mirror of
https://github.com/subhobhai943/SUB-OS.git
synced 2026-10-25 16:52:29 +00:00
52 lines
1.3 KiB
C
52 lines
1.3 KiB
C
#ifndef _NET_FILTER_H
|
|
#define _NET_FILTER_H
|
|
|
|
#include <stdint.h>
|
|
#include <stddef.h>
|
|
#include <stdbool.h>
|
|
|
|
#define FILTER_MAX_RULES 32
|
|
|
|
typedef enum {
|
|
FILTER_ACTION_ACCEPT = 0,
|
|
FILTER_ACTION_DROP,
|
|
FILTER_ACTION_REJECT,
|
|
FILTER_ACTION_LOG
|
|
} filter_action_t;
|
|
|
|
typedef enum {
|
|
FILTER_HOOK_PRE_ROUTING = 0,
|
|
FILTER_HOOK_LOCAL_IN,
|
|
FILTER_HOOK_FORWARD,
|
|
FILTER_HOOK_LOCAL_OUT,
|
|
FILTER_HOOK_POST_ROUTING,
|
|
FILTER_HOOK_MAX
|
|
} filter_hook_t;
|
|
|
|
typedef struct filter_rule {
|
|
uint32_t id;
|
|
filter_hook_t hook;
|
|
uint32_t src_ip;
|
|
uint32_t src_mask;
|
|
uint32_t dst_ip;
|
|
uint32_t dst_mask;
|
|
uint8_t protocol;
|
|
uint16_t src_port;
|
|
uint16_t dst_port;
|
|
filter_action_t action;
|
|
uint64_t packet_count;
|
|
uint64_t byte_count;
|
|
char comment[32];
|
|
bool in_use;
|
|
} filter_rule_t;
|
|
|
|
void filter_init(void);
|
|
int filter_add_rule(filter_hook_t hook, uint8_t proto, uint16_t dst_port, filter_action_t action, const char* comment);
|
|
int filter_delete_rule(uint32_t rule_id);
|
|
filter_action_t filter_evaluate(filter_hook_t hook, uint8_t proto, uint32_t src_ip, uint32_t dst_ip, uint16_t src_port, uint16_t dst_port, size_t len);
|
|
|
|
size_t filter_get_rule_count(void);
|
|
const filter_rule_t* filter_get_rule(size_t index);
|
|
|
|
#endif // _NET_FILTER_H
|