structure.h

Go to the documentation of this file.

/*
** Copyright (C) 2002-2008 INL
** Written by Éric Leblond <regit@inl.fr>
** INL http://www.inl.fr/
**
** $Id: structure.h 5232 2008-11-19 15:21:29Z pollux $
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; version 3 of the License.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/

#ifndef STRUCTURE_HEADER
#define STRUCTURE_HEADER

#ifndef NUFW_HEADER_H
#   error "include nufw.h instead of structure.h"
#endif

#include <semaphore.h>
#include <sys/types.h>
#include <unistd.h>
#include <stdlib.h>
#include <stdio.h>
#include <pthread.h>
#include <netinet/in.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>
#include <netinet/udp.h>
#include <arpa/inet.h>
#include <linux/netfilter.h>
#include <time.h>
#include "config.h"

#include "proto.h"

#define AUTHREQ_ADDR  "127.0.0.1"       
#define TRACK_SIZE 1000         
#define PACKET_TIMEOUT 15       
#define HOSTNAME_SIZE 256       
#define FILENAME_SIZE 256       
extern char *cert_file;         
extern char *key_file;          
char *ca_file;                  
char *crl_file;                 
char *nuauth_cert_dn;           
char authreq_addr[HOSTNAME_SIZE];

unsigned int authreq_port;

int packet_timeout;

int track_size;

int nufw_set_mark;

int nufw_strict_tls;

typedef enum {
        PCKT_NONE = 0,
        PCKT_WAITING,
        PCKT_SENT,
        PCKT_ANSWERED
} pckt_state_t;

typedef struct Packet_Ids {
        unsigned long id;

        pckt_state_t state;

        long timestamp;
#ifdef PERF_DISPLAY_ENABLE
        struct timeval arrival_time;
#endif

#if (HAVE_LIBIPQ_MARK || USE_NFQUEUE)

        unsigned long nfmark;
#endif

        struct Packet_Ids *next;
} packet_idl;

/***** Pack list ****/

struct packets_list_t {
        packet_idl *start;      
        packet_idl *end;        
        int length;             
        pthread_mutex_t mutex;
} packets_list;

struct nufw_signals {
        struct sigaction old_sigterm_hdl;
        struct sigaction old_sigint_hdl;
};

#if USE_NFQUEUE
struct nfq_q_handle *hndl;
#else
/* ipq handler */
struct ipq_handle *hndl;
#endif

struct nufw_threadtype {
        pthread_t thread;
        pthread_mutex_t mutex;
};

struct nufw_threadargument {
        struct nufw_threadtype *thread;
        int parent_pid;
};

/* mutex */
extern pthread_mutex_t ipq_mutex;

#if USE_NFQUEUE
#define IPQ_SET_VERDICT(PACKETID, DECISION) \
        do { \
                pthread_mutex_lock(&ipq_mutex); \
                nfq_set_verdict(hndl, PACKETID, DECISION, 0 , NULL); \
                pthread_mutex_unlock(&ipq_mutex); \
        } while(0)

#define IPQ_SET_VWMARK(PACKETID, DECISION, NFMARK) \
        do { \
                pthread_mutex_lock(&ipq_mutex); \
                nfq_set_verdict_mark(hndl, PACKETID, DECISION, NFMARK, 0, NULL); \
                pthread_mutex_unlock(&ipq_mutex); \
        } while(0)
#else
#define IPQ_SET_VERDICT(PACKETID, DECISION) \
        do { \
                pthread_mutex_lock(&ipq_mutex); \
                ipq_set_verdict(hndl, PACKETID, DECISION,0,NULL); \
                pthread_mutex_unlock(&ipq_mutex); \
        } while(0)

#define IPQ_SET_VWMARK(PACKETID, DECISION, NFMARK) \
        do { \
                pthread_mutex_lock(&ipq_mutex); \
                ipq_set_vwmark(hndl, PACKETID, DECISION, NFMARK,0,NULL); \
                pthread_mutex_unlock(&ipq_mutex); \
        } while(0)
#endif

int pckt_tx;                    
int pckt_rx;                    
#endif                          /* ifndef STRUCTURE_HEADER */

---