1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
use std::convert::TryFrom;
use std::fmt::Debug;
use rustables_macros::nfnetlink_struct;
use crate::nlmsg::{NfNetlinkAttribute, NfNetlinkDeserializable, NfNetlinkObject, NfNetlinkWriter};
use crate::parser::{DecodeError, Parsable};
use crate::sys::{
NFTA_TABLE_FLAGS, NFTA_TABLE_NAME, NFTA_TABLE_USERDATA, NFT_MSG_DELTABLE, NFT_MSG_GETTABLE,
NFT_MSG_NEWTABLE, NLM_F_ACK, NLM_F_CREATE,
};
use crate::{MsgType, ProtocolFamily};
/// Abstraction of a `nftnl_table`, the top level container in netfilter. A table has a protocol
/// family and contains [`Chain`]s that in turn hold the rules.
///
/// [`Chain`]: struct.Chain.html
#[derive(Default, PartialEq, Eq, Debug)]
#[nfnetlink_struct(derive_deserialize = false)]
pub struct Table {
#[field(NFTA_TABLE_NAME)]
name: String,
#[field(NFTA_TABLE_FLAGS)]
flags: u32,
#[field(NFTA_TABLE_USERDATA)]
userdata: Vec<u8>,
pub family: ProtocolFamily,
}
impl Table {
pub fn new(family: ProtocolFamily) -> Table {
let mut res = Self::default();
res.family = family;
res
}
}
impl NfNetlinkObject for Table {
fn add_or_remove<'a>(&self, writer: &mut NfNetlinkWriter<'a>, msg_type: MsgType, seq: u32) {
let raw_msg_type = match msg_type {
MsgType::Add => NFT_MSG_NEWTABLE,
MsgType::Del => NFT_MSG_DELTABLE,
} as u16;
writer.write_header(
raw_msg_type,
self.family,
(if let MsgType::Add = msg_type {
NLM_F_CREATE
} else {
0
} | NLM_F_ACK) as u16,
seq,
None,
);
let buf = writer.add_data_zeroed(self.get_size());
unsafe {
self.write_payload(buf.as_mut_ptr());
}
writer.finalize_writing_object();
}
}
impl NfNetlinkDeserializable for Table {
fn deserialize(buf: &[u8]) -> Result<(Self, &[u8]), DecodeError> {
let (mut obj, nfgenmsg, remaining_data) =
Self::parse_object(buf, NFT_MSG_NEWTABLE, NFT_MSG_DELTABLE)?;
obj.family = ProtocolFamily::try_from(nfgenmsg.nfgen_family as i32)?;
Ok((obj, remaining_data))
}
}
pub fn list_tables() -> Result<Vec<Table>, crate::query::Error> {
let mut result = Vec::new();
crate::query::list_objects_with_data(
NFT_MSG_GETTABLE as u16,
&|table: Table, tables: &mut Vec<Table>| {
tables.push(table);
Ok(())
},
None,
&mut result,
)?;
Ok(result)
}
|
