Updated filters: they now actually see IP/pxlen of net being filtered,
gateway, and who told us, so they can do usefull jobs from now on.
This commit is contained in:
parent
afbc41ab3d
commit
36bbfc704c
6 changed files with 50 additions and 9 deletions
|
@ -32,15 +32,16 @@ int i;
|
||||||
print " false = " 1.2.3.4 ~ [ 1.2.3.3, 1.2.3.5 ];
|
print " false = " 1.2.3.4 ~ [ 1.2.3.3, 1.2.3.5 ];
|
||||||
|
|
||||||
print "done";
|
print "done";
|
||||||
quitbird;
|
# quitbird;
|
||||||
print "*** FAIL: this is unreachable";
|
print "*** FAIL: this is unreachable";
|
||||||
}
|
}
|
||||||
|
|
||||||
filter testf
|
filter testf
|
||||||
int j;
|
int j;
|
||||||
{
|
{
|
||||||
j = const(4321);
|
print "Heya, filtering route to " rta.net.ip " prefixlen " rta.net.len;
|
||||||
print j;
|
print "This route was from " rta.from;
|
||||||
|
accept;
|
||||||
}
|
}
|
||||||
|
|
||||||
protocol rip MyRIP_test {
|
protocol rip MyRIP_test {
|
||||||
|
@ -50,6 +51,7 @@ protocol rip MyRIP_test {
|
||||||
period 5;
|
period 5;
|
||||||
garbagetime 30;
|
garbagetime 30;
|
||||||
interface "*";
|
interface "*";
|
||||||
|
export filter testf;
|
||||||
}
|
}
|
||||||
|
|
||||||
protocol device {
|
protocol device {
|
||||||
|
|
|
@ -39,7 +39,7 @@ CF_DECLS
|
||||||
|
|
||||||
%type <i> expr bool pxlen
|
%type <i> expr bool pxlen
|
||||||
|
|
||||||
%nonassoc '=' '<' '>' '~' ELSE IF
|
%nonassoc '=' '<' '>' '~' ELSE IF '.'
|
||||||
%left '+' '-'
|
%left '+' '-'
|
||||||
%left '*' '/' '%'
|
%left '*' '/' '%'
|
||||||
%left '!'
|
%left '!'
|
||||||
|
|
|
@ -14,6 +14,7 @@
|
||||||
#protocol rip MyRIP_test {
|
#protocol rip MyRIP_test {
|
||||||
# preference xyzzy;
|
# preference xyzzy;
|
||||||
# debug all;
|
# debug all;
|
||||||
|
# import filter okay;
|
||||||
#}
|
#}
|
||||||
|
|
||||||
protocol direct {
|
protocol direct {
|
||||||
|
|
|
@ -23,6 +23,9 @@ CF_KEYWORDS(FUNCTION, PRINT, CONST,
|
||||||
INT, BOOL, IP, PREFIX, PAIR, SET, STRING,
|
INT, BOOL, IP, PREFIX, PAIR, SET, STRING,
|
||||||
IF, THEN, ELSE,
|
IF, THEN, ELSE,
|
||||||
TRUE, FALSE,
|
TRUE, FALSE,
|
||||||
|
RTA, FROM, GW, NET,
|
||||||
|
LEN,
|
||||||
|
IMPOSSIBLE,
|
||||||
FILTER
|
FILTER
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -179,6 +182,13 @@ term:
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
| constant { $$ = $1; }
|
| constant { $$ = $1; }
|
||||||
|
| RTA '.' FROM { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_IP; $$->a2.i = OFFSETOF(struct rta, from); }
|
||||||
|
|
||||||
|
| RTA '.' GW { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_IP; $$->a2.i = OFFSETOF(struct rta, gw); }
|
||||||
|
| RTA '.' NET { $$ = f_new_inst(); $$->code = 'a'; $$->a1.i = T_PREFIX; $$->a2.i = 0x12345678; }
|
||||||
|
|
||||||
|
| term '.' IP { $$ = f_new_inst(); $$->code = 'cp'; $$->a1.p = $1; $$->a2.i = T_IP; }
|
||||||
|
| term '.' LEN { $$ = f_new_inst(); $$->code = 'cp'; $$->a1.p = $1; $$->a2.i = T_INT; }
|
||||||
;
|
;
|
||||||
|
|
||||||
break_command:
|
break_command:
|
||||||
|
|
|
@ -93,6 +93,8 @@ val_print(struct f_val v)
|
||||||
printf( buf );
|
printf( buf );
|
||||||
}
|
}
|
||||||
|
|
||||||
|
static struct rte **f_rte;
|
||||||
|
|
||||||
static struct f_val
|
static struct f_val
|
||||||
interpret(struct f_inst *what)
|
interpret(struct f_inst *what)
|
||||||
{
|
{
|
||||||
|
@ -218,6 +220,36 @@ interpret(struct f_inst *what)
|
||||||
bug( "unknown return type: can not happen");
|
bug( "unknown return type: can not happen");
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
|
case 'a': /* rta access */
|
||||||
|
{
|
||||||
|
struct rta *rta = (*f_rte)->attrs;
|
||||||
|
res.type = what->a1.i;
|
||||||
|
switch(res.type) {
|
||||||
|
case T_IP:
|
||||||
|
res.val.ip = * (ip_addr *) ((char *) rta + what->a2.i);
|
||||||
|
break;
|
||||||
|
case T_PREFIX: /* Warning: this works only for prefix of network */
|
||||||
|
{
|
||||||
|
res.val.px.ip = (*f_rte)->net->n.prefix;
|
||||||
|
res.val.px.len = (*f_rte)->net->n.pxlen;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
default:
|
||||||
|
bug( "Invalid type for rta access" );
|
||||||
|
}
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
case 'cp': /* Convert prefix to ... */
|
||||||
|
ONEARG;
|
||||||
|
if (v1.type != T_PREFIX)
|
||||||
|
runtime( "Can not convert non-prefix this way" );
|
||||||
|
res.type = what->a2.i;
|
||||||
|
switch(res.type) {
|
||||||
|
case T_INT: res.val.i = v1.val.px.len; break;
|
||||||
|
case T_IP: res.val.ip = v1.val.px.ip; break;
|
||||||
|
default: bug( "Unknown prefix to conversion\n" );
|
||||||
|
}
|
||||||
|
break;
|
||||||
default:
|
default:
|
||||||
bug( "Unknown instruction %d (%c)", what->code, what->code & 0xff);
|
bug( "Unknown instruction %d (%c)", what->code, what->code & 0xff);
|
||||||
}
|
}
|
||||||
|
@ -233,6 +265,7 @@ f_run(struct filter *filter, struct rte **rte, struct ea_list **tmp_attrs, struc
|
||||||
struct f_val res;
|
struct f_val res;
|
||||||
debug( "Running filter `%s'...", filter->name );
|
debug( "Running filter `%s'...", filter->name );
|
||||||
|
|
||||||
|
f_rte = rte;
|
||||||
inst = filter->root;
|
inst = filter->root;
|
||||||
res = interpret(inst);
|
res = interpret(inst);
|
||||||
if (res.type != T_RETURN)
|
if (res.type != T_RETURN)
|
||||||
|
|
|
@ -69,11 +69,6 @@ rip_tx( sock *s )
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (c->done) {
|
|
||||||
DBG( "looks like I'm done!\n" );
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
DBG( "Preparing packet to send: " );
|
DBG( "Preparing packet to send: " );
|
||||||
|
|
||||||
packet->heading.command = RIPCMD_RESPONSE;
|
packet->heading.command = RIPCMD_RESPONSE;
|
||||||
|
|
Loading…
Reference in a new issue