diff options
| author | Holger Hans Peter Freyther <zecke@selfish.org> | 2010-05-14 03:39:56 +0800 |
|---|---|---|
| committer | Holger Hans Peter Freyther <zecke@selfish.org> | 2010-06-15 20:24:18 +0800 |
| commit | b4af5c9b57917b1ab31f838adcafcaf5c49baab7 (patch) | |
| tree | 2d51fb14b5f81ebb7796e6f40e1dab1ec53ad02f /openbsc/src/nat/bsc_nat.c | |
| parent | d8b82066fa9af6cc0ed85cdb29c4b283ef137204 (diff) | |
nat: Introduce a nat filter that is working on the CR message.
Currently there is no implementation but the refusal code is
in place and will send a refusal back to the BSC.
Diffstat (limited to 'openbsc/src/nat/bsc_nat.c')
| -rw-r--r-- | openbsc/src/nat/bsc_nat.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/openbsc/src/nat/bsc_nat.c b/openbsc/src/nat/bsc_nat.c index 7c9f6c73a..4a0a15bfa 100644 --- a/openbsc/src/nat/bsc_nat.c +++ b/openbsc/src/nat/bsc_nat.c @@ -561,6 +561,7 @@ static void ipaccess_auth_bsc(struct tlv_parsed *tvp, struct bsc_connection *bsc static int forward_sccp_to_msc(struct bsc_connection *bsc, struct msgb *msg) { + struct msgb *refuse; struct sccp_connections *con; struct bsc_nat_parsed *parsed; @@ -591,6 +592,8 @@ static int forward_sccp_to_msc(struct bsc_connection *bsc, struct msgb *msg) if (parsed->ipa_proto == IPAC_PROTO_SCCP) { switch (parsed->sccp_type) { case SCCP_MSG_TYPE_CR: + if (bsc_nat_filter_sccp_cr(bsc, msg, parsed) != 0) + goto exit3; if (create_sccp_src_ref(bsc, msg, parsed) != 0) goto exit2; con = patch_sccp_src_ref_to_msc(msg, parsed, bsc); @@ -654,6 +657,13 @@ exit: goto exit2; } +exit3: + /* send a SCCP Connection Refused */ + refuse = sccp_create_refuse(parsed->src_local_ref, SCCP_REFUSAL_SCCP_FAILURE); + if (refuse) { + bsc_send_data(bsc, refuse->l2h, msgb_l2len(refuse), IPAC_PROTO_SCCP); + msgb_free(refuse); + } exit2: talloc_free(parsed); msgb_free(msg); |