+
+static void fw3_ubus_rules_add(struct blob_buf *b, const char *service,
+ const char *instance, const char *device,
+ const struct blob_attr *rule, unsigned n)
+{
+ void *k = blobmsg_open_table(b, "");
+ struct blob_attr *ropt;
+ unsigned orem;
+ char *type = NULL, *name = NULL;
+ char comment[256];
+
+ blobmsg_for_each_attr(ropt, rule, orem) {
+ if (!strcmp(blobmsg_name(ropt), "type"))
+ type = blobmsg_data(ropt);
+ else if (!strcmp(blobmsg_name(ropt), "name"))
+ name = blobmsg_data(ropt);
+
+ if (device && !strcmp(blobmsg_name(ropt), "device"))
+ device = blobmsg_get_string(ropt);
+ else if (strcmp(blobmsg_name(ropt), "name"))
+ blobmsg_add_blob(b, ropt);
+ }
+
+ if (!type || strcmp(type, "ipset")) {
+ if (instance)
+ snprintf(comment, sizeof(comment), "ubus:%s[%s] %s %d",
+ service, instance, type ? type : "rule", n);
+ else
+ snprintf(comment, sizeof(comment), "ubus:%s %s %d",
+ service, type ? type : "rule", n);
+
+ blobmsg_add_string(b, "name", comment);
+ }
+ else if (name) {
+ blobmsg_add_string(b, "name", name);
+ }
+
+ if (device)
+ blobmsg_add_string(b, "device", device);
+
+ blobmsg_close_table(b, k);
+}
+
+void
+fw3_ubus_rules(struct blob_buf *b)
+{
+ blob_buf_init(b, 0);
+
+ struct blob_attr *c, *cur, *dcur, *rule;
+ unsigned n, r, rem, drem, rrem;
+
+ blobmsg_for_each_attr(c, interfaces, r) {
+ const char *l3_device = NULL;
+ const char *iface_proto = "unknown";
+ const char *iface_name = "unknown";
+ struct blob_attr *data = NULL;
+
+ blobmsg_for_each_attr(cur, c, rem) {
+ if (!strcmp(blobmsg_name(cur), "l3_device"))
+ l3_device = blobmsg_get_string(cur);
+ else if (!strcmp(blobmsg_name(cur), "interface"))
+ iface_name = blobmsg_get_string(cur);
+ else if (!strcmp(blobmsg_name(cur), "proto"))
+ iface_proto = blobmsg_get_string(cur);
+ else if (!strcmp(blobmsg_name(cur), "data"))
+ data = cur;
+ }
+
+ if (!data || !l3_device)
+ continue;
+
+ blobmsg_for_each_attr(dcur, data, drem) {
+ if (strcmp(blobmsg_name(dcur), "firewall"))
+ continue;
+
+ n = 0;
+
+ blobmsg_for_each_attr(rule, dcur, rrem)
+ fw3_ubus_rules_add(b, iface_name, iface_proto,
+ l3_device, rule, n++);
+ }
+ }
+
+ if (!procd_data)
+ return;
+
+ /* service */
+ blobmsg_for_each_attr(c, procd_data, r) {
+ if (!blobmsg_check_attr(c, true))
+ continue;
+
+ /* instance */
+ blobmsg_for_each_attr(cur, c, rem) {
+ if (!blobmsg_check_attr(cur, true))
+ continue;
+
+ /* fw rules within the service itself */
+ if (!strcmp(blobmsg_name(cur), "firewall")) {
+ n = 0;
+
+ blobmsg_for_each_attr(rule, cur, rrem)
+ fw3_ubus_rules_add(b, blobmsg_name(c),
+ NULL, NULL, rule, n++);
+
+ continue;
+ }
+
+ /* type */
+ blobmsg_for_each_attr(dcur, cur, drem) {
+ if (!blobmsg_check_attr(dcur, true))
+ continue;
+
+ if (strcmp(blobmsg_name(dcur), "firewall"))
+ continue;
+
+ n = 0;
+
+ blobmsg_for_each_attr(rule, dcur, rrem)
+ fw3_ubus_rules_add(b, blobmsg_name(c),
+ blobmsg_name(cur), NULL, rule, n++);
+ }
+ }
+ }
+}