pfctl/rule/
ip.rs

1// Copyright 2025 Mullvad VPN AB.
2//
3// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
4// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
5// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
6// option. This file may not be copied, modified, or distributed
7// except according to those terms.
8
9use crate::{
10    AddrFamily, Result,
11    conversion::CopyTo,
12    ffi,
13    pooladdr::{PoolAddr, PoolAddrList},
14};
15use ipnetwork::{IpNetwork, Ipv4Network, Ipv6Network};
16use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
17
18#[derive(Debug, Default, Clone, Copy, PartialEq, Eq, Hash)]
19pub enum Ip {
20    #[default]
21    Any,
22    Net(IpNetwork),
23}
24
25impl Ip {
26    pub fn get_af(&self) -> AddrFamily {
27        match *self {
28            Ip::Any => AddrFamily::Any,
29            Ip::Net(IpNetwork::V4(_)) => AddrFamily::Ipv4,
30            Ip::Net(IpNetwork::V6(_)) => AddrFamily::Ipv6,
31        }
32    }
33
34    /// Returns `Ip::Any` represented an as an `IpNetwork`, used for ffi.
35    fn any_ffi_repr() -> IpNetwork {
36        IpNetwork::V6(Ipv6Network::new(Ipv6Addr::new(0, 0, 0, 0, 0, 0, 0, 0), 0).unwrap())
37    }
38
39    /// Returns PoolAddrList initialized with receiver
40    pub fn to_pool_addr_list(&self) -> Result<PoolAddrList> {
41        PoolAddrList::new(&[PoolAddr::from(*self)])
42    }
43}
44
45impl From<IpNetwork> for Ip {
46    fn from(net: IpNetwork) -> Self {
47        Ip::Net(net)
48    }
49}
50
51impl From<Ipv4Addr> for Ip {
52    fn from(ip: Ipv4Addr) -> Self {
53        Ip::Net(IpNetwork::V4(Ipv4Network::new(ip, 32).unwrap()))
54    }
55}
56
57impl From<Ipv6Addr> for Ip {
58    fn from(ip: Ipv6Addr) -> Self {
59        Ip::Net(IpNetwork::V6(Ipv6Network::new(ip, 128).unwrap()))
60    }
61}
62
63impl From<IpAddr> for Ip {
64    fn from(ip: IpAddr) -> Self {
65        match ip {
66            IpAddr::V4(addr) => Ip::from(addr),
67            IpAddr::V6(addr) => Ip::from(addr),
68        }
69    }
70}
71
72impl CopyTo<ffi::pfvar::pf_addr_wrap> for Ip {
73    fn copy_to(&self, pf_addr_wrap: &mut ffi::pfvar::pf_addr_wrap) {
74        match *self {
75            Ip::Any => Self::any_ffi_repr().copy_to(pf_addr_wrap),
76            Ip::Net(net) => net.copy_to(pf_addr_wrap),
77        }
78    }
79}
pfctl/rule/ip.rs

pfctl/rule/
ip.rs
