[patch] An updated version of my "lan-access.patch" meant to be applied on top of the "tuxx-at 2.6.X" patch ...

lan-access-2.6.X.patch (text/plain), 2.99 KB, created by Axel Dyks on 2007-08-18 00:45:53 UTC

diff -ru vpnclient.orig/interceptor.c vpnclient/interceptor.c
--- vpnclient.orig/interceptor.c	2007-08-18 01:07:01.000000000 +0200
+++ vpnclient/interceptor.c	2007-08-18 01:53:45.000000000 +0200
@@ -83,6 +83,11 @@
 
 static int vpn_is_up = FALSE;
 
+// LAN ACCESS PATCH: Module parameter used to retrieve "gateway" address from user space
+static int gateway[4] = { 0,0,0,0 };
+module_param_array(gateway, uint, NULL, 0644);
+MODULE_PARM_DESC(gateway," Gateway's public address (separated by ',') to be passed from user space.");
+
 #if LINUX_VERSION_CODE >= KERNEL_VERSION(2,4,0)
 #define interceptor_name LINUX_VPN_IFNAME
 #else
@@ -362,7 +367,10 @@
         goto error_exit;
     }
     vpn_is_up = TRUE;
-    return error;
+	// LAN ACCESS PATCH: Display current "gateway" information from user space
+	printk(KERN_INFO "LAN ACCESS: vpn_is_up: gateway from userspace: %d.%d.%d.%d\n",
+		   gateway[0], gateway[1], gateway[2], gateway[3]);
+	return error;
 
   error_exit:
     do_cleanup();
@@ -558,6 +566,24 @@
         goto exit_gracefully;
     }
 
+	// LAN ACCESS PATCH: re-route traffic to original ip handler, if not receiving from VPN gateway's public address 
+	if ( vpn_is_up && strcmp(dev->name,LINUX_VPN_IFNAME) && 
+		(gateway[0] || gateway[1] || gateway[2] || gateway[3]) && 
+		(
+		 (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->saddr))[0] != gateway[0]) ||
+		 (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->saddr))[1] != gateway[1]) ||
+		 (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->saddr))[2] != gateway[2]) ||
+		 (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->saddr))[3] != gateway[3]) ) ) {
+		/*
+		printk(KERN_INFO "LAN ACCESS: recv_ip_packet_handler(%s): %u.%u.%u.%u --> %u.%u.%u.%u\n",
+			dev->name,
+			NIPQUAD(CISCOVPN_SKB_IPHEADER(skb)->saddr),
+			NIPQUAD(CISCOVPN_SKB_IPHEADER(skb)->daddr));
+		*/
+		rc2 = original_ip_handler.orig_handler_func(skb, dev, type);
+		goto exit_gracefully;
+	}
+
     if (CHECK_IP_SUMMED(skb->ip_summed))
     {
 #if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,7)
@@ -817,6 +843,24 @@
         goto exit_gracefully;
     }
 
+	// LAN ACCESS PATCH: re-route traffic to original ip handler, if not sending to VPN gateway's public address
+	if ( vpn_is_up && strcmp(dev->name,LINUX_VPN_IFNAME) && 
+		 (gateway[0] || gateway[1] || gateway[2] || gateway[3]) && 
+		 (
+		  (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->daddr))[0] != gateway[0]) ||
+		  (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->daddr))[1] != gateway[1]) ||
+		  (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->daddr))[2] != gateway[2]) ||
+		  (((unsigned char *)&(CISCOVPN_SKB_IPHEADER(skb)->daddr))[3] != gateway[3]) ) ) {
+		/*
+	  	printk(KERN_INFO "LAN ACCESS: replacement_dev_xmit(%s): %u.%u.%u.%u --> %u.%u.%u.%u\n",
+			 dev->name,
+			 NIPQUAD(CISCOVPN_SKB_IPHEADER(skb)->saddr),
+			 NIPQUAD(CISCOVPN_SKB_IPHEADER(skb)->daddr));
+		*/
+	  rc2 = pBinding->InjectSend(skb, dev);
+	  goto exit_gracefully;
+	}
+
     if (need_reorder_frag(skb))
     {
         rc2 = handle_fragment(pBinding, skb, dev);