Signed-off-by: Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx> --- doxygen/doxygen.cfg.in | 1 + src/libnetfilter_queue.c | 43 ++++++++++++++++++++++++++++++---------- 2 files changed, 33 insertions(+), 11 deletions(-) diff --git a/doxygen/doxygen.cfg.in b/doxygen/doxygen.cfg.in index 97174ff..3e06bd8 100644 --- a/doxygen/doxygen.cfg.in +++ b/doxygen/doxygen.cfg.in @@ -13,6 +13,7 @@ EXCLUDE_SYMBOLS = EXPORT_SYMBOL \ nfq_handle \ nfq_data \ nfq_q_handle \ + nfnl_handle \ tcp_flag_word EXAMPLE_PATTERNS = INPUT_FILTER = "sed 's/EXPORT_SYMBOL//g'" diff --git a/src/libnetfilter_queue.c b/src/libnetfilter_queue.c index bf67a19..ca44a6c 100644 --- a/src/libnetfilter_queue.c +++ b/src/libnetfilter_queue.c @@ -31,6 +31,7 @@ #include <sys/socket.h> #include <linux/netfilter/nfnetlink_queue.h> +#include <libmnl/libmnl.h> #include <libnfnetlink/libnfnetlink.h> #include <libnetfilter_queue/libnetfilter_queue.h> #include "internal.h" @@ -134,11 +135,21 @@ gcc -g3 -ggdb -Wall -lmnl -lnetfilter_queue -o nf-queue nf-queue.c * burst */ +/* We need a rump nfnl_handle to support nfnl_rcvbufsiz() */ +/* Luckily fd is the 1st item and that's all we need */ + +struct nfnl_handle { + int fd; +}; + struct nfq_handle { + unsigned int portid; struct nfnl_handle *nfnlh; struct nfnl_subsys_handle *nfnlssh; struct nfq_q_handle *qh_list; + struct mnl_socket *nl; + struct nfnl_handle rump_nfnl_handle; }; struct nfq_q_handle @@ -383,20 +394,30 @@ int nfq_fd(struct nfq_handle *h) EXPORT_SYMBOL struct nfq_handle *nfq_open(void) { - struct nfnl_handle *nfnlh = nfnl_open(); - struct nfq_handle *qh; + struct nfq_handle *h = malloc(sizeof(*h)); - if (!nfnlh) + if (!h) return NULL; + memset(h, 0, sizeof(*h)); - /* unset netlink sequence tracking by default */ - nfnl_unset_sequence_tracking(nfnlh); + h->nl = mnl_socket_open(NETLINK_NETFILTER); + if (!h->nl) { + free(h); + return NULL; + } - qh = nfq_open_nfnl(nfnlh); - if (!qh) - nfnl_close(nfnlh); + if (mnl_socket_bind(h->nl, 0, MNL_SOCKET_AUTOPID) < 0) { + mnl_socket_close(h->nl); + free(h); + return NULL; + } + h->portid = mnl_socket_get_portid(h->nl); - return qh; + /* fudges for nfnl_rcvbufsiz() */ + h->nfnlh = &h->rump_nfnl_handle; + h->rump_nfnl_handle.fd = mnl_socket_get_fd(h->nl); + + return h; } /** @@ -502,7 +523,7 @@ int nfq_close(struct nfq_handle *h) EXPORT_SYMBOL int nfq_bind_pf(struct nfq_handle *h, uint16_t pf) { - return __build_send_cfg_msg(h, NFQNL_CFG_CMD_PF_BIND, 0, pf); + return 0; } /** @@ -518,7 +539,7 @@ int nfq_bind_pf(struct nfq_handle *h, uint16_t pf) EXPORT_SYMBOL int nfq_unbind_pf(struct nfq_handle *h, uint16_t pf) { - return __build_send_cfg_msg(h, NFQNL_CFG_CMD_PF_UNBIND, 0, pf); + return 0; } -- 2.35.8