/// <summary>
/// Parse a IPTables rule
/// </summary>
/// <param name="rule"></param>
/// <param name="system"></param>
/// <param name="chains"></param>
/// <param name="version"></param>
/// <param name="defaultTable"></param>
/// <param name="createChain"></param>
/// <returns></returns>
public static IpTablesRule Parse(String rule, NetfilterSystem system, IpTablesChainSet chains,
int version = 4, String defaultTable = "filter", ChainCreateMode createChain = ChainCreateMode.CreateNewChainIfNeeded)
{
CommandParser parser;
var ipCmd = IpTablesCommand.Parse(rule, system, chains, out parser, version, defaultTable);
if (ipCmd.Type != IpTablesCommandType.Add)
{
throw new IpTablesParserException(rule, "must be add rule to parse");
}
var chain = parser.GetChainFromSet();
if (chain == null)
{
if (createChain == ChainCreateMode.DontCreateErrorInstead)
{
throw new IpTablesParserException(rule, String.Format("Unable to find chain: {0}", parser.ChainName));
}
var ipVersion = chains == null ? 4 : chains.IpVersion;
if (createChain == ChainCreateMode.ReturnNewChain)
{
chain = parser.GetNewChain(system, ipVersion);
}
else
{
chain = parser.CreateChain(system, ipVersion);
}
}
Debug.Assert(chain.IpVersion == version);
ipCmd.Rule.Chain = chain;
return(ipCmd.Rule);
}
public void ApplyCommand(IpTablesCommand command)
{
var chain = Chains.GetChain(command.ChainName, command.Table);
switch (command.Type)
{
case IpTablesCommandType.Add:
chain.AddRule(command.Rule);
return;
case IpTablesCommandType.Delete:
chain.DeleteRule(command.Offset);
return;
case IpTablesCommandType.Replace:
chain.ReplaceRule(command.Offset, command.Rule);
return;
case IpTablesCommandType.Insert:
chain.InsertRule(command.Offset, command.Rule);
return;
}
throw new IpTablesNetException("Unknown command");
}
/// <summary>
/// Append extra options to an existing rule (via parsing)
/// </summary>
/// <param name="rule"></param>
/// <param name="version"></param>
/// <param name="chains"></param>
/// <param name="createChain"></param>
public void AppendToRule(String rule, int version = -1, IpTablesChainSet chains = null, bool createChain = false)
{
if (version == -1)
{
version = IpVersion;
}
Cow();
string[] arguments = ArgumentHelper.SplitArguments(rule);
int count = arguments.Length;
try
{
var command = new IpTablesCommand(Chain.Name, Chain.Table, IpTablesCommandType.Add);
command.Rule = this;
command.Table = Chain.Table;
var parser = new CommandParser(arguments, command, chains);
//Parse the extra options
bool not = false;
for (int i = 0; i < count; i++)
{
if (arguments[i] == "!")
{
not = true;
continue;
}
i += parser.FeedToSkip(i, not, version);
not = false;
}
//Only replace the chain if a new one has been supplied
if (chains != null && parser.ChainName != null)
{
var chain = parser.GetChainFromSet();
if (chain == null)
{
if (!createChain)
{
throw new IpTablesNetException(String.Format("Unable to find chain: {0}",
parser.ChainName));
}
chain = parser.GetNewChain(_system, chain.IpVersion);
}
Chain = chain;
}
}
catch (Exception ex)
{
throw new IpTablesParserException(rule, ex);
}
}