Updated filters: they now actually see IP/pxlen of net being filtered,

gateway, and who told us, so they can do usefull jobs from now on.
This commit is contained in:
Pavel Machek 1999-04-19 18:41:56 +00:00
parent afbc41ab3d
commit 36bbfc704c
6 changed files with 50 additions and 9 deletions

View file

@ -32,15 +32,16 @@ int i;
print " false = " 1.2.3.4 ~ [ 1.2.3.3, 1.2.3.5 ]; print " false = " 1.2.3.4 ~ [ 1.2.3.3, 1.2.3.5 ];
print "done"; print "done";
quitbird; # quitbird;
print "*** FAIL: this is unreachable"; print "*** FAIL: this is unreachable";
} }
filter testf filter testf
int j; int j;
{ {
j = const(4321); print "Heya, filtering route to " rta.net.ip " prefixlen " rta.net.len;
print j; print "This route was from " rta.from;
accept;
} }
protocol rip MyRIP_test { protocol rip MyRIP_test {
@ -50,6 +51,7 @@ protocol rip MyRIP_test {
period 5; period 5;
garbagetime 30; garbagetime 30;
interface "*"; interface "*";
export filter testf;
} }
protocol device { protocol device {

View file

@ -39,7 +39,7 @@ CF_DECLS
%type <i> expr bool pxlen %type <i> expr bool pxlen
%nonassoc '=' '<' '>' '~' ELSE IF %nonassoc '=' '<' '>' '~' ELSE IF '.'
%left '+' '-' %left '+' '-'
%left '*' '/' '%' %left '*' '/' '%'
%left '!' %left '!'

View file

@ -14,6 +14,7 @@
#protocol rip MyRIP_test { #protocol rip MyRIP_test {
# preference xyzzy; # preference xyzzy;
# debug all; # debug all;
# import filter okay;
#} #}
protocol direct { protocol direct {

View file

@ -23,6 +23,9 @@ CF_KEYWORDS(FUNCTION, PRINT, CONST,
INT, BOOL, IP, PREFIX, PAIR, SET, STRING, INT, BOOL, IP, PREFIX, PAIR, SET, STRING,
IF, THEN, ELSE, IF, THEN, ELSE,
TRUE, FALSE, TRUE, FALSE,
RTA, FROM, GW, NET,
LEN,
IMPOSSIBLE,
FILTER FILTER
) )
@ -179,6 +182,13 @@ term:
} }
} }
| constant { $$ = $1; } | constant { $$ = $1; }
| RTA '.' FROM { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_IP; $$->a2.i = OFFSETOF(struct rta, from); }
| RTA '.' GW { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_IP; $$->a2.i = OFFSETOF(struct rta, gw); }
| RTA '.' NET { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_PREFIX; $$->a2.i = 0x12345678; }
| term '.' IP { $$ = f_new_inst(); $$->code = 'cp'; $$->a1.p = $1; $$->a2.i = T_IP; }
| term '.' LEN { $$ = f_new_inst(); $$->code = 'cp'; $$->a1.p = $1; $$->a2.i = T_INT; }
; ;
break_command: break_command:

View file

@ -93,6 +93,8 @@ val_print(struct f_val v)
printf( buf ); printf( buf );
} }
static struct rte **f_rte;
static struct f_val static struct f_val
interpret(struct f_inst *what) interpret(struct f_inst *what)
{ {
@ -218,6 +220,36 @@ interpret(struct f_inst *what)
bug( "unknown return type: can not happen"); bug( "unknown return type: can not happen");
} }
break; break;
case 'a': /* rta access */
{
struct rta *rta = (*f_rte)->attrs;
res.type = what->a1.i;
switch(res.type) {
case T_IP:
res.val.ip = * (ip_addr *) ((char *) rta + what->a2.i);
break;
case T_PREFIX: /* Warning: this works only for prefix of network */
{
res.val.px.ip = (*f_rte)->net->n.prefix;
res.val.px.len = (*f_rte)->net->n.pxlen;
break;
}
default:
bug( "Invalid type for rta access" );
}
}
break;
case 'cp': /* Convert prefix to ... */
ONEARG;
if (v1.type != T_PREFIX)
runtime( "Can not convert non-prefix this way" );
res.type = what->a2.i;
switch(res.type) {
case T_INT: res.val.i = v1.val.px.len; break;
case T_IP: res.val.ip = v1.val.px.ip; break;
default: bug( "Unknown prefix to conversion\n" );
}
break;
default: default:
bug( "Unknown instruction %d (%c)", what->code, what->code & 0xff); bug( "Unknown instruction %d (%c)", what->code, what->code & 0xff);
} }
@ -233,6 +265,7 @@ f_run(struct filter *filter, struct rte **rte, struct ea_list **tmp_attrs, struc
struct f_val res; struct f_val res;
debug( "Running filter `%s'...", filter->name ); debug( "Running filter `%s'...", filter->name );
f_rte = rte;
inst = filter->root; inst = filter->root;
res = interpret(inst); res = interpret(inst);
if (res.type != T_RETURN) if (res.type != T_RETURN)

View file

@ -69,11 +69,6 @@ rip_tx( sock *s )
return; return;
} }
if (c->done) {
DBG( "looks like I'm done!\n" );
return;
}
DBG( "Preparing packet to send: " ); DBG( "Preparing packet to send: " );
packet->heading.command = RIPCMD_RESPONSE; packet->heading.command = RIPCMD_RESPONSE;