70 lines · 1.4 KB · C
RawDownload
/* * Implements a dummy match to allow attaching comments to rules * * 2003-05-13 Brad Fisher (brad@info-link.net) */ #include <linux/module.h>#include <linux/skbuff.h>#include <linux/netfilter/x_tables.h>#include <linux/netfilter/xt_comment.h> MODULE_AUTHOR("Brad Fisher <brad@info-link.net>");MODULE_DESCRIPTION("iptables comment match module");MODULE_LICENSE("GPL");MODULE_ALIAS("ipt_comment");MODULE_ALIAS("ip6t_comment"); static intmatch(const struct sk_buff *skb,      const struct net_device *in,      const struct net_device *out,      const struct xt_match *match,      const void *matchinfo,      int offset,      unsigned int protooff,      int *hotdrop){	/* We always match */	return 1;} static struct xt_match comment_match = {	.name		= "comment",	.match		= match,	.matchsize	= sizeof(struct xt_comment_info),	.family		= AF_INET,	.me		= THIS_MODULE}; static struct xt_match comment6_match = {	.name		= "comment",	.match		= match,	.matchsize	= sizeof(struct xt_comment_info),	.family		= AF_INET6,	.me		= THIS_MODULE}; static int __init xt_comment_init(void){	int ret; 	ret = xt_register_match(&comment_match);	if (ret)		return ret; 	ret = xt_register_match(&comment6_match);	if (ret)		xt_unregister_match(&comment_match); 	return ret;} static void __exit xt_comment_fini(void){	xt_unregister_match(&comment_match);	xt_unregister_match(&comment6_match);} module_init(xt_comment_init);module_exit(xt_comment_fini);