115 lines
2.4 KiB
C
115 lines
2.4 KiB
C
|
//
|
|||
|
|
// config.h
|
|||
|
|
//
|
|||
|
|
// Created by foxist on 2019/8/13.
|
|||
|
|
//
|
|||
|
|
|
|||
|
|
#ifndef config_h
|
|||
|
|
#define config_h
|
|||
|
|
|
|||
|
|
//#define NAT_DEBUG
|
|||
|
|
|
|||
|
|
#include <stdio.h>
|
|||
|
|
#include <string.h>
|
|||
|
|
#include <stdlib.h>
|
|||
|
|
#include <stdarg.h>
|
|||
|
|
|
|||
|
|
#include <cjson/cJSON.h>
|
|||
|
|
|
|||
|
|
#ifndef NAT_DEBUG
|
|||
|
|
#include "rpc.h"
|
|||
|
|
#endif
|
|||
|
|
|
|||
|
|
#ifdef NAT_DEBUG
|
|||
|
|
typedef enum ret_code {
|
|||
|
|
RET_OK,
|
|||
|
|
RET_ERR,
|
|||
|
|
RET_NOMEM,
|
|||
|
|
RET_INPUTERR
|
|||
|
|
} ret_code;
|
|||
|
|
|
|||
|
|
#endif
|
|||
|
|
|
|||
|
|
|
|||
|
|
#define MAX_ERR_MSG 1024
|
|||
|
|
#define MAX_LINE_LEN 384
|
|||
|
|
#define MAX_ACTION 8
|
|||
|
|
#define MAX_ID 5
|
|||
|
|
#define MAX_CHAIN 15
|
|||
|
|
#define MAX_TARGET 15
|
|||
|
|
#define MAX_PROT 15
|
|||
|
|
#define MAX_ADDR 45
|
|||
|
|
#define MAX_IP 33
|
|||
|
|
#define MAX_PORT 5
|
|||
|
|
#define MAX_DEVICE 15
|
|||
|
|
#define MAX_MATCH 6
|
|||
|
|
#define MAX_MATCH_INFO 10
|
|||
|
|
#define IPT_PARANUM 14
|
|||
|
|
#define NF_PARANUM 8
|
|||
|
|
|
|||
|
|
#define SUCCESS 1
|
|||
|
|
#define FAIL 0
|
|||
|
|
|
|||
|
|
typedef unsigned char uchar;
|
|||
|
|
typedef char *iptables_rule;
|
|||
|
|
typedef int boolean;
|
|||
|
|
|
|||
|
|
struct ipt_config{
|
|||
|
|
char action[MAX_ACTION]; // 动作：0: delete, 1: add, 2: save, 3: restore
|
|||
|
|
|
|||
|
|
char id[MAX_ID]; // 配置删除id
|
|||
|
|
|
|||
|
|
char chain[MAX_CHAIN]; // 链
|
|||
|
|
char target[MAX_TARGET]; //
|
|||
|
|
char prot[MAX_PROT]; // 协议
|
|||
|
|
char source[MAX_IP]; // 源地址
|
|||
|
|
char destination[MAX_IP]; // 目的地址
|
|||
|
|
char sport[MAX_PORT];
|
|||
|
|
char dport[MAX_PORT]; // 端口号
|
|||
|
|
char to[MAX_ADDR];
|
|||
|
|
//union {
|
|||
|
|
char i_device[MAX_DEVICE];
|
|||
|
|
char o_device[MAX_DEVICE];
|
|||
|
|
//}
|
|||
|
|
|
|||
|
|
|
|||
|
|
char match[MAX_MATCH];
|
|||
|
|
char match_info[MAX_MATCH_INFO];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
typedef struct range_ipt_config {
|
|||
|
|
int begin;
|
|||
|
|
int offset;
|
|||
|
|
|
|||
|
|
struct ipt_config conf;
|
|||
|
|
} range_ipt_config;
|
|||
|
|
|
|||
|
|
typedef struct ip_port {
|
|||
|
|
char ip[MAX_IP];
|
|||
|
|
char port[MAX_PORT];
|
|||
|
|
} ip_port;
|
|||
|
|
|
|||
|
|
typedef struct nf_conntrack {
|
|||
|
|
ip_port addr[4];
|
|||
|
|
|
|||
|
|
char prot[MAX_PROT];
|
|||
|
|
} nf_conntrack;
|
|||
|
|
|
|||
|
|
|
|||
|
|
/* ======================== PUBLIC API ============================*/
|
|||
|
|
|
|||
|
|
// 从iptables-save配置文件中，获取json格式的nat配置信息
|
|||
|
|
ret_code get_iptables_config(const char *json, const char * __restrict__ __filename,
|
|||
|
|
char *output, int *outlen, char **msg);
|
|||
|
|
|
|||
|
|
// 使用json数据格式，配置ipables nat
|
|||
|
|
ret_code set_iptables_config(const char *json, char **msg);
|
|||
|
|
|
|||
|
|
//ret_code get_nf_conntrack(const char * __restrict__ __filename,
|
|||
|
|
// char *output, int *outlen, char **msg);
|
|||
|
|
|
|||
|
|
// linux系统命令执行函数, 返回shell信息
|
|||
|
|
ret_code run_command(char *const cmd, char **msg);
|
|||
|
|
|
|||
|
|
#endif /* config_h */
|