* destination port */
} ap_udp_t;
typedef struct ap_session {
struct aproxy *aps_apr;
union {
struct ap_tcp apu_tcp;
struct ap_udp apu_udp;
} aps_un;
u_int aps_flags;
1998-11-22 18:17:18 +03:00
U_QUAD_T aps_bytes; /* bytes sent */
U_QUAD_T aps_pkts; /* packets sent */
void *aps_nat; /* pointer back to nat struct */
void *aps_data; /* private data */
1999-12-12 14:11:15 +03:00
int aps_p; /* protocol */
int aps_psiz; /* size of private data */
1998-11-22 18:17:18 +03:00
struct ap_session *aps_hnext;
struct ap_session *aps_next;
2000-05-03 15:12:03 +04:00
} ap_session_t;
#define aps_sport aps_un.apu_tcp.apt_sport
#define aps_dport aps_un.apu_tcp.apt_dport
#define aps_sel aps_un.apu_tcp.apt_sel
#define aps_seqoff aps_un.apu_tcp.apt_seqoff
1998-11-22 18:17:18 +03:00
#define aps_seqmin aps_un.apu_tcp.apt_seqmin
#define aps_state aps_un.apu_tcp.apt_state
1998-11-22 18:17:18 +03:00
#define aps_ackoff aps_un.apu_tcp.apt_ackoff
#define aps_ackmin aps_un.apu_tcp.apt_ackmin
typedef struct aproxy {
2000-05-03 15:12:03 +04:00
struct aproxy *apr_next;
char apr_label[APR_LABELLEN]; /* Proxy label # */
1997-07-05 09:38:14 +04:00
u_char apr_p; /* protocol */
int apr_ref; /* +1 per rule referencing it */
int apr_flags;
1999-12-12 14:11:15 +03:00
int (* apr_init) __P((void));
2000-05-03 15:12:03 +04:00
void (* apr_fini) __P((void));
1999-12-12 14:11:15 +03:00
int (* apr_new) __P((fr_info_t *, ip_t *,
ap_session_t *, struct nat *));
2002-01-24 11:21:30 +03:00
void (* apr_del) __P((ap_session_t *));
1998-11-22 18:17:18 +03:00
int (* apr_inpkt) __P((fr_info_t *, ip_t *,
ap_session_t *, struct nat *));
1998-11-22 18:17:18 +03:00
int (* apr_outpkt) __P((fr_info_t *, ip_t *,
ap_session_t *, struct nat *));
2002-01-24 11:21:30 +03:00
int (* apr_match) __P((fr_info_t *, ap_session_t *, struct nat *));
} aproxy_t;
#define APR_DELETE 1
#define APR_ERR(x) (((x) & 0xffff) << 16)
#define APR_EXIT(x) (((x) >> 16) & 0xffff)
#define APR_INC(x) ((x) & 0xffff)
#define FTP_BUFSZ 160
2000-05-03 15:12:03 +04:00
/*
* For the ftp proxy.
*/
typedef struct ftpside {
char *ftps_rptr;
char *ftps_wptr;
2002-09-19 12:08:14 +04:00
u_32_t ftps_seq[2];
2001-03-26 10:11:46 +04:00
u_32_t ftps_len;
int ftps_junk;
2002-01-24 11:21:30 +03:00
int ftps_cmds;
char ftps_buf[FTP_BUFSZ];
} ftpside_t;
2000-05-03 15:12:03 +04:00
typedef struct ftpinfo {
2002-01-24 11:21:30 +03:00
int ftp_passok;
int ftp_incok;
ftpside_t ftp_side[2];
2000-05-03 15:12:03 +04:00
} ftpinfo_t;
1999-12-12 14:11:15 +03:00
/*
* Real audio proxy structure and #defines
*/
2002-01-24 11:21:30 +03:00
typedef struct raudio_s {
1999-12-12 14:11:15 +03:00
int rap_seenpna;
int rap_seenver;
int rap_version;
int rap_eos; /* End Of Startup */
int rap_gotid;
int rap_gotlen;
int rap_mode;
int rap_sdone;
u_short rap_plport;
u_short rap_prport;
u_short rap_srport;
char rap_svr[19];
u_32_t rap_sbf; /* flag to indicate which of the 19 bytes have
* been filled
*/
tcp_seq rap_sseq;
} raudio_t;
#define RA_ID_END 0
#define RA_ID_UDP 1
#define RA_ID_ROBUST 7
#define RAP_M_UDP 1
#define RAP_M_ROBUST 2
#define RAP_M_TCP 4
#define RAP_M_UDP_ROBUST (RAP_M_UDP|RAP_M_ROBUST)
2002-01-24 11:21:30 +03:00
/*
* IPSec proxy
*/
typedef u_32_t ipsec_cookie_t[2];
typedef struct ipsec_pxy {
ipsec_cookie_t ipsc_icookie;
ipsec_cookie_t ipsc_rcookie;
int ipsc_rckset;
ipnat_t ipsc_rule;
nat_t *ipsc_nat;
ipstate_t *ipsc_state;
} ipsec_pxy_t;
1999-12-12 14:11:15 +03:00
extern ap_session_t *ap_sess_tab[AP_SESS_SIZE];
1998-11-22 18:17:18 +03:00
extern ap_session_t *ap_sess_list;
extern aproxy_t ap_proxies[];
2000-05-03 15:12:03 +04:00
extern int ippr_ftp_pasvonly;
2000-05-03 15:12:03 +04:00
extern int appr_add __P((aproxy_t *));
extern int appr_del __P((aproxy_t *));
1999-12-12 14:11:15 +03:00
extern int appr_init __P((void));
2000-05-03 15:12:03 +04:00
extern void appr_unload __P((void));
1999-12-12 14:11:15 +03:00
extern int appr_ok __P((ip_t *, tcphdr_t *, struct ipnat *));
2002-01-24 11:21:30 +03:00
extern int appr_match __P((fr_info_t *, struct nat *));
1999-12-12 14:11:15 +03:00
extern void appr_free __P((aproxy_t *));
1997-07-05 09:38:14 +04:00
extern void aps_free __P((ap_session_t *));
1999-12-12 14:11:15 +03:00
extern int appr_check __P((ip_t *, fr_info_t *, struct nat *));
2002-01-24 11:21:30 +03:00
extern aproxy_t *appr_lookup __P((u_int, char *));
extern int appr_new __P((fr_info_t *, ip_t *, struct nat *));
#endif /* _NETINET_IP_PROXY_H_ */