diff options
Diffstat (limited to 'vim/syntax/iptables.vim')
| -rw-r--r-- | vim/syntax/iptables.vim | 380 |
1 files changed, 380 insertions, 0 deletions
diff --git a/vim/syntax/iptables.vim b/vim/syntax/iptables.vim new file mode 100644 index 0000000..0f65a61 --- /dev/null +++ b/vim/syntax/iptables.vim @@ -0,0 +1,380 @@ +"============================================================================ +" +" Source: https://raw.githubusercontent.com/vim-scripts/iptables/master/syntax/iptables.vim +" iptables-save/restore syntax highlighter +" +" Language: iptables-save/restore file +" Version: Not Specified +" Date: 07-Jun-2014 +" Maintainer: Eric Haarbauer <ehaar70{AT}gmail{DOT}com> +" License: This file is placed in the public domain. +" +"============================================================================ +" Section: Notes {{{1 +"============================================================================ +" +" This vim syntax script highlights files used by Harald Welte's iptables-save +" and iptables-restore utilities. Both utilities are part of the iptables +" application (http://www.netfilter.org/projects/iptables). +" +" Features: +" +" * Distinguishes commands, options, modules, targets and chains. +" * Distinguishes numeric IP addresses from net masks. +" * Highlights tokens that occur only in hand-edited files; for example, +" "--append" and "destination-unreachable". +" * Special handling for module names; for example, the tcp module is +" colored differently from the tcp protocol. +" +" Options: +" +" Customize the behavior of this script by setting values for the following +" options in your .vimrc file. (Type ":h vimrc" in vim for more information +" on the .vimrc file.) +" +" g:Iptables_SpecialDelimiters +" This variable, if set to a non-zero value, distinguishes numeric +" delimiters, including the dots in IP addresses, the slash that separates +" an IP address from a netmask, and the colon that separates the ends of a +" port range. If not set, this option defaults to off. +" +" Known Issues: +" +" * Some special argument tokens are highlighted whether or not they are +" used with the correct option. For example, "destination-unreachable" +" gets special highlighting whether or not is used as an argument to the +" --icmp-type option. In practice, this is rarely a problem. +" +" Reporting Issues: +" +" If you discover an iptables file that this script highlights incorrectly, +" please email the author (address at the top of the script) with the +" following information: +" +" * Problem iptables file WITH ANY SENSITIVE INFORMATION REMOVED +" * The release version of this script (see top of the script) +" * If possible, a patch to fix the problem +" +" Design Notes: +" +" Part of this script is autogenerated from the output of the iptables man +" page. The source code for generating the script is available from the +" author on request (see email address at the top of the script). The +" script should build from source on most Linux systems with iptables +" installed. +" +" The build system that generates this script strips special CVS tokens +" (like "Id:") so that CVS no longer recognizes them. This allows users to +" place the script in their own version control system without losing +" information. The author encourages other vim script developers to adopt a +" similar approach in their own scripts. +" +" Installation: +" +" Put this file in your user runtime syntax directory, usually ~/.vim/syntax +" in *NIX or C:\Program Files\vim\vimfiles\syntax in Windows. Type ":h +" syn-files" from within vim for more information. +" +" The iptables-save and iptables-restore applications do not specify a +" naming standard for the files they use. However, iptables-save places a +" comment in the first line of its output. Other applications, such as +" Fedora's system-config-securitylevel uses the iptables-save/restore +" format, but with a different leading comment. We can use these leading +" comments to identify the filetype by placing the following code in the +" scripts.vim file in your user runtime directory: +" +" if getline(1) =~ "^# Generated by iptables-save" || +" \ getline(1) =~ "^# Firewall configuration written by" +" setfiletype iptables +" set commentstring=#%s +" finish +" endif +" +" Setting the commentstring on line 4 allows Meikel Brandmeyer's +" EnhancedCommentify script (vimscript #23) to work with iptables files. +" (Advanced users may want to set the commentstring option in an ftplugin +" file or in autocommands defined in .vimrc.) +" +"============================================================================ +" Source File: Id: iptables.src.vim 43 2014-06-08 03:21:32Z ehaar +"============================================================================ +" Section: Initialization {{{1 +"============================================================================ + +" For version 5.x: Clear all syntax items +" For version 6.x: Quit when a syntax file was already loaded +if !exists("main_syntax") + if version < 600 + syntax clear + elseif exists("b:current_syntax") + finish + endif + let main_syntax = 'iptables' +endif + +" Don't use standard HiLink, it will not work with included syntax files +if version < 508 + command! -nargs=+ IptablesHiLink highlight link <args> +else + command! -nargs=+ IptablesHiLink highlight default link <args> +endif + +syntax case match + +if version < 600 + set iskeyword+=- +else + setlocal iskeyword+=- +endif + +" Initialize global public variables: {{{2 + +" Support deprecated variable name used prior to release 1.07. +if exists("g:iptablesSpecialDelimiters") && +\ !exists("g:Iptables_SpecialDelimiters") + + let g:Iptables_SpecialDelimiters = g:iptablesSpecialDelimiters + unlet g:iptablesSpecialDelimiters + " echohl WarningMsg | echo "Warning:" | echohl None + " echo "The g:iptablesSpecialDelimiters variable is deprecated." + " echo "Please use g:Iptables_SpecialDelimiters in your .vimrc instead" + +endif + +if exists("g:Iptables_SpecialDelimiters") + let s:Iptables_SpecialDelimiters = g:Iptables_SpecialDelimiters +else + let s:Iptables_SpecialDelimiters = 0 +endif + +"============================================================================ +" Section: Group Definitions {{{1 +"============================================================================ + +syntax keyword iptablesSaveDirective COMMIT +syntax match iptablesSaveOperation "^[:*]" + +syntax keyword iptablesTable filter nat mangle raw + +syntax keyword iptablesTarget + \ ACCEPT DROP QUEUE RETURN BALANCE CLASSIFY CLUSTERIP CONNMARK + \ CONNSECMARK CONNTRACK DNAT DSCP ECN IPMARK IPV4OPSSTRIP LOG + \ MARK MASQUERADE MIRROR NETMAP NFQUEUE NOTRACK REDIRECT REJECT + \ ROUTE SAME SECMARK SET SNAT TARPIT TCPMSS TOS TRACE TTL ULOG XOR + +syntax keyword iptablesBuiltinChain + \ INPUT OUTPUT FORWARD PREROUTING POSTROUTING + +syntax keyword iptablesCommand -A -D -I -R -L -F -Z -N -X -P -E + \ --append --delete --insert --replace --list --flush --zero + \ --new-chain --delete-chain --policy --rename-chain + +syntax keyword iptablesParam -p -s -d -j -i -o -f -c -t + +syntax match iptablesOperator "\s\zs!\ze\s" + +syntax keyword iptablesModuleName contained + \ account addrtype ah childlevel comment condition connbytes connlimit + \ connmark connrate conntrack dccp dscp dstlimit ecn esp fuzzy hashlimit + \ helper icmp iprange ipv4options length limit mac mark mport multiport + \ nth osf owner physdev pkttype policy psd quota random realm recent + \ sctp set state string tcp tcpmss time tos ttl u32 udp unclean + +syntax keyword iptablesModuleType + \ UNSPEC UNICAST LOCAL BROADCAST ANYCAST MULTICAST BLACKHOLE UNREACHABLE + \ PROHIBIT THROW NAT XRESOLVE INVALID ESTABLISHED NEW RELATED SYN ACK FIN + \ RST URG PSH ALL NONE + +" From --reject-with option +syntax keyword iptablesModuleType + \ icmp-net-unreachable + \ icmp-host-unreachable + \ icmp-port-unreachable + \ icmp-proto-unreachable + \ icmp-net-prohibited + \ icmp-host-prohibited + \ icmp-admin-prohibited + +" From --icmp-type option +syntax keyword iptablesModuleType + \ any + \ echo-reply + \ destination-unreachable + \ network-unreachable + \ host-unreachable + \ protocol-unreachable + \ port-unreachable + \ fragmentation-needed + \ source-route-failed + \ network-unknown + \ host-unknown + \ network-prohibited + \ host-prohibited + \ TOS-network-unreachable + \ TOS-host-unreachable + \ communication-prohibited + \ host-precedence-violation + \ precedence-cutoff + \ source-quench + \ redirect + \ network-redirect + \ host-redirect + \ TOS-network-redirect + \ TOS-host-redirect + \ echo-request + \ router-advertisement + \ router-solicitation + \ time-exceeded + \ ttl-zero-during-transit + \ ttl-zero-during-reassembly + \ parameter-problem + \ ip-header-bad + \ required-option-missing + \ timestamp-request + \ timestamp-reply + \ address-mask-request + \ address-mask-reply + +" If we used a keyword for this, port names would be colored the same +" as modules with the same name (e.g. tcp, udp, icmp). +syntax keyword iptablesParam -m --match skipwhite nextgroup=iptablesModuleName + +syntax region iptablesString start=+"+ skip=+\\"+ end=+"+ oneline + +syntax match iptablesComment "^#.*" contains=iptablesTodo +syntax match iptablesBadComment "^\s\+\zs#.*" " Pound must be in first column + +syntax keyword iptablesTodo contained TODO FIXME XXX NOT NOTE + +" Special Delimiters: {{{2 + +if s:Iptables_SpecialDelimiters != 0 + syntax match iptablesNumber "\<[0-9./:]\+\>" + \ contains=iptablesMask,iptablesDelimiter + syntax match iptablesDelimiter "[./:]" contained + syntax match iptablesMask "/[0-9.]\+" contained + \ contains=iptablesDelimiter +else " s:Iptables_SpecialDelimiters == 0 + syntax match iptablesNumber "\<[0-9./]\+\>" + \ contains=iptablesMask,iptablesDelimiter + syntax match iptablesDelimiter "/" contained + syntax match iptablesMask "/[0-9.]\+" contained + \ contains=iptablesDelimiter +endif + +"============================================================================ +" Section: Autogenerated Groups {{{2 +"============================================================================ + +" Begin autogenerated section. +" iptables2vim: "iptables2vim 43 2014-06-08 03:21:32Z ehaar" +" iptables: "iptables v1.4.19.1" + +syntax keyword iptablesLongParam + \ --zone --xor-tos --xor-mark --weekdays --vproto --vportctl --vport + \ --vmethod --verbose --vdir --validmark --vaddr --update + \ --ulog-qthreshold --ulog-prefix --ulog-nlgroup --ulog-cprange + \ --uid-owner --u --type --tunnel-src --tunnel-dst --ttl-set --ttl-lt + \ --ttl-inc --ttl-gt --ttl-eq --ttl-dec --ttl --transparent --tproxy-mark + \ --total-nodes --tos --to-source --to-ports --to-port --to-destination + \ --to --timestop --timestart --timeout --tcp-option --tcp-flags --table + \ --syn --strip-options --string --strict --state --src-type --src-range + \ --src-pfx --src-group --src --sports --sport --spi --source-ports + \ --source-port --source --soft --socket-exists --set-xmark --set-tos + \ --set-mss --set-mark --set-dscp-class --set-dscp --set-counters + \ --set-class --set --selctx --seconds --save-mark --save --rttl --rt-type + \ --rt-segsleft --rt-len --rt- --rsource --return--nomatch --restore-mark + \ --restore --reqid --remove --reject-with --reap --realm --rdest --rcheck + \ --rateest-pps --rateest-name --rateest-lt --rateest-interval + \ --rateest-gt --rateest-ewmalog --rateest-eq --rateest-delta + \ --rateest-bps --rateest --random --quota --queue-num --queue-bypass + \ --queue-balance --protocol --proto --probability --ports --pol + \ --pkt-type --physdev-out --physdev-is-out --physdev-is-in + \ --physdev-is-bridged --physdev-in --persistent --packet --out-interface + \ --or-tos --or-mark --on-port --on-ip --numeric --notrack --nodst + \ --nflog-threshold --nflog-range --nflog-prefix --nflog-group + \ --nfacct-name --next --new --name --mss --monthdays --modprobe --mode + \ --mh-type --mask --mark --mangle-mac-d --mac-source --loose --log-uid + \ --log-tcp-sequence --log-tcp-options --log-prefix --log-level + \ --log-ip-options --log --local-node --line-numbers --limit-iface-out + \ --limit-iface-in --limit-burst --limit --length --led-trigger-id + \ --led-delay --led-always-blink --label --kerneltz --jump --ipvs --ipv + \ --invert --in-interface --icmpv --icmp-type --hmark-tuple + \ --hmark-src-prefix --hmark-sport-mask --hmark-spi-mask --hmark-rnd + \ --hmark-proto-mask --hmark-offset --hmark-mod --hmark-dst-prefix + \ --hmark-dport-mask --hl-set --hl-lt --hl-inc --hl-gt --hl-eq --hl-dec + \ --hitcount --hex-string --helper --help --header --hbh-opts --hbh-len + \ --hashmode --hashlimit-upto --hashlimit-srcmask --hashlimit-src + \ --hashlimit-name --hashlimit-mode --hashlimit-mask + \ --hashlimit-htable-size --hashlimit-htable-max + \ --hashlimit-htable-gcinterval --hashlimit-htable-expire + \ --hashlimit-dstmask --hashlimit-burst --hashlimit-above --hashlimit + \ --hash-init --h-length --goto --gid-owner --genre --gateway --from + \ --fragres --fragmore --fragment --fraglen --fraglast --fragid + \ --fragfirst --expevents --exist --exact --every --espspi + \ --ecn-tcp-remove --ecn-tcp-ece --ecn-tcp-cwr --ecn-ip-ect --dst-type + \ --dst-range --dst-pfx --dst-opts --dst-len --dst-group --dst + \ --dscp-class --dscp --dports --dport --dir --destination-ports + \ --destination-port --destination --del-set --dccp-types --dccp-option + \ --datestop --datestart --ctstatus --ctstate --ctreplsrcport --ctreplsrc + \ --ctrepldstport --ctrepldst --ctproto --ctorigsrcport --ctorigsrc + \ --ctorigdstport --ctorigdst --ctexpire --ctevents --ctdir --cpu + \ --contiguous --connlimit-upto --connlimit-saddr --connlimit-mask + \ --connlimit-daddr --connlimit-above --connbytes-mode --connbytes-dir + \ --connbytes --comment --clustermac --cluster-total-nodes + \ --cluster-local-nodemask --cluster-local-node --cluster-hash-seed --clus + \ --clamp-mss-to-pmtu --chunk-types --checksum-fill --check --bytecode + \ --and-tos --and-mark --algo --ahspi --ahres --ahlen --add-set + \ --accept-local +" End autogenerated section. + +"============================================================================ +" Section: Group Linking {{{1 +"============================================================================ + +IptablesHiLink iptablesSaveDirective PreProc +IptablesHiLink iptablesSaveOperation PreProc + +IptablesHiLink iptablesTable Statement +IptablesHiLink iptablesTarget Statement +IptablesHiLink iptablesBuiltinChain Type + +IptablesHiLink iptablesCommand Operator + +IptablesHiLink iptablesModuleName Type +IptablesHiLink iptablesModuleType Type + +IptablesHiLink iptablesOperator Operator +IptablesHiLink iptablesParam Identifier +IptablesHiLink iptablesLongParam Identifier + +IptablesHiLink iptablesNumber Constant + +if s:Iptables_SpecialDelimiters != 0 + IptablesHiLink iptablesMask PreProc + IptablesHiLink iptablesDelimiter Delimiter +else " s:Iptables_SpecialDelimiters == 0 + IptablesHiLink iptablesMask Special + IptablesHiLink iptablesDelimiter None +endif + +IptablesHiLink iptablesString Constant + +IptablesHiLink iptablesComment Comment +IptablesHiLink iptablesBadComment Error +IptablesHiLink iptablesTodo Todo + +"============================================================================ +" Section: Clean Up {{{1 +"============================================================================ + +delcommand IptablesHiLink + +let b:current_syntax = "iptables" + +if main_syntax == 'iptables' + unlet main_syntax +endif + +" Autoconfigure vim indentation settings +" vim:ts=4:sw=4:sts=4:fdm=marker:iskeyword+=- |