mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-24 04:07:55 +01:00
* iptables.g (multiport_tcp_udp_port_spec): fixes #1453 "iptables
importer should parse multiport module parameter --ports". Module multuport with parameter "--ports" matches either source or destination port numbers. Importer creates two tcp (or udp) service objects to implement this match.
This commit is contained in:
Vadim Kurland
parent
fe5a13d1b5
commit
fb88dc29e5
@ -8,6 +8,12 @@
|
||||
rule and additional rule in a branch rule set that implements
|
||||
module match.
|
||||
|
||||
* iptables.g (multiport_tcp_udp_port_spec): fixes #1453 "iptables
|
||||
importer should parse multiport module parameter --ports". Module
|
||||
multuport with parameter "--ports" matches either source or
|
||||
destination port numbers. Importer creates two tcp (or udp)
|
||||
service objects to implement this match.
|
||||
|
||||
* IPTImporter.cpp (IPTImporter::addSrv): See #1450, SourceForge
|
||||
ticket 3000809: iptables parser can now import "mark" module
|
||||
matches with hexadecimal parameters and "length" module
|
||||
|
||||
@ -145,8 +145,9 @@ IPTImporter::~IPTImporter()
|
||||
void IPTImporter::clear()
|
||||
{
|
||||
Importer::clear();
|
||||
if (!src_port_list.empty()) src_port_list.clear();
|
||||
if (!dst_port_list.empty()) dst_port_list.clear();
|
||||
if (!src_port_list.empty()) src_port_list.clear();
|
||||
if (!dst_port_list.empty()) dst_port_list.clear();
|
||||
if (!both_port_list.empty()) both_port_list.clear();
|
||||
current_state = "";
|
||||
i_intf = "";
|
||||
o_intf = "";
|
||||
@ -192,6 +193,17 @@ void IPTImporter::pushTmpPortSpecToDstPortList()
|
||||
str_tuple( tmp_port_range_start, tmp_port_range_end ) );
|
||||
}
|
||||
|
||||
void IPTImporter::startBothMultiPort()
|
||||
{
|
||||
both_port_list.clear();
|
||||
}
|
||||
|
||||
void IPTImporter::pushTmpPortSpecToBothPortList()
|
||||
{
|
||||
both_port_list.push_back(
|
||||
str_tuple( tmp_port_range_start, tmp_port_range_end ) );
|
||||
}
|
||||
|
||||
|
||||
FWObject* IPTImporter::createAddress(const std::string &addr,
|
||||
const std::string &netmask)
|
||||
@ -395,6 +407,32 @@ FWObject* IPTImporter::createUDPService()
|
||||
return createTCPUDPService("udp");
|
||||
}
|
||||
|
||||
|
||||
void IPTImporter::addSrv()
|
||||
{
|
||||
// special case for the multiport module parameter "--ports". This
|
||||
// parameter matches source OR destination ports. Will created two
|
||||
// separate service objects in the same rule
|
||||
if (!both_port_list.empty())
|
||||
{
|
||||
src_port_list.insert(src_port_list.begin(),
|
||||
both_port_list.begin(), both_port_list.end());
|
||||
Importer::addSrv();
|
||||
|
||||
src_port_list.clear();
|
||||
|
||||
dst_port_list.insert(dst_port_list.begin(),
|
||||
both_port_list.begin(), both_port_list.end());
|
||||
|
||||
Importer::addSrv();
|
||||
|
||||
dst_port_list.clear();
|
||||
} else
|
||||
Importer::addSrv();
|
||||
}
|
||||
|
||||
|
||||
|
||||
/*
|
||||
* Importer::addSrv() adds regular (IP/ICMP/UDP/TCP) service
|
||||
* object. If we have mark module match, implement it as
|
||||
|
||||
@ -87,6 +87,7 @@ class IPTImporter : public Importer
|
||||
|
||||
std::list<str_tuple> src_port_list;
|
||||
std::list<str_tuple> dst_port_list;
|
||||
std::list<str_tuple> both_port_list;
|
||||
|
||||
std::map<std::string, std::string> action_params;
|
||||
|
||||
@ -132,9 +133,14 @@ class IPTImporter : public Importer
|
||||
void startDstMultiPort();
|
||||
void pushTmpPortSpecToDstPortList();
|
||||
|
||||
void startBothMultiPort();
|
||||
void pushTmpPortSpecToBothPortList();
|
||||
|
||||
void pushPolicyRule();
|
||||
void pushNATRule();
|
||||
|
||||
virtual void addSrv();
|
||||
|
||||
virtual void pushRule();
|
||||
virtual void newUnidirRuleSet(const std::string &name);
|
||||
|
||||
|
||||
@ -56,6 +56,13 @@ TCP Service object: tcp 201-201
|
||||
TCP Service object: tcp 202-202
|
||||
TCP Service object: tcp 204-204
|
||||
TCP Service object: tcp 206-206
|
||||
TCP Service object: tcp 2222-2222
|
||||
TCP Service object: tcp 548-548:
|
||||
TCP Service object: tcp 201-201:
|
||||
TCP Service object: tcp 202-202:
|
||||
TCP Service object: tcp 204-204:
|
||||
TCP Service object: tcp 206-206:
|
||||
TCP Service object: tcp 2222-2222:
|
||||
Custom Service object: cust-1-: iptables: -m length --length 400:65535
|
||||
Custom Service object: cust-2-: iptables: -m recent --name badguy --rcheck --seconds 60
|
||||
Custom Service object: cust-3-: iptables: -m recent --name badguy --set
|
||||
@ -65,6 +72,11 @@ Custom Service object: cust-4-: iptables: -m length --length 400:1500
|
||||
Tag Service object: tag-0x1
|
||||
TCP Service object: tcp fsrpau/s
|
||||
Tag Service object: tag-0x4
|
||||
TCP Service object: tcp 53-53:
|
||||
Parser error: Original rule combines match of tcp/udp/icmp
|
||||
protocols with two or more module matches, such as
|
||||
module 'mark', 'recent' or 'length'. Use additional
|
||||
branches to implement this complex match.
|
||||
Parser error: Original rule combines match of tcp/udp/icmp
|
||||
protocols with two or more module matches, such as
|
||||
module 'mark', 'recent' or 'length'. Use additional
|
||||
|
||||
@ -120,6 +120,19 @@
|
||||
#
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --dports 548,201,202,204,206 -j ACCEPT
|
||||
|
||||
# there can be just one port with multiport
|
||||
#
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --dports 2222 -j ACCEPT
|
||||
|
||||
# source ports with multiport
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --sports 548,201,202,204,206 -j ACCEPT
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --sports 2222 -j ACCEPT
|
||||
|
||||
# --ports (source OR destination port)
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --ports 548,201,202,204,206 -j ACCEPT
|
||||
-A user_chain -m multiport -s 128.143.0.0/16 -p tcp --ports 2222 -j ACCEPT
|
||||
|
||||
|
||||
# module length
|
||||
-A user_chain -m length --length 400:65535 -j DROP
|
||||
|
||||
@ -127,7 +140,7 @@
|
||||
-A user_chain -m recent --name badguy --rcheck --seconds 60 -j DROP
|
||||
-A user_chain -p tcp -i eth0 --dport 139 -m recent --name badguy --set -j DROP
|
||||
|
||||
# combination of some regular service and module or two modules
|
||||
# combinations of a regular service and module or two modules
|
||||
#
|
||||
-A user_chain -s 128.143.0.0/16 -p tcp --dport 5190 -m mark --mark 0x11 -j DROP
|
||||
-A user_chain -s 128.143.0.0/16 -p tcp --dport 5190 -m length --length 400:1500 -j DROP
|
||||
@ -140,7 +153,8 @@
|
||||
-A user_chain -p tcp -m mark --mark 0x4 -m tcp ! --tcp-flags FIN,SYN,RST,PSH,ACK,URG SYN -j MARK --set-mark 0x1
|
||||
|
||||
# this rule has three matches which is not supported
|
||||
-A user_chain -p tcp -m length --length 0:128 -m mark ! --mark 0x4 -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG SYN -j MARK --set-mark 0x1
|
||||
-A user_chain -p tcp -m length --length 0:128 -m mark --mark 0x4 -m tcp --sport 53 -j ACCEPT
|
||||
-A user_chain -p tcp -m length --length 0:128 -m mark ! --mark 0x4 -m tcp --sport 53 -j ACCEPT
|
||||
|
||||
|
||||
-A user_chain -j DROP
|
||||
|
||||
@ -52,8 +52,8 @@ IPTCfgLexer::IPTCfgLexer(const ANTLR_USE_NAMESPACE(antlr)LexerSharedInputState&
|
||||
|
||||
void IPTCfgLexer::initLiterals()
|
||||
{
|
||||
literals["FIN"] = 99;
|
||||
literals["RST"] = 100;
|
||||
literals["FIN"] = 100;
|
||||
literals["RST"] = 101;
|
||||
literals["NEW"] = 60;
|
||||
literals["comment"] = 85;
|
||||
literals["ESTABLISHED"] = 61;
|
||||
@ -61,15 +61,15 @@ void IPTCfgLexer::initLiterals()
|
||||
literals["limit"] = 68;
|
||||
literals["POSTROUTING"] = 13;
|
||||
literals["INPUT"] = 9;
|
||||
literals["ACK"] = 98;
|
||||
literals["URG"] = 101;
|
||||
literals["ACK"] = 99;
|
||||
literals["URG"] = 102;
|
||||
literals["mark"] = 66;
|
||||
literals["multiport"] = 84;
|
||||
literals["NONE"] = 104;
|
||||
literals["ALL"] = 103;
|
||||
literals["NONE"] = 105;
|
||||
literals["ALL"] = 104;
|
||||
literals["length"] = 82;
|
||||
literals["PSH"] = 102;
|
||||
literals["SYN"] = 97;
|
||||
literals["PSH"] = 103;
|
||||
literals["SYN"] = 98;
|
||||
literals["udp"] = 31;
|
||||
literals["PREROUTING"] = 12;
|
||||
literals["FORWARD"] = 10;
|
||||
@ -516,6 +516,10 @@ ANTLR_USE_NAMESPACE(antlr)RefToken IPTCfgLexer::nextToken()
|
||||
mCLAMP_MSS(true);
|
||||
theRetToken=_returnToken;
|
||||
}
|
||||
else if ((LA(1) == 0x2d /* '-' */ ) && (LA(2) == 0x2d /* '-' */ ) && (LA(3) == 0x70 /* 'p' */ )) {
|
||||
mMATCH_BOTH_MULTIPORT(true);
|
||||
theRetToken=_returnToken;
|
||||
}
|
||||
else if ((LA(1) == 0x2d /* '-' */ ) && (LA(2) == 0x2d /* '-' */ ) && (LA(3) == 0x6d /* 'm' */ )) {
|
||||
mMATCH_MARK(true);
|
||||
theRetToken=_returnToken;
|
||||
@ -632,11 +636,11 @@ void IPTCfgLexer::mLINE_COMMENT(bool _createToken) {
|
||||
}
|
||||
}
|
||||
else {
|
||||
goto _loop154;
|
||||
goto _loop157;
|
||||
}
|
||||
|
||||
}
|
||||
_loop154:;
|
||||
_loop157:;
|
||||
} // ( ... )*
|
||||
mNEWLINE(false);
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
@ -668,9 +672,9 @@ void IPTCfgLexer::mNEWLINE(bool _createToken) {
|
||||
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1098 "iptables.g"
|
||||
#line 1119 "iptables.g"
|
||||
newline(); resetText();
|
||||
#line 674 "IPTCfgLexer.cpp"
|
||||
#line 678 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -749,9 +753,9 @@ void IPTCfgLexer::mWhitespace(bool _createToken) {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1096 "iptables.g"
|
||||
#line 1117 "iptables.g"
|
||||
_ttype = ANTLR_USE_NAMESPACE(antlr)Token::SKIP;
|
||||
#line 755 "IPTCfgLexer.cpp"
|
||||
#line 759 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -987,10 +991,10 @@ void IPTCfgLexer::mNUMBER(bool _createToken) {
|
||||
_ttype = NUMBER;
|
||||
ANTLR_USE_NAMESPACE(std)string::size_type _saveIndex;
|
||||
|
||||
bool synPredMatched180 = false;
|
||||
bool synPredMatched183 = false;
|
||||
if ((((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (_tokenSet_3.member(LA(2))) && (_tokenSet_3.member(LA(3))) && (_tokenSet_3.member(LA(4))) && (_tokenSet_3.member(LA(5))) && (_tokenSet_3.member(LA(6))) && (_tokenSet_3.member(LA(7))) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true))) {
|
||||
int _m180 = mark();
|
||||
synPredMatched180 = true;
|
||||
int _m183 = mark();
|
||||
synPredMatched183 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
@ -1001,12 +1005,12 @@ void IPTCfgLexer::mNUMBER(bool _createToken) {
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched180 = false;
|
||||
synPredMatched183 = false;
|
||||
}
|
||||
rewind(_m180);
|
||||
rewind(_m183);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched180 ) {
|
||||
if ( synPredMatched183 ) {
|
||||
{
|
||||
mNUM_3DIGIT(false);
|
||||
match('.' /* charlit */ );
|
||||
@ -1016,9 +1020,9 @@ void IPTCfgLexer::mNUMBER(bool _createToken) {
|
||||
match('.' /* charlit */ );
|
||||
mNUM_3DIGIT(false);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1161 "iptables.g"
|
||||
#line 1182 "iptables.g"
|
||||
_ttype = IPV4;
|
||||
#line 1022 "IPTCfgLexer.cpp"
|
||||
#line 1026 "IPTCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1027,45 +1031,45 @@ void IPTCfgLexer::mNUMBER(bool _createToken) {
|
||||
match('0' /* charlit */ );
|
||||
match('x' /* charlit */ );
|
||||
{ // ( ... )+
|
||||
int _cnt184=0;
|
||||
int _cnt187=0;
|
||||
for (;;) {
|
||||
if ((_tokenSet_2.member(LA(1)))) {
|
||||
mHEXDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt184>=1 ) { goto _loop184; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
if ( _cnt187>=1 ) { goto _loop187; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt184++;
|
||||
_cnt187++;
|
||||
}
|
||||
_loop184:;
|
||||
_loop187:;
|
||||
} // ( ... )+
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1164 "iptables.g"
|
||||
#line 1185 "iptables.g"
|
||||
_ttype = HEX_CONST;
|
||||
#line 1048 "IPTCfgLexer.cpp"
|
||||
#line 1052 "IPTCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
else if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true) && (true)) {
|
||||
{ // ( ... )+
|
||||
int _cnt186=0;
|
||||
int _cnt189=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt186>=1 ) { goto _loop186; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
if ( _cnt189>=1 ) { goto _loop189; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt186++;
|
||||
_cnt189++;
|
||||
}
|
||||
_loop186:;
|
||||
_loop189:;
|
||||
} // ( ... )+
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1166 "iptables.g"
|
||||
#line 1187 "iptables.g"
|
||||
_ttype = INT_CONST;
|
||||
#line 1069 "IPTCfgLexer.cpp"
|
||||
#line 1073 "IPTCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
@ -1318,11 +1322,11 @@ void IPTCfgLexer::mWORD(bool _createToken) {
|
||||
}
|
||||
default:
|
||||
{
|
||||
goto _loop190;
|
||||
goto _loop193;
|
||||
}
|
||||
}
|
||||
}
|
||||
_loop190:;
|
||||
_loop193:;
|
||||
} // ( ... )*
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -1344,11 +1348,11 @@ void IPTCfgLexer::mSTRING(bool _createToken) {
|
||||
matchNot('\"' /* charlit */ );
|
||||
}
|
||||
else {
|
||||
goto _loop193;
|
||||
goto _loop196;
|
||||
}
|
||||
|
||||
}
|
||||
_loop193:;
|
||||
_loop196:;
|
||||
} // ( ... )*
|
||||
match('\"' /* charlit */ );
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
@ -1379,9 +1383,9 @@ void IPTCfgLexer::mRSOURCE(bool _createToken) {
|
||||
|
||||
match("--rsource");
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1190 "iptables.g"
|
||||
#line 1211 "iptables.g"
|
||||
_ttype = UNSUPPORTED_OPTION;
|
||||
#line 1385 "IPTCfgLexer.cpp"
|
||||
#line 1389 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -1447,6 +1451,20 @@ void IPTCfgLexer::mMATCH_DST_MULTIPORT(bool _createToken) {
|
||||
_saveIndex=0;
|
||||
}
|
||||
|
||||
void IPTCfgLexer::mMATCH_BOTH_MULTIPORT(bool _createToken) {
|
||||
int _ttype; ANTLR_USE_NAMESPACE(antlr)RefToken _token; ANTLR_USE_NAMESPACE(std)string::size_type _begin = text.length();
|
||||
_ttype = MATCH_BOTH_MULTIPORT;
|
||||
ANTLR_USE_NAMESPACE(std)string::size_type _saveIndex;
|
||||
|
||||
match("--ports");
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
_token->setText(text.substr(_begin, text.length()-_begin));
|
||||
}
|
||||
_returnToken = _token;
|
||||
_saveIndex=0;
|
||||
}
|
||||
|
||||
void IPTCfgLexer::mMATCH_SRC_MULTIPORT_SHORT(bool _createToken) {
|
||||
int _ttype; ANTLR_USE_NAMESPACE(antlr)RefToken _token; ANTLR_USE_NAMESPACE(std)string::size_type _begin = text.length();
|
||||
_ttype = MATCH_SRC_MULTIPORT_SHORT;
|
||||
@ -2014,9 +2032,9 @@ void IPTCfgLexer::mULOG_QTHR(bool _createToken) {
|
||||
|
||||
match("--ulog-qthreshold");
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1254 "iptables.g"
|
||||
#line 1276 "iptables.g"
|
||||
_ttype = UNSUPPORTED_OPTION;
|
||||
#line 2020 "IPTCfgLexer.cpp"
|
||||
#line 2038 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -2033,9 +2051,9 @@ void IPTCfgLexer::mULOG_NLG(bool _createToken) {
|
||||
|
||||
match("--ulog-nlgroup");
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1255 "iptables.g"
|
||||
#line 1277 "iptables.g"
|
||||
_ttype = UNSUPPORTED_OPTION;
|
||||
#line 2039 "IPTCfgLexer.cpp"
|
||||
#line 2057 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -2052,9 +2070,9 @@ void IPTCfgLexer::mULOG_CPR(bool _createToken) {
|
||||
|
||||
match("--ulog-cprange");
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1256 "iptables.g"
|
||||
#line 1278 "iptables.g"
|
||||
_ttype = UNSUPPORTED_OPTION;
|
||||
#line 2058 "IPTCfgLexer.cpp"
|
||||
#line 2076 "IPTCfgLexer.cpp"
|
||||
}
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
_token = makeToken(_ttype);
|
||||
@ -2628,7 +2646,7 @@ void IPTCfgLexer::mTILDE(bool _createToken) {
|
||||
const unsigned long IPTCfgLexer::_tokenSet_0_data_[] = { 4294958072UL, 1UL, 0UL, 2147483648UL, 4294967295UL, 4294967295UL, 4294967295UL, 4294967295UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// 0x3 0x4 0x5 0x6 0x7 0x8 0x9 0xb 0xc 0xe 0xf 0x10 0x11 0x12 0x13 0x14
|
||||
// 0x15 0x16 0x17 0x18 0x19 0x1a 0x1b 0x1c 0x1d 0x1e 0x1f 0x7f 0x80 0x81
|
||||
// 0x82 0x83 0x84 0x85 0x86 0x87 0x88
|
||||
// 0x82 0x83 0x84 0x85 0x86 0x87 0x88 0x89
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgLexer::_tokenSet_0(_tokenSet_0_data_,16);
|
||||
const unsigned long IPTCfgLexer::_tokenSet_1_data_[] = { 4294958072UL, 4294967295UL, 4294967295UL, 4294967295UL, 4294967295UL, 4294967295UL, 4294967295UL, 4294967295UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// 0x3 0x4 0x5 0x6 0x7 0x8 0x9 0xb 0xc 0xe 0xf 0x10 0x11 0x12 0x13 0x14
|
||||
@ -2636,7 +2654,7 @@ const unsigned long IPTCfgLexer::_tokenSet_1_data_[] = { 4294958072UL, 429496729
|
||||
// & \' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G
|
||||
// H I J K L M N O P Q R S T U V W X Y Z [ 0x5c ] ^ _ ` a b c d e f g h
|
||||
// i j k l m n o p q r s t u v w x y z { | } ~ 0x7f 0x80 0x81 0x82 0x83
|
||||
// 0x84 0x85 0x86 0x87 0x88
|
||||
// 0x84 0x85 0x86 0x87 0x88 0x89
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgLexer::_tokenSet_1(_tokenSet_1_data_,16);
|
||||
const unsigned long IPTCfgLexer::_tokenSet_2_data_[] = { 0UL, 67043328UL, 126UL, 126UL, 0UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// 0 1 2 3 4 5 6 7 8 9 A B C D E F a b c d e f
|
||||
@ -2650,6 +2668,6 @@ const unsigned long IPTCfgLexer::_tokenSet_4_data_[] = { 4294967288UL, 429496729
|
||||
// % & \' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F
|
||||
// G H I J K L M N O P Q R S T U V W X Y Z [ 0x5c ] ^ _ ` a b c d e f g
|
||||
// h i j k l m n o p q r s t u v w x y z { | } ~ 0x7f 0x80 0x81 0x82 0x83
|
||||
// 0x84 0x85 0x86 0x87 0x88
|
||||
// 0x84 0x85 0x86 0x87 0x88 0x89
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgLexer::_tokenSet_4(_tokenSet_4_data_,16);
|
||||
|
||||
|
||||
@ -68,6 +68,7 @@ public:
|
||||
public: void mMATCH_STATE(bool _createToken);
|
||||
public: void mMATCH_SRC_MULTIPORT(bool _createToken);
|
||||
public: void mMATCH_DST_MULTIPORT(bool _createToken);
|
||||
public: void mMATCH_BOTH_MULTIPORT(bool _createToken);
|
||||
public: void mMATCH_SRC_MULTIPORT_SHORT(bool _createToken);
|
||||
public: void mMATCH_DST_MULTIPORT_SHORT(bool _createToken);
|
||||
public: void mMATCH_SRC_PORT(bool _createToken);
|
||||
|
||||
@ -416,6 +416,7 @@ void IPTCfgParser::ipt_option() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
{
|
||||
multiport_tcp_udp_port_spec();
|
||||
break;
|
||||
@ -556,7 +557,7 @@ void IPTCfgParser::match_mark() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 659 "iptables.g"
|
||||
importer->neg_match_mark = true;
|
||||
#line 560 "IPTCfgParser.cpp"
|
||||
#line 561 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -595,7 +596,7 @@ void IPTCfgParser::match_mark() {
|
||||
importer->match_mark = LT(0)->getText();
|
||||
*dbg << " MATCH MARK " << LT(0)->getText();
|
||||
|
||||
#line 599 "IPTCfgParser.cpp"
|
||||
#line 600 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -647,7 +648,7 @@ void IPTCfgParser::src() {
|
||||
|
||||
*dbg << " SRC=";
|
||||
|
||||
#line 651 "IPTCfgParser.cpp"
|
||||
#line 652 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -659,7 +660,7 @@ void IPTCfgParser::src() {
|
||||
|
||||
importer->src_neg = true;
|
||||
|
||||
#line 663 "IPTCfgParser.cpp"
|
||||
#line 664 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -699,7 +700,7 @@ void IPTCfgParser::src() {
|
||||
importer->src_a = LT(0)->getText();
|
||||
*dbg << LT(0)->getText();
|
||||
|
||||
#line 703 "IPTCfgParser.cpp"
|
||||
#line 704 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -730,7 +731,7 @@ void IPTCfgParser::src() {
|
||||
importer->src_nm = LT(0)->getText();
|
||||
*dbg << "/" << LT(0)->getText();
|
||||
|
||||
#line 734 "IPTCfgParser.cpp"
|
||||
#line 735 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -753,6 +754,7 @@ void IPTCfgParser::src() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -791,7 +793,7 @@ void IPTCfgParser::dst() {
|
||||
|
||||
*dbg << " DST=";
|
||||
|
||||
#line 795 "IPTCfgParser.cpp"
|
||||
#line 797 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -803,7 +805,7 @@ void IPTCfgParser::dst() {
|
||||
|
||||
importer->dst_neg = true;
|
||||
|
||||
#line 807 "IPTCfgParser.cpp"
|
||||
#line 809 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -843,7 +845,7 @@ void IPTCfgParser::dst() {
|
||||
importer->dst_a = LT(0)->getText();
|
||||
*dbg << LT(0)->getText();
|
||||
|
||||
#line 847 "IPTCfgParser.cpp"
|
||||
#line 849 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -874,7 +876,7 @@ void IPTCfgParser::dst() {
|
||||
importer->dst_nm = LT(0)->getText();
|
||||
*dbg << "/" << LT(0)->getText();
|
||||
|
||||
#line 878 "IPTCfgParser.cpp"
|
||||
#line 880 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -897,6 +899,7 @@ void IPTCfgParser::dst() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -941,7 +944,7 @@ void IPTCfgParser::i_intf() {
|
||||
|
||||
importer->intf_neg = true;
|
||||
|
||||
#line 945 "IPTCfgParser.cpp"
|
||||
#line 948 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -963,7 +966,7 @@ void IPTCfgParser::i_intf() {
|
||||
importer->i_intf = LT(0)->getText();
|
||||
*dbg << " I_INTF=" << i->getText();
|
||||
|
||||
#line 967 "IPTCfgParser.cpp"
|
||||
#line 970 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -991,7 +994,7 @@ void IPTCfgParser::o_intf() {
|
||||
|
||||
importer->intf_neg = true;
|
||||
|
||||
#line 995 "IPTCfgParser.cpp"
|
||||
#line 998 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1013,7 +1016,7 @@ void IPTCfgParser::o_intf() {
|
||||
importer->o_intf = LT(0)->getText();
|
||||
*dbg << " O_INTF=" << i->getText();
|
||||
|
||||
#line 1017 "IPTCfgParser.cpp"
|
||||
#line 1020 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -1040,7 +1043,7 @@ void IPTCfgParser::proto() {
|
||||
|
||||
importer->srv_neg = true;
|
||||
|
||||
#line 1044 "IPTCfgParser.cpp"
|
||||
#line 1047 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1070,7 +1073,7 @@ void IPTCfgParser::proto() {
|
||||
::tolower);
|
||||
*dbg << " PROTO=" << importer->protocol;
|
||||
|
||||
#line 1074 "IPTCfgParser.cpp"
|
||||
#line 1077 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -1096,7 +1099,7 @@ void IPTCfgParser::target() {
|
||||
importer->target = LT(0)->getText();
|
||||
*dbg << " TARGET=" << t->getText();
|
||||
|
||||
#line 1100 "IPTCfgParser.cpp"
|
||||
#line 1103 "IPTCfgParser.cpp"
|
||||
}
|
||||
{ // ( ... )*
|
||||
for (;;) {
|
||||
@ -1131,7 +1134,7 @@ void IPTCfgParser::fragm() {
|
||||
importer->fragments = true;
|
||||
*dbg << " FRAGM";
|
||||
|
||||
#line 1135 "IPTCfgParser.cpp"
|
||||
#line 1138 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -1154,12 +1157,12 @@ void IPTCfgParser::icmp_type_spec() {
|
||||
{
|
||||
match(WORD);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 820 "iptables.g"
|
||||
#line 841 "iptables.g"
|
||||
|
||||
importer->icmp_spec = LT(0)->getText();
|
||||
*dbg << " ICMP_SPEC=" << LT(0)->getText();
|
||||
|
||||
#line 1163 "IPTCfgParser.cpp"
|
||||
#line 1166 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1168,13 +1171,13 @@ void IPTCfgParser::icmp_type_spec() {
|
||||
{
|
||||
match(INT_CONST);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 827 "iptables.g"
|
||||
#line 848 "iptables.g"
|
||||
|
||||
importer->icmp_type = LT(0)->getText();
|
||||
importer->icmp_code = "-1";
|
||||
*dbg << " ICMP_TYPE=" << LT(0)->getText();
|
||||
|
||||
#line 1178 "IPTCfgParser.cpp"
|
||||
#line 1181 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -1183,12 +1186,12 @@ void IPTCfgParser::icmp_type_spec() {
|
||||
match(SLASH);
|
||||
match(INT_CONST);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 834 "iptables.g"
|
||||
#line 855 "iptables.g"
|
||||
|
||||
importer->icmp_code = LT(0)->getText();
|
||||
*dbg << " ICMP_CODE=" << LT(0)->getText();
|
||||
|
||||
#line 1192 "IPTCfgParser.cpp"
|
||||
#line 1195 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1211,6 +1214,7 @@ void IPTCfgParser::icmp_type_spec() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -1279,11 +1283,11 @@ void IPTCfgParser::basic_tcp_udp_port_spec() {
|
||||
{
|
||||
match(EXCLAMATION);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 918 "iptables.g"
|
||||
#line 939 "iptables.g"
|
||||
|
||||
importer->srv_neg = true;
|
||||
|
||||
#line 1287 "IPTCfgParser.cpp"
|
||||
#line 1291 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1319,11 +1323,11 @@ void IPTCfgParser::basic_tcp_udp_port_spec() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 923 "iptables.g"
|
||||
#line 944 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToSrcPortList();
|
||||
|
||||
#line 1327 "IPTCfgParser.cpp"
|
||||
#line 1331 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1354,11 +1358,11 @@ void IPTCfgParser::basic_tcp_udp_port_spec() {
|
||||
{
|
||||
match(EXCLAMATION);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 930 "iptables.g"
|
||||
#line 951 "iptables.g"
|
||||
|
||||
importer->srv_neg = true;
|
||||
|
||||
#line 1362 "IPTCfgParser.cpp"
|
||||
#line 1366 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1394,11 +1398,11 @@ void IPTCfgParser::basic_tcp_udp_port_spec() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 935 "iptables.g"
|
||||
#line 956 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToDstPortList();
|
||||
|
||||
#line 1402 "IPTCfgParser.cpp"
|
||||
#line 1406 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1446,43 +1450,41 @@ void IPTCfgParser::multiport_tcp_udp_port_spec() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 776 "iptables.g"
|
||||
#line 778 "iptables.g"
|
||||
|
||||
importer->startSrcMultiPort();
|
||||
*dbg << " SRC MULTIPORT=";
|
||||
|
||||
#line 1455 "IPTCfgParser.cpp"
|
||||
#line 1459 "IPTCfgParser.cpp"
|
||||
}
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 781 "iptables.g"
|
||||
#line 783 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToSrcPortList();
|
||||
|
||||
#line 1463 "IPTCfgParser.cpp"
|
||||
#line 1467 "IPTCfgParser.cpp"
|
||||
}
|
||||
{ // ( ... )+
|
||||
int _cnt104=0;
|
||||
{ // ( ... )*
|
||||
for (;;) {
|
||||
if ((LA(1) == COMMA)) {
|
||||
match(COMMA);
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 785 "iptables.g"
|
||||
#line 787 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToSrcPortList();
|
||||
|
||||
#line 1476 "IPTCfgParser.cpp"
|
||||
#line 1479 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
if ( _cnt104>=1 ) { goto _loop104; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltException(LT(1), getFilename());}
|
||||
goto _loop104;
|
||||
}
|
||||
|
||||
_cnt104++;
|
||||
}
|
||||
_loop104:;
|
||||
} // ( ... )+
|
||||
} // ( ... )*
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1509,43 +1511,84 @@ void IPTCfgParser::multiport_tcp_udp_port_spec() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 791 "iptables.g"
|
||||
#line 794 "iptables.g"
|
||||
|
||||
importer->startDstMultiPort();
|
||||
*dbg << " DST MULTIPORT=";
|
||||
|
||||
#line 1518 "IPTCfgParser.cpp"
|
||||
#line 1520 "IPTCfgParser.cpp"
|
||||
}
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 796 "iptables.g"
|
||||
#line 799 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToDstPortList();
|
||||
|
||||
#line 1526 "IPTCfgParser.cpp"
|
||||
#line 1528 "IPTCfgParser.cpp"
|
||||
}
|
||||
{ // ( ... )+
|
||||
int _cnt108=0;
|
||||
{ // ( ... )*
|
||||
for (;;) {
|
||||
if ((LA(1) == COMMA)) {
|
||||
match(COMMA);
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 800 "iptables.g"
|
||||
#line 803 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToDstPortList();
|
||||
|
||||
#line 1539 "IPTCfgParser.cpp"
|
||||
#line 1540 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
if ( _cnt108>=1 ) { goto _loop108; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltException(LT(1), getFilename());}
|
||||
goto _loop108;
|
||||
}
|
||||
|
||||
_cnt108++;
|
||||
}
|
||||
_loop108:;
|
||||
} // ( ... )+
|
||||
} // ( ... )*
|
||||
}
|
||||
break;
|
||||
}
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
{
|
||||
{
|
||||
match(MATCH_BOTH_MULTIPORT);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 810 "iptables.g"
|
||||
|
||||
importer->startBothMultiPort();
|
||||
*dbg << " MULTIPORT PORTS=";
|
||||
|
||||
#line 1563 "IPTCfgParser.cpp"
|
||||
}
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 815 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToBothPortList();
|
||||
|
||||
#line 1571 "IPTCfgParser.cpp"
|
||||
}
|
||||
{ // ( ... )*
|
||||
for (;;) {
|
||||
if ((LA(1) == COMMA)) {
|
||||
match(COMMA);
|
||||
port_def_no_range();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 819 "iptables.g"
|
||||
|
||||
importer->pushTmpPortSpecToBothPortList();
|
||||
|
||||
#line 1583 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
goto _loop111;
|
||||
}
|
||||
|
||||
}
|
||||
_loop111:;
|
||||
} // ( ... )*
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1575,9 +1618,9 @@ void IPTCfgParser::tcp_options() {
|
||||
{
|
||||
match(EXCLAMATION);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 964 "iptables.g"
|
||||
#line 985 "iptables.g"
|
||||
importer->srv_neg = true;
|
||||
#line 1581 "IPTCfgParser.cpp"
|
||||
#line 1624 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1654,7 +1697,7 @@ void IPTCfgParser::match_limit_burst() {
|
||||
importer->limit_burst = LT(0)->getText();
|
||||
*dbg << " LIMIT BURST " << LT(0)->getText();
|
||||
|
||||
#line 1658 "IPTCfgParser.cpp"
|
||||
#line 1701 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -1697,7 +1740,7 @@ void IPTCfgParser::unknown_option() {
|
||||
std::string("Unknown option: -")+LT(0)->getText());
|
||||
*dbg << " UNKNOWN OPTION=-" << LT(0)->getText();
|
||||
|
||||
#line 1701 "IPTCfgParser.cpp"
|
||||
#line 1744 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -1727,6 +1770,7 @@ void IPTCfgParser::unknown_option() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -1760,7 +1804,7 @@ void IPTCfgParser::unknown_option() {
|
||||
std::string("Unknown option: --")+LT(0)->getText());
|
||||
*dbg << " UNKNOWN OPTION=--" << LT(0)->getText();
|
||||
|
||||
#line 1764 "IPTCfgParser.cpp"
|
||||
#line 1808 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -1790,6 +1834,7 @@ void IPTCfgParser::unknown_option() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -1819,7 +1864,7 @@ void IPTCfgParser::unknown_option() {
|
||||
std::string("Unknown option: ")+LT(0)->getText());
|
||||
*dbg << " UNKNOWN OPTION=" << LT(0)->getText();
|
||||
|
||||
#line 1823 "IPTCfgParser.cpp"
|
||||
#line 1868 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -1849,6 +1894,7 @@ void IPTCfgParser::unknown_option() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -1886,7 +1932,7 @@ void IPTCfgParser::unknown_option() {
|
||||
void IPTCfgParser::unknown_parameter() {
|
||||
#line 261 "iptables.g"
|
||||
std::string s;
|
||||
#line 1890 "IPTCfgParser.cpp"
|
||||
#line 1936 "IPTCfgParser.cpp"
|
||||
|
||||
try { // for error handling
|
||||
if ((LA(1) == INT_CONST || LA(1) == DIGIT) && (LA(2) == SLASH)) {
|
||||
@ -1900,7 +1946,7 @@ void IPTCfgParser::unknown_parameter() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 267 "iptables.g"
|
||||
s+=LT(0)->getText();
|
||||
#line 1904 "IPTCfgParser.cpp"
|
||||
#line 1950 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1910,7 +1956,7 @@ void IPTCfgParser::unknown_parameter() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 269 "iptables.g"
|
||||
s+=LT(0)->getText();
|
||||
#line 1914 "IPTCfgParser.cpp"
|
||||
#line 1960 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -1924,13 +1970,13 @@ void IPTCfgParser::unknown_parameter() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 271 "iptables.g"
|
||||
s+=LT(0)->getText();
|
||||
#line 1928 "IPTCfgParser.cpp"
|
||||
#line 1974 "IPTCfgParser.cpp"
|
||||
}
|
||||
match(WORD);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 272 "iptables.g"
|
||||
s+=LT(0)->getText();
|
||||
#line 1934 "IPTCfgParser.cpp"
|
||||
#line 1980 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
@ -1940,7 +1986,7 @@ void IPTCfgParser::unknown_parameter() {
|
||||
std::string("Unknown parameter: ")+s);
|
||||
*dbg << " UNKNOWN PARMETER=" << s;
|
||||
|
||||
#line 1944 "IPTCfgParser.cpp"
|
||||
#line 1990 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -1976,7 +2022,7 @@ void IPTCfgParser::unknown_parameter() {
|
||||
std::string("Unknown parameter: ")+LT(0)->getText());
|
||||
*dbg << " UNKNOWN PARMETER=" << LT(0)->getText();
|
||||
|
||||
#line 1980 "IPTCfgParser.cpp"
|
||||
#line 2026 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -2005,7 +2051,7 @@ void IPTCfgParser::m_state() {
|
||||
|
||||
importer->current_state = "";
|
||||
|
||||
#line 2009 "IPTCfgParser.cpp"
|
||||
#line 2055 "IPTCfgParser.cpp"
|
||||
}
|
||||
state_word();
|
||||
if ( inputState->guessing==0 ) {
|
||||
@ -2013,7 +2059,7 @@ void IPTCfgParser::m_state() {
|
||||
|
||||
importer->current_state += LT(0)->getText();
|
||||
|
||||
#line 2017 "IPTCfgParser.cpp"
|
||||
#line 2063 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -2026,7 +2072,7 @@ void IPTCfgParser::m_state() {
|
||||
|
||||
importer->current_state += std::string(",") + LT(0)->getText();
|
||||
|
||||
#line 2030 "IPTCfgParser.cpp"
|
||||
#line 2076 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2049,6 +2095,7 @@ void IPTCfgParser::m_state() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -2071,7 +2118,7 @@ void IPTCfgParser::m_state() {
|
||||
|
||||
*dbg << " STATE MATCH=" << importer->current_state;
|
||||
|
||||
#line 2075 "IPTCfgParser.cpp"
|
||||
#line 2122 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2093,7 +2140,7 @@ void IPTCfgParser::m_mport() {
|
||||
|
||||
*dbg << " MULTIPORT";
|
||||
|
||||
#line 2097 "IPTCfgParser.cpp"
|
||||
#line 2144 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2111,12 +2158,12 @@ void IPTCfgParser::m_icmp() {
|
||||
try { // for error handling
|
||||
match(ICMP);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 810 "iptables.g"
|
||||
#line 831 "iptables.g"
|
||||
|
||||
importer->protocol = "icmp";
|
||||
*dbg << " ICMP";
|
||||
|
||||
#line 2120 "IPTCfgParser.cpp"
|
||||
#line 2167 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2134,12 +2181,12 @@ void IPTCfgParser::m_tcp() {
|
||||
try { // for error handling
|
||||
match(TCP);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 953 "iptables.g"
|
||||
#line 974 "iptables.g"
|
||||
|
||||
importer->protocol = "tcp";
|
||||
*dbg << " TCP";
|
||||
|
||||
#line 2143 "IPTCfgParser.cpp"
|
||||
#line 2190 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2157,12 +2204,12 @@ void IPTCfgParser::m_udp() {
|
||||
try { // for error handling
|
||||
match(UDP);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 944 "iptables.g"
|
||||
#line 965 "iptables.g"
|
||||
|
||||
importer->protocol = "udp";
|
||||
*dbg << " UDP";
|
||||
|
||||
#line 2166 "IPTCfgParser.cpp"
|
||||
#line 2213 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2184,7 +2231,7 @@ void IPTCfgParser::m_limit() {
|
||||
|
||||
*dbg << " LIMIT";
|
||||
|
||||
#line 2188 "IPTCfgParser.cpp"
|
||||
#line 2235 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2206,7 +2253,7 @@ void IPTCfgParser::m_length() {
|
||||
|
||||
*dbg << " LENGTH";
|
||||
|
||||
#line 2210 "IPTCfgParser.cpp"
|
||||
#line 2257 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2230,7 +2277,7 @@ void IPTCfgParser::m_comment() {
|
||||
|
||||
*dbg << " COMMENT=" << LT(0)->getText();
|
||||
|
||||
#line 2234 "IPTCfgParser.cpp"
|
||||
#line 2281 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2254,7 +2301,7 @@ void IPTCfgParser::m_unknown_module() {
|
||||
importer->markCurrentRuleBad(
|
||||
std::string("Unknown module: ")+LT(0)->getText());
|
||||
|
||||
#line 2258 "IPTCfgParser.cpp"
|
||||
#line 2305 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2329,7 +2376,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["reject_with"] = LT(0)->getText();
|
||||
*dbg << " REJECT WITH=" << LT(0)->getText();
|
||||
|
||||
#line 2333 "IPTCfgParser.cpp"
|
||||
#line 2380 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2360,7 +2407,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_prefix"] = LT(0)->getText();
|
||||
*dbg << " LOG PREFIX=" << LT(0)->getText();
|
||||
|
||||
#line 2364 "IPTCfgParser.cpp"
|
||||
#line 2411 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2373,7 +2420,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_tcp_seq"] = LT(0)->getText();
|
||||
*dbg << " LOG TCP SEQUENCE=";
|
||||
|
||||
#line 2377 "IPTCfgParser.cpp"
|
||||
#line 2424 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2386,7 +2433,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_tcp_options"] = LT(0)->getText();
|
||||
*dbg << " LOG TCP OPTIONS=";
|
||||
|
||||
#line 2390 "IPTCfgParser.cpp"
|
||||
#line 2437 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2399,7 +2446,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_ip_options"] = LT(0)->getText();
|
||||
*dbg << " LOG IP OPTIONS=";
|
||||
|
||||
#line 2403 "IPTCfgParser.cpp"
|
||||
#line 2450 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2430,7 +2477,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_prefix"] = LT(0)->getText();
|
||||
*dbg << " ULOG PREFIX=" << LT(0)->getText();
|
||||
|
||||
#line 2434 "IPTCfgParser.cpp"
|
||||
#line 2481 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2444,7 +2491,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["log_level"] = LT(0)->getText();
|
||||
*dbg << " LOG LEVEL=" << LT(0)->getText();
|
||||
|
||||
#line 2448 "IPTCfgParser.cpp"
|
||||
#line 2495 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2475,7 +2522,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["set_mark"] = LT(0)->getText();
|
||||
*dbg << " SET MARK=" << LT(0)->getText();
|
||||
|
||||
#line 2479 "IPTCfgParser.cpp"
|
||||
#line 2526 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2488,7 +2535,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["connmark_save_mark"] = "--save-mark";
|
||||
*dbg << " SAVE MARK";
|
||||
|
||||
#line 2492 "IPTCfgParser.cpp"
|
||||
#line 2539 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2501,7 +2548,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["connmark_restore_mark"] = "--restore-mark";
|
||||
*dbg << " RESTORE MARK";
|
||||
|
||||
#line 2505 "IPTCfgParser.cpp"
|
||||
#line 2552 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2514,7 +2561,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["route_continue"] = "--continue";
|
||||
*dbg << " CONTINUE";
|
||||
|
||||
#line 2518 "IPTCfgParser.cpp"
|
||||
#line 2565 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2528,7 +2575,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["route_iif"] = LT(0)->getText();
|
||||
*dbg << " ROUTE_IIF=" << LT(0)->getText();
|
||||
|
||||
#line 2532 "IPTCfgParser.cpp"
|
||||
#line 2579 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2542,7 +2589,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["route_oif"] = LT(0)->getText();
|
||||
*dbg << " ROUTE_OIF=" << LT(0)->getText();
|
||||
|
||||
#line 2546 "IPTCfgParser.cpp"
|
||||
#line 2593 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2556,7 +2603,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["route_gw"] = LT(0)->getText();
|
||||
*dbg << " ROUTE_GW=" << LT(0)->getText();
|
||||
|
||||
#line 2560 "IPTCfgParser.cpp"
|
||||
#line 2607 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2569,7 +2616,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["route_tee"] = "--tee";
|
||||
*dbg << " ROUTE_TEE";
|
||||
|
||||
#line 2573 "IPTCfgParser.cpp"
|
||||
#line 2620 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2581,7 +2628,7 @@ void IPTCfgParser::target_options() {
|
||||
|
||||
*dbg << " TO-SOURCE";
|
||||
|
||||
#line 2585 "IPTCfgParser.cpp"
|
||||
#line 2632 "IPTCfgParser.cpp"
|
||||
}
|
||||
nat_spec();
|
||||
break;
|
||||
@ -2594,7 +2641,7 @@ void IPTCfgParser::target_options() {
|
||||
|
||||
*dbg << " TO-DESTINATION";
|
||||
|
||||
#line 2598 "IPTCfgParser.cpp"
|
||||
#line 2645 "IPTCfgParser.cpp"
|
||||
}
|
||||
nat_spec();
|
||||
break;
|
||||
@ -2613,7 +2660,7 @@ void IPTCfgParser::target_options() {
|
||||
|
||||
*dbg << " TO-NETMAP";
|
||||
|
||||
#line 2617 "IPTCfgParser.cpp"
|
||||
#line 2664 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
match(IPV4);
|
||||
@ -2624,7 +2671,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->nat_addr2 = LT(0)->getText();
|
||||
*dbg << LT(0)->getText();
|
||||
|
||||
#line 2628 "IPTCfgParser.cpp"
|
||||
#line 2675 "IPTCfgParser.cpp"
|
||||
}
|
||||
match(SLASH);
|
||||
{
|
||||
@ -2651,7 +2698,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->nat_nm = LT(0)->getText();
|
||||
*dbg << "/" << LT(0)->getText();
|
||||
|
||||
#line 2655 "IPTCfgParser.cpp"
|
||||
#line 2702 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
break;
|
||||
@ -2665,7 +2712,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["clamp-mss-to-pmtu"] = "--clamp-mss-to-pmtu";
|
||||
*dbg << " TO-NETMAP";
|
||||
|
||||
#line 2669 "IPTCfgParser.cpp"
|
||||
#line 2716 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -2679,7 +2726,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["set_tos"] = LT(0)->getText();
|
||||
*dbg << " SET TOS=" << LT(0)->getText();
|
||||
|
||||
#line 2683 "IPTCfgParser.cpp"
|
||||
#line 2730 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else if ((LA(1) == SET_TOS) && (LA(2) == WORD)) {
|
||||
@ -2691,7 +2738,7 @@ void IPTCfgParser::target_options() {
|
||||
importer->action_params["set_tos"] = LT(0)->getText();
|
||||
*dbg << " SET TOS=" << LT(0)->getText();
|
||||
|
||||
#line 2695 "IPTCfgParser.cpp"
|
||||
#line 2742 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
@ -2762,6 +2809,7 @@ void IPTCfgParser::nat_spec() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -2791,7 +2839,7 @@ void IPTCfgParser::nat_spec() {
|
||||
<< "-"
|
||||
<< importer->nat_port_range_end;
|
||||
|
||||
#line 2795 "IPTCfgParser.cpp"
|
||||
#line 2843 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2820,7 +2868,7 @@ void IPTCfgParser::redirect_spec() {
|
||||
<< "-"
|
||||
<< importer->nat_port_range_end;
|
||||
|
||||
#line 2824 "IPTCfgParser.cpp"
|
||||
#line 2872 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -2868,7 +2916,7 @@ void IPTCfgParser::nat_addr_range() {
|
||||
importer->nat_addr1 = LT(0)->getText();
|
||||
importer->nat_addr2 = s->getText();
|
||||
|
||||
#line 2872 "IPTCfgParser.cpp"
|
||||
#line 2920 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -2882,7 +2930,7 @@ void IPTCfgParser::nat_addr_range() {
|
||||
importer->nat_addr1 = LT(0)->getText();
|
||||
importer->nat_addr2 = LT(0)->getText();
|
||||
|
||||
#line 2886 "IPTCfgParser.cpp"
|
||||
#line 2934 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
@ -2903,10 +2951,10 @@ void IPTCfgParser::nat_addr_range() {
|
||||
void IPTCfgParser::nat_port_def_with_range() {
|
||||
|
||||
try { // for error handling
|
||||
bool synPredMatched125 = false;
|
||||
bool synPredMatched128 = false;
|
||||
if (((LA(1) == WORD || LA(1) == INT_CONST) && (LA(2) == MINUS))) {
|
||||
int _m125 = mark();
|
||||
synPredMatched125 = true;
|
||||
int _m128 = mark();
|
||||
synPredMatched128 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
@ -2932,12 +2980,12 @@ void IPTCfgParser::nat_port_def_with_range() {
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched125 = false;
|
||||
synPredMatched128 = false;
|
||||
}
|
||||
rewind(_m125);
|
||||
rewind(_m128);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched125 ) {
|
||||
if ( synPredMatched128 ) {
|
||||
{
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -2958,13 +3006,13 @@ void IPTCfgParser::nat_port_def_with_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 893 "iptables.g"
|
||||
#line 914 "iptables.g"
|
||||
|
||||
importer->nat_port_range_start = LT(0)->getText();
|
||||
importer->nat_port_range_end = LT(0)->getText();
|
||||
*dbg << " PORT=" << LT(0)->getText();
|
||||
|
||||
#line 2968 "IPTCfgParser.cpp"
|
||||
#line 3016 "IPTCfgParser.cpp"
|
||||
}
|
||||
match(MINUS);
|
||||
{
|
||||
@ -2986,12 +3034,12 @@ void IPTCfgParser::nat_port_def_with_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 899 "iptables.g"
|
||||
#line 920 "iptables.g"
|
||||
|
||||
importer->nat_port_range_end = LT(0)->getText();
|
||||
*dbg << ":" << LT(0)->getText();
|
||||
|
||||
#line 2995 "IPTCfgParser.cpp"
|
||||
#line 3043 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -3015,13 +3063,13 @@ void IPTCfgParser::nat_port_def_with_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 906 "iptables.g"
|
||||
#line 927 "iptables.g"
|
||||
|
||||
importer->nat_port_range_start = LT(0)->getText();
|
||||
importer->nat_port_range_end = LT(0)->getText();
|
||||
*dbg << " PORT=" << LT(0)->getText();
|
||||
|
||||
#line 3025 "IPTCfgParser.cpp"
|
||||
#line 3073 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
@ -3090,7 +3138,7 @@ void IPTCfgParser::m_mark() {
|
||||
|
||||
*dbg << " MARK";
|
||||
|
||||
#line 3094 "IPTCfgParser.cpp"
|
||||
#line 3142 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3110,14 +3158,14 @@ void IPTCfgParser::limit_rate() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 681 "iptables.g"
|
||||
importer->limit_val = LT(0)->getText();
|
||||
#line 3114 "IPTCfgParser.cpp"
|
||||
#line 3162 "IPTCfgParser.cpp"
|
||||
}
|
||||
match(SLASH);
|
||||
match(WORD);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 683 "iptables.g"
|
||||
importer->limit_suffix = LT(0)->getText();
|
||||
#line 3121 "IPTCfgParser.cpp"
|
||||
#line 3169 "IPTCfgParser.cpp"
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 684 "iptables.g"
|
||||
@ -3126,7 +3174,7 @@ void IPTCfgParser::limit_rate() {
|
||||
<< importer->limit_val << "/"
|
||||
<< importer->limit_suffix;
|
||||
|
||||
#line 3130 "IPTCfgParser.cpp"
|
||||
#line 3178 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3148,7 +3196,7 @@ void IPTCfgParser::m_recent() {
|
||||
|
||||
*dbg << " RECENT";
|
||||
|
||||
#line 3152 "IPTCfgParser.cpp"
|
||||
#line 3200 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3248,7 +3296,7 @@ void IPTCfgParser::recent_args_no_param() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 722 "iptables.g"
|
||||
importer->recent_match += LT(0)->getText() + " ";
|
||||
#line 3252 "IPTCfgParser.cpp"
|
||||
#line 3300 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3290,7 +3338,7 @@ void IPTCfgParser::recent_args_param() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 726 "iptables.g"
|
||||
importer->recent_match += LT(0)->getText() + " ";
|
||||
#line 3294 "IPTCfgParser.cpp"
|
||||
#line 3342 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -3313,7 +3361,7 @@ void IPTCfgParser::recent_args_param() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 728 "iptables.g"
|
||||
importer->recent_match += LT(0)->getText() + " ";
|
||||
#line 3317 "IPTCfgParser.cpp"
|
||||
#line 3365 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3333,7 +3381,7 @@ void IPTCfgParser::length_spec() {
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 745 "iptables.g"
|
||||
importer->length_spec = LT(0)->getText();
|
||||
#line 3337 "IPTCfgParser.cpp"
|
||||
#line 3385 "IPTCfgParser.cpp"
|
||||
}
|
||||
match(COLON);
|
||||
match(INT_CONST);
|
||||
@ -3341,14 +3389,14 @@ void IPTCfgParser::length_spec() {
|
||||
#line 747 "iptables.g"
|
||||
importer->length_spec += ":";
|
||||
importer->length_spec += LT(0)->getText();
|
||||
#line 3345 "IPTCfgParser.cpp"
|
||||
#line 3393 "IPTCfgParser.cpp"
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 749 "iptables.g"
|
||||
|
||||
*dbg << " MATCH LENGTH " << importer->length_spec;
|
||||
|
||||
#line 3352 "IPTCfgParser.cpp"
|
||||
#line 3400 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3383,13 +3431,13 @@ void IPTCfgParser::port_def_no_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 846 "iptables.g"
|
||||
#line 867 "iptables.g"
|
||||
|
||||
importer->tmp_port_range_start = LT(0)->getText();
|
||||
importer->tmp_port_range_end = LT(0)->getText();
|
||||
*dbg << " PORT=" << LT(0)->getText();
|
||||
|
||||
#line 3393 "IPTCfgParser.cpp"
|
||||
#line 3441 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3433,13 +3481,13 @@ void IPTCfgParser::port_def_with_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 864 "iptables.g"
|
||||
#line 885 "iptables.g"
|
||||
|
||||
importer->tmp_port_range_start = LT(0)->getText();
|
||||
importer->tmp_port_range_end = LT(0)->getText();
|
||||
*dbg << " PORT=" << LT(0)->getText();
|
||||
|
||||
#line 3443 "IPTCfgParser.cpp"
|
||||
#line 3491 "IPTCfgParser.cpp"
|
||||
}
|
||||
{
|
||||
switch ( LA(1)) {
|
||||
@ -3477,6 +3525,7 @@ void IPTCfgParser::port_def_with_range() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -3495,12 +3544,12 @@ void IPTCfgParser::port_def_with_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 871 "iptables.g"
|
||||
#line 892 "iptables.g"
|
||||
|
||||
importer->tmp_port_range_end = LT(0)->getText();
|
||||
*dbg << ":" << LT(0)->getText();
|
||||
|
||||
#line 3504 "IPTCfgParser.cpp"
|
||||
#line 3553 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3523,6 +3572,7 @@ void IPTCfgParser::port_def_with_range() {
|
||||
case MATCH_SRC_MULTIPORT_SHORT:
|
||||
case MATCH_DST_MULTIPORT:
|
||||
case MATCH_DST_MULTIPORT_SHORT:
|
||||
case MATCH_BOTH_MULTIPORT:
|
||||
case MATCH_ICMP_TYPE:
|
||||
case MATCH_SRC_PORT:
|
||||
case MATCH_SRC_PORT_SHORT:
|
||||
@ -3574,13 +3624,13 @@ void IPTCfgParser::port_def_with_incomplete_range() {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 880 "iptables.g"
|
||||
#line 901 "iptables.g"
|
||||
|
||||
importer->tmp_port_range_start = "0";
|
||||
importer->tmp_port_range_end = LT(0)->getText();
|
||||
*dbg << "PORT 0:" << LT(0)->getText();
|
||||
|
||||
#line 3584 "IPTCfgParser.cpp"
|
||||
#line 3634 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3598,7 +3648,7 @@ void IPTCfgParser::syn() {
|
||||
try { // for error handling
|
||||
match(MATCH_SYN);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 969 "iptables.g"
|
||||
#line 990 "iptables.g"
|
||||
|
||||
importer->tcp_flags_mask.clear();
|
||||
importer->tcp_flags_mask.push_back(libfwbuilder::TCPService::SYN);
|
||||
@ -3608,7 +3658,7 @@ void IPTCfgParser::syn() {
|
||||
importer->tcp_flags_comp.clear();
|
||||
importer->tcp_flags_comp.push_back(libfwbuilder::TCPService::SYN);
|
||||
|
||||
#line 3612 "IPTCfgParser.cpp"
|
||||
#line 3662 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3627,16 +3677,16 @@ void IPTCfgParser::tcp_flags() {
|
||||
match(MATCH_TCP_FLAGS);
|
||||
tcp_flags_list();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1020 "iptables.g"
|
||||
#line 1041 "iptables.g"
|
||||
|
||||
importer->tcp_flags_mask = importer->tmp_tcp_flags_list;
|
||||
importer->tmp_tcp_flags_list.clear();
|
||||
|
||||
#line 3636 "IPTCfgParser.cpp"
|
||||
#line 3686 "IPTCfgParser.cpp"
|
||||
}
|
||||
tcp_flags_list();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1025 "iptables.g"
|
||||
#line 1046 "iptables.g"
|
||||
|
||||
importer->tcp_flags_comp = importer->tmp_tcp_flags_list;
|
||||
importer->tmp_tcp_flags_list.clear();
|
||||
@ -3650,7 +3700,7 @@ void IPTCfgParser::tcp_flags() {
|
||||
i!=importer->tcp_flags_comp.end(); ++i)
|
||||
*dbg << *i << "|";
|
||||
|
||||
#line 3654 "IPTCfgParser.cpp"
|
||||
#line 3704 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3706,9 +3756,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(SYN);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 982 "iptables.g"
|
||||
#line 1003 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::SYN;
|
||||
#line 3712 "IPTCfgParser.cpp"
|
||||
#line 3762 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3716,9 +3766,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(ACK);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 984 "iptables.g"
|
||||
#line 1005 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::ACK;
|
||||
#line 3722 "IPTCfgParser.cpp"
|
||||
#line 3772 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3726,9 +3776,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(FIN);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 986 "iptables.g"
|
||||
#line 1007 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::FIN;
|
||||
#line 3732 "IPTCfgParser.cpp"
|
||||
#line 3782 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3736,9 +3786,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(RST);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 988 "iptables.g"
|
||||
#line 1009 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::RST;
|
||||
#line 3742 "IPTCfgParser.cpp"
|
||||
#line 3792 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3746,9 +3796,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(URG);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 990 "iptables.g"
|
||||
#line 1011 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::URG;
|
||||
#line 3752 "IPTCfgParser.cpp"
|
||||
#line 3802 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3756,9 +3806,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(PSH);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 992 "iptables.g"
|
||||
#line 1013 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = libfwbuilder::TCPService::PSH;
|
||||
#line 3762 "IPTCfgParser.cpp"
|
||||
#line 3812 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3766,9 +3816,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(ALL);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 994 "iptables.g"
|
||||
#line 1015 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = 99;
|
||||
#line 3772 "IPTCfgParser.cpp"
|
||||
#line 3822 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3776,9 +3826,9 @@ void IPTCfgParser::tcp_flag_word() {
|
||||
{
|
||||
match(NONE);
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 996 "iptables.g"
|
||||
#line 1017 "iptables.g"
|
||||
importer->tmp_tcp_flag_code = 98;
|
||||
#line 3782 "IPTCfgParser.cpp"
|
||||
#line 3832 "IPTCfgParser.cpp"
|
||||
}
|
||||
break;
|
||||
}
|
||||
@ -3803,20 +3853,20 @@ void IPTCfgParser::tcp_flags_list() {
|
||||
|
||||
try { // for error handling
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1001 "iptables.g"
|
||||
#line 1022 "iptables.g"
|
||||
|
||||
importer->tmp_tcp_flags_list.clear();
|
||||
importer->tmp_tcp_flag_code = 0;
|
||||
|
||||
#line 3812 "IPTCfgParser.cpp"
|
||||
#line 3862 "IPTCfgParser.cpp"
|
||||
}
|
||||
tcp_flag_word();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1006 "iptables.g"
|
||||
#line 1027 "iptables.g"
|
||||
|
||||
importer->tmp_tcp_flags_list.push_back(importer->tmp_tcp_flag_code);
|
||||
|
||||
#line 3820 "IPTCfgParser.cpp"
|
||||
#line 3870 "IPTCfgParser.cpp"
|
||||
}
|
||||
{ // ( ... )*
|
||||
for (;;) {
|
||||
@ -3824,20 +3874,20 @@ void IPTCfgParser::tcp_flags_list() {
|
||||
match(COMMA);
|
||||
tcp_flag_word();
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 1011 "iptables.g"
|
||||
#line 1032 "iptables.g"
|
||||
|
||||
importer->tmp_tcp_flags_list.push_back(
|
||||
importer->tmp_tcp_flag_code);
|
||||
|
||||
#line 3833 "IPTCfgParser.cpp"
|
||||
#line 3883 "IPTCfgParser.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
goto _loop147;
|
||||
goto _loop150;
|
||||
}
|
||||
|
||||
}
|
||||
_loop147:;
|
||||
_loop150:;
|
||||
} // ( ... )*
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& ex) {
|
||||
@ -3945,6 +3995,7 @@ const char* IPTCfgParser::tokenNames[] = {
|
||||
"MATCH_SRC_MULTIPORT_SHORT",
|
||||
"MATCH_DST_MULTIPORT",
|
||||
"MATCH_DST_MULTIPORT_SHORT",
|
||||
"MATCH_BOTH_MULTIPORT",
|
||||
"MATCH_ICMP_TYPE",
|
||||
"MATCH_SRC_PORT",
|
||||
"MATCH_SRC_PORT_SHORT",
|
||||
@ -4000,31 +4051,32 @@ const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_0(_tokenSet_0_dat
|
||||
const unsigned long IPTCfgParser::_tokenSet_1_data_[] = { 540914UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// EOF NEWLINE LINE_COMMENT "COMMIT" STAR COLON ADD_RULE
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_1(_tokenSet_1_data_,6);
|
||||
const unsigned long IPTCfgParser::_tokenSet_2_data_[] = { 999325696UL, 67108870UL, 4287103072UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_2_data_[] = { 999325696UL, 67108870UL, 4287103072UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST OPT_IN_INTF
|
||||
// OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM MATCH_LIMIT MATCH_LIMIT_BURST
|
||||
// MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT MATCH_DST_MULTIPORT
|
||||
// MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT MATCH_SRC_PORT_SHORT
|
||||
// MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_2(_tokenSet_2_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_3_data_[] = { 999325952UL, 67108870UL, 4287103072UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_3_data_[] = { 999325952UL, 67108870UL, 4287103072UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// WORD MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_3(_tokenSet_3_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_4_data_[] = { 3221225728UL, 2147483649UL, 3407888UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// WORD "tcp" "udp" "icmp" "state" "limit" "length" "multiport" "comment"
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_4(_tokenSet_4_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_5_data_[] = { 999325712UL, 67108870UL, 4287103072UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_5_data_[] = { 999325712UL, 67108870UL, 4287103072UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_5(_tokenSet_5_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_6_data_[] = { 0UL, 67104728UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// REJECT_WITH LOG_PREFIX LOG_TCP_SEQ LOG_TCP_OPT LOG_IP_OPT ULOG_PREFIX
|
||||
@ -4032,35 +4084,35 @@ const unsigned long IPTCfgParser::_tokenSet_6_data_[] = { 0UL, 67104728UL, 0UL,
|
||||
// ROUTE_OIF ROUTE_GW ROUTE_TEE TO_SOURCE TO_DESTINATION TO_PORTS TO_NETMAP
|
||||
// CLAMP_MSS
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_6(_tokenSet_6_data_,6);
|
||||
const unsigned long IPTCfgParser::_tokenSet_7_data_[] = { 999325712UL, 134213598UL, 4287103072UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_7_data_[] = { 999325712UL, 134213598UL, 4287103072UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET REJECT_WITH LOG_PREFIX
|
||||
// LOG_TCP_SEQ LOG_TCP_OPT LOG_IP_OPT ULOG_PREFIX LOG_LEVEL SET_MARK SET_TOS
|
||||
// SAVE_MARK RESTORE_MARK CONTINUE ROUTE_IIF ROUTE_OIF ROUTE_GW ROUTE_TEE
|
||||
// TO_SOURCE TO_DESTINATION TO_PORTS TO_NETMAP CLAMP_MSS OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_7(_tokenSet_7_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_8_data_[] = { 999342096UL, 134213598UL, 4287103072UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_8_data_[] = { 999342096UL, 134213598UL, 4287103072UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE COLON MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION
|
||||
// OPT_DST OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET REJECT_WITH LOG_PREFIX
|
||||
// LOG_TCP_SEQ LOG_TCP_OPT LOG_IP_OPT ULOG_PREFIX LOG_LEVEL SET_MARK SET_TOS
|
||||
// SAVE_MARK RESTORE_MARK CONTINUE ROUTE_IIF ROUTE_OIF ROUTE_GW ROUTE_TEE
|
||||
// TO_SOURCE TO_DESTINATION TO_PORTS TO_NETMAP CLAMP_MSS OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_8(_tokenSet_8_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_9_data_[] = { 999325712UL, 67108870UL, 4287103074UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_9_data_[] = { 999325712UL, 67108870UL, 4287103074UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM COMMA MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_9(_tokenSet_9_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_10_data_[] = { 33554432UL, 0UL, 8UL, 0UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// EXCLAMATION MATCH_MARK
|
||||
@ -4070,31 +4122,33 @@ const unsigned long IPTCfgParser::_tokenSet_11_data_[] = { 0UL, 0UL, 261888UL, 0
|
||||
// MATCH_RECENT_RTTL RSOURCE MATCH_RECENT_RDEST MATCH_RECENT_NAME MATCH_RECENT_SECONDS
|
||||
// MATCH_RECENT_HITCOUNT
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_11(_tokenSet_11_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_12_data_[] = { 999325712UL, 67108870UL, 4287364960UL, 1537UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_12_data_[] = { 999325712UL, 67108870UL, 4287364960UL, 3075UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_RECENT_SET MATCH_RECENT_RCHECK MATCH_RECENT_UPDATE
|
||||
// MATCH_RECENT_REMOVE MATCH_RECENT_RTTL RSOURCE MATCH_RECENT_RDEST MATCH_RECENT_NAME
|
||||
// MATCH_RECENT_SECONDS MATCH_RECENT_HITCOUNT MATCH_LENGTH MATCH_SRC_MULTIPORT
|
||||
// MATCH_SRC_MULTIPORT_SHORT MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT
|
||||
// MATCH_ICMP_TYPE MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
// MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE MATCH_SRC_PORT MATCH_SRC_PORT_SHORT
|
||||
// MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_12(_tokenSet_12_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_13_data_[] = { 999325712UL, 67108870UL, 4287103074UL, 2047UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_13_data_[] = { 999325712UL, 67108870UL, 4287103074UL, 4095UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM COMMA MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN "SYN"
|
||||
// "ACK" "FIN" "RST" "URG" "PSH" "ALL" "NONE" MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN "SYN" "ACK" "FIN" "RST" "URG" "PSH" "ALL" "NONE" MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_13(_tokenSet_13_data_,8);
|
||||
const unsigned long IPTCfgParser::_tokenSet_14_data_[] = { 999325712UL, 67108870UL, 4287103072UL, 2047UL, 0UL, 0UL, 0UL, 0UL };
|
||||
const unsigned long IPTCfgParser::_tokenSet_14_data_[] = { 999325712UL, 67108870UL, 4287103072UL, 4095UL, 0UL, 0UL, 0UL, 0UL };
|
||||
// NEWLINE MINUS UNSUPPORTED_OPTION OPT_MODULE OPT_SRC EXCLAMATION OPT_DST
|
||||
// OPT_IN_INTF OPT_OUT_INTF OPT_PROTO OPT_TARGET OPT_FRAGM MATCH_LIMIT
|
||||
// MATCH_LIMIT_BURST MATCH_LENGTH MATCH_SRC_MULTIPORT MATCH_SRC_MULTIPORT_SHORT
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_ICMP_TYPE MATCH_SRC_PORT
|
||||
// MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT MATCH_SYN "SYN"
|
||||
// "ACK" "FIN" "RST" "URG" "PSH" "ALL" "NONE" MATCH_TCP_FLAGS MATCH_TCP_OPTION
|
||||
// MATCH_DST_MULTIPORT MATCH_DST_MULTIPORT_SHORT MATCH_BOTH_MULTIPORT MATCH_ICMP_TYPE
|
||||
// MATCH_SRC_PORT MATCH_SRC_PORT_SHORT MATCH_DST_PORT MATCH_DST_PORT_SHORT
|
||||
// MATCH_SYN "SYN" "ACK" "FIN" "RST" "URG" "PSH" "ALL" "NONE" MATCH_TCP_FLAGS
|
||||
// MATCH_TCP_OPTION
|
||||
const ANTLR_USE_NAMESPACE(antlr)BitSet IPTCfgParser::_tokenSet_14(_tokenSet_14_data_,8);
|
||||
|
||||
|
||||
|
||||
@ -134,10 +134,10 @@ protected:
|
||||
private:
|
||||
static const char* tokenNames[];
|
||||
#ifndef NO_STATIC_CONSTS
|
||||
static const int NUM_TOKENS = 137;
|
||||
static const int NUM_TOKENS = 138;
|
||||
#else
|
||||
enum {
|
||||
NUM_TOKENS = 137
|
||||
NUM_TOKENS = 138
|
||||
};
|
||||
#endif
|
||||
|
||||
|
||||
@ -99,52 +99,53 @@ struct CUSTOM_API IPTCfgParserTokenTypes {
|
||||
MATCH_SRC_MULTIPORT_SHORT = 88,
|
||||
MATCH_DST_MULTIPORT = 89,
|
||||
MATCH_DST_MULTIPORT_SHORT = 90,
|
||||
MATCH_ICMP_TYPE = 91,
|
||||
MATCH_SRC_PORT = 92,
|
||||
MATCH_SRC_PORT_SHORT = 93,
|
||||
MATCH_DST_PORT = 94,
|
||||
MATCH_DST_PORT_SHORT = 95,
|
||||
MATCH_SYN = 96,
|
||||
SYN = 97,
|
||||
ACK = 98,
|
||||
FIN = 99,
|
||||
RST = 100,
|
||||
URG = 101,
|
||||
PSH = 102,
|
||||
ALL = 103,
|
||||
NONE = 104,
|
||||
MATCH_TCP_FLAGS = 105,
|
||||
MATCH_TCP_OPTION = 106,
|
||||
Whitespace = 107,
|
||||
IPV6 = 108,
|
||||
MAC_ADDRESS = 109,
|
||||
NEG_INT_CONST = 110,
|
||||
HEXDIGIT = 111,
|
||||
NUM_3DIGIT = 112,
|
||||
NUM_HEX_4DIGIT = 113,
|
||||
NUMBER = 114,
|
||||
ULOG_QTHR = 115,
|
||||
ULOG_NLG = 116,
|
||||
ULOG_CPR = 117,
|
||||
NUMBER_SIGN = 118,
|
||||
PERCENT = 119,
|
||||
AMPERSAND = 120,
|
||||
APOSTROPHE = 121,
|
||||
OPENING_PAREN = 122,
|
||||
CLOSING_PAREN = 123,
|
||||
PLUS = 124,
|
||||
DOT = 125,
|
||||
SEMICOLON = 126,
|
||||
LESS_THAN = 127,
|
||||
EQUALS = 128,
|
||||
GREATER_THAN = 129,
|
||||
QUESTION = 130,
|
||||
COMMERCIAL_AT = 131,
|
||||
CARET = 132,
|
||||
UNDERLINE = 133,
|
||||
OPENING_BRACE = 134,
|
||||
CLOSING_BRACE = 135,
|
||||
TILDE = 136,
|
||||
MATCH_BOTH_MULTIPORT = 91,
|
||||
MATCH_ICMP_TYPE = 92,
|
||||
MATCH_SRC_PORT = 93,
|
||||
MATCH_SRC_PORT_SHORT = 94,
|
||||
MATCH_DST_PORT = 95,
|
||||
MATCH_DST_PORT_SHORT = 96,
|
||||
MATCH_SYN = 97,
|
||||
SYN = 98,
|
||||
ACK = 99,
|
||||
FIN = 100,
|
||||
RST = 101,
|
||||
URG = 102,
|
||||
PSH = 103,
|
||||
ALL = 104,
|
||||
NONE = 105,
|
||||
MATCH_TCP_FLAGS = 106,
|
||||
MATCH_TCP_OPTION = 107,
|
||||
Whitespace = 108,
|
||||
IPV6 = 109,
|
||||
MAC_ADDRESS = 110,
|
||||
NEG_INT_CONST = 111,
|
||||
HEXDIGIT = 112,
|
||||
NUM_3DIGIT = 113,
|
||||
NUM_HEX_4DIGIT = 114,
|
||||
NUMBER = 115,
|
||||
ULOG_QTHR = 116,
|
||||
ULOG_NLG = 117,
|
||||
ULOG_CPR = 118,
|
||||
NUMBER_SIGN = 119,
|
||||
PERCENT = 120,
|
||||
AMPERSAND = 121,
|
||||
APOSTROPHE = 122,
|
||||
OPENING_PAREN = 123,
|
||||
CLOSING_PAREN = 124,
|
||||
PLUS = 125,
|
||||
DOT = 126,
|
||||
SEMICOLON = 127,
|
||||
LESS_THAN = 128,
|
||||
EQUALS = 129,
|
||||
GREATER_THAN = 130,
|
||||
QUESTION = 131,
|
||||
COMMERCIAL_AT = 132,
|
||||
CARET = 133,
|
||||
UNDERLINE = 134,
|
||||
OPENING_BRACE = 135,
|
||||
CLOSING_BRACE = 136,
|
||||
TILDE = 137,
|
||||
NULL_TREE_LOOKAHEAD = 3
|
||||
};
|
||||
#ifdef __cplusplus
|
||||
|
||||
@ -769,7 +769,9 @@ m_comment : M_COMMENT MATCH_COMMENT STRING
|
||||
;
|
||||
|
||||
//****************************************************************
|
||||
|
||||
/*
|
||||
* Note that there can be just one port (i.e. no ,port[,port] part)
|
||||
*/
|
||||
multiport_tcp_udp_port_spec :
|
||||
(
|
||||
( (MATCH_SRC_MULTIPORT | MATCH_SRC_MULTIPORT_SHORT)
|
||||
@ -784,7 +786,8 @@ multiport_tcp_udp_port_spec :
|
||||
( COMMA port_def_no_range
|
||||
{
|
||||
importer->pushTmpPortSpecToSrcPortList();
|
||||
} )+
|
||||
}
|
||||
)*
|
||||
)
|
||||
|
|
||||
( (MATCH_DST_MULTIPORT | MATCH_DST_MULTIPORT_SHORT)
|
||||
@ -799,8 +802,26 @@ multiport_tcp_udp_port_spec :
|
||||
( COMMA port_def_no_range
|
||||
{
|
||||
importer->pushTmpPortSpecToDstPortList();
|
||||
} )+
|
||||
}
|
||||
)*
|
||||
)
|
||||
|
|
||||
( MATCH_BOTH_MULTIPORT
|
||||
{
|
||||
importer->startBothMultiPort();
|
||||
*dbg << " MULTIPORT PORTS=";
|
||||
}
|
||||
port_def_no_range
|
||||
{
|
||||
importer->pushTmpPortSpecToBothPortList();
|
||||
}
|
||||
( COMMA port_def_no_range
|
||||
{
|
||||
importer->pushTmpPortSpecToBothPortList();
|
||||
}
|
||||
)*
|
||||
)
|
||||
|
||||
)
|
||||
;
|
||||
|
||||
@ -1195,6 +1216,7 @@ MATCH_STATE : "--state" ;
|
||||
|
||||
MATCH_SRC_MULTIPORT : "--source-ports" ;
|
||||
MATCH_DST_MULTIPORT : "--destination-ports" ;
|
||||
MATCH_BOTH_MULTIPORT : "--ports" ;
|
||||
|
||||
MATCH_SRC_MULTIPORT_SHORT : "--sports" ;
|
||||
MATCH_DST_MULTIPORT_SHORT : "--dports" ;
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user