61 lines · 1.3 KB · C
RawDownload
/* * Implements a dummy match to allow attaching comments to rules * * 2003-05-13 Brad Fisher (brad@info-link.net) */ #include <linux/module.h>#include <linux/skbuff.h>#include <linux/netfilter/x_tables.h>#include <linux/netfilter/xt_comment.h> MODULE_AUTHOR("Brad Fisher <brad@info-link.net>");MODULE_DESCRIPTION("iptables comment match module");MODULE_LICENSE("GPL");MODULE_ALIAS("ipt_comment");MODULE_ALIAS("ip6t_comment"); static intmatch(const struct sk_buff *skb,      const struct net_device *in,      const struct net_device *out,      const struct xt_match *match,      const void *matchinfo,      int offset,      unsigned int protooff,      int *hotdrop){	/* We always match */	return 1;} static struct xt_match xt_comment_match[] = {	{		.name		= "comment",		.family		= AF_INET,		.match		= match,		.matchsize	= sizeof(struct xt_comment_info),		.me		= THIS_MODULE	},	{		.name		= "comment",		.family		= AF_INET6,		.match		= match,		.matchsize	= sizeof(struct xt_comment_info),		.me		= THIS_MODULE	},}; static int __init xt_comment_init(void){	return xt_register_matches(xt_comment_match,				   ARRAY_SIZE(xt_comment_match));} static void __exit xt_comment_fini(void){	xt_unregister_matches(xt_comment_match, ARRAY_SIZE(xt_comment_match));} module_init(xt_comment_init);module_exit(xt_comment_fini);