1/*-
2 * Copyright (c) 2011-2018 The NetBSD Foundation, Inc.
3 * All rights reserved.
4 *
5 * This material is based upon work partially supported by The
6 * NetBSD Foundation under a contract with Mindaugas Rasiukevicius.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
18 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
19 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
20 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
21 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
22 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
23 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
24 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
25 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
26 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
27 * POSSIBILITY OF SUCH DAMAGE.
28 */
29
30#ifndef _NPF_LIB_H_
31#define _NPF_LIB_H_
32
33#include <sys/types.h>
34#include <net/npf.h>
35
36__BEGIN_DECLS
37
38struct nl_config;
39struct nl_rule;
40struct nl_rproc;
41struct nl_table;
42struct nl_ext;
43
44typedef struct nl_config nl_config_t;
45typedef struct nl_rule nl_rule_t;
46typedef struct nl_rproc nl_rproc_t;
47typedef struct nl_table nl_table_t;
48
49typedef struct nl_rule nl_nat_t;
50
51typedef struct nl_ext nl_ext_t;
52
53typedef int (*npfext_initfunc_t)(void);
54typedef nl_ext_t *(*npfext_consfunc_t)(const char *);
55typedef int (*npfext_paramfunc_t)(nl_ext_t *, const char *, const char *);
56
57#ifdef _NPF_PRIVATE
58
59typedef void (*nl_rule_callback_t)(nl_rule_t *, unsigned);
60typedef void (*nl_table_callback_t)(unsigned, int);
61
62#endif
63
64nl_config_t * npf_config_create(void);
65void npf_config_destroy(nl_config_t *);
66int npf_config_submit(nl_config_t *, int, npf_error_t *);
67nl_config_t * npf_config_retrieve(int);
68int npf_config_flush(int);
69nl_config_t * npf_config_import(const void *, size_t);
70void * npf_config_export(nl_config_t *, size_t *);
71bool npf_config_active_p(nl_config_t *);
72bool npf_config_loaded_p(nl_config_t *);
73void * npf_config_build(nl_config_t *);
74
75int npf_ruleset_add(int, const char *, nl_rule_t *, uint64_t *);
76int npf_ruleset_remove(int, const char *, uint64_t);
77int npf_ruleset_remkey(int, const char *, const void *, size_t);
78int npf_ruleset_flush(int, const char *);
79
80nl_ext_t * npf_ext_construct(const char *);
81void npf_ext_param_u32(nl_ext_t *, const char *, uint32_t);
82void npf_ext_param_bool(nl_ext_t *, const char *, bool);
83void npf_ext_param_string(nl_ext_t *, const char *, const char *);
84
85nl_rule_t * npf_rule_create(const char *, uint32_t, const char *);
86int npf_rule_setcode(nl_rule_t *, int, const void *, size_t);
87int npf_rule_setprio(nl_rule_t *, int);
88int npf_rule_setproc(nl_rule_t *, const char *);
89int npf_rule_setkey(nl_rule_t *, const void *, size_t);
90int npf_rule_setinfo(nl_rule_t *, const void *, size_t);
91bool npf_rule_exists_p(nl_config_t *, const char *);
92int npf_rule_insert(nl_config_t *, nl_rule_t *, nl_rule_t *);
93void * npf_rule_export(nl_rule_t *, size_t *);
94void npf_rule_destroy(nl_rule_t *);
95
96nl_rproc_t * npf_rproc_create(const char *);
97int npf_rproc_extcall(nl_rproc_t *, nl_ext_t *);
98bool npf_rproc_exists_p(nl_config_t *, const char *);
99int npf_rproc_insert(nl_config_t *, nl_rproc_t *);
100
101nl_nat_t * npf_nat_create(int, unsigned, const char *);
102int npf_nat_insert(nl_config_t *, nl_nat_t *, int);
103int npf_nat_lookup(int, int, npf_addr_t *[2], in_port_t [2], int, int);
104int npf_nat_setaddr(nl_nat_t *, int, npf_addr_t *, npf_netmask_t);
105int npf_nat_setport(nl_nat_t *, in_port_t);
106int npf_nat_settable(nl_nat_t *, unsigned);
107int npf_nat_setalgo(nl_nat_t *, unsigned);
108int npf_nat_setnpt66(nl_nat_t *, uint16_t);
109
110nl_table_t * npf_table_create(const char *, unsigned, int);
111int npf_table_add_entry(nl_table_t *, int,
112 const npf_addr_t *, const npf_netmask_t);
113int npf_table_insert(nl_config_t *, nl_table_t *);
114void npf_table_destroy(nl_table_t *);
115
116#ifdef _NPF_PRIVATE
117
118#include <ifaddrs.h>
119
120nl_rule_t * npf_rule_iterate(nl_config_t *, unsigned *);
121const char * npf_rule_getname(nl_rule_t *);
122uint32_t npf_rule_getattr(nl_rule_t *);
123const char * npf_rule_getinterface(nl_rule_t *);
124const void * npf_rule_getinfo(nl_rule_t *, size_t *);
125const char * npf_rule_getproc(nl_rule_t *);
126uint64_t npf_rule_getid(nl_rule_t *);
127const void * npf_rule_getcode(nl_rule_t *, int *, size_t *);
128
129nl_table_t * npf_table_iterate(nl_config_t *);
130const char * npf_table_getname(nl_table_t *);
131unsigned npf_table_getid(nl_table_t *);
132int npf_table_gettype(nl_table_t *);
133
134nl_nat_t * npf_nat_iterate(nl_config_t *);
135int npf_nat_gettype(nl_nat_t *);
136unsigned npf_nat_getflags(nl_nat_t *);
137const npf_addr_t *npf_nat_getaddr(nl_nat_t *, size_t *, npf_netmask_t *);
138in_port_t npf_nat_getport(nl_nat_t *);
139unsigned npf_nat_gettable(nl_nat_t *);
140unsigned npf_nat_getalgo(nl_nat_t *);
141
142nl_rproc_t * npf_rproc_iterate(nl_config_t *);
143const char * npf_rproc_getname(nl_rproc_t *);
144
145int _npf_ruleset_list(int, const char *, nl_config_t *);
146void _npf_debug_addif(nl_config_t *, const char *);
147void _npf_config_dump(nl_config_t *, int);
148
149/* The ALG interface is experimental */
150int _npf_alg_load(nl_config_t *, const char *);
151int _npf_alg_unload(nl_config_t *, const char *);
152
153typedef int (*npf_conn_func_t)(unsigned, const npf_addr_t *,
154 const in_port_t *, const char *, void *);
155int npf_conn_list(int, npf_conn_func_t, void *);
156
157#endif
158
159__END_DECLS
160
161#endif /* _NPF_LIB_H_ */
162