1 /* SPDX-License-Identifier: GPL-2.0 */ 2 #ifndef _NF_CONNTRACK_FTP_H 3 #define _NF_CONNTRACK_FTP_H 4 5 #include <linux/netfilter.h> 6 #include <linux/skbuff.h> 7 #include <linux/types.h> 8 #include <net/netfilter/nf_conntrack_expect.h> 9 #include <uapi/linux/netfilter/nf_conntrack_ftp.h> 10 #include <uapi/linux/netfilter/nf_conntrack_tuple_common.h> 11 12 #define FTP_PORT 21 13 14 #define NF_CT_FTP_SEQ_PICKUP (1 << 0) 15 16 #define NUM_SEQ_TO_REMEMBER 2 17 /* This structure exists only once per master */ 18 struct nf_ct_ftp_master { 19 /* Valid seq positions for cmd matching after newline */ 20 u_int32_t seq_aft_nl[IP_CT_DIR_MAX][NUM_SEQ_TO_REMEMBER]; 21 /* 0 means seq_match_aft_nl not set */ 22 u_int16_t seq_aft_nl_num[IP_CT_DIR_MAX]; 23 /* pickup sequence tracking, useful for conntrackd */ 24 u_int16_t flags[IP_CT_DIR_MAX]; 25 }; 26 27 /* For NAT to hook in when we find a packet which describes what other 28 * connection we should expect. */ 29 typedef unsigned int 30 nf_nat_ftp_hook_fn(struct sk_buff *skb, 31 struct nf_conn *ct, 32 enum ip_conntrack_info ctinfo, 33 enum nf_ct_ftp_type type, 34 unsigned int protoff, 35 unsigned int matchoff, 36 unsigned int matchlen, 37 struct nf_conntrack_expect *exp); 38 39 extern nf_nat_ftp_hook_fn __rcu *nf_nat_ftp_hook; 40 #endif /* _NF_CONNTRACK_FTP_H */ 41