History

netfilter: nft_meta_bridge: Add NFT_META_BRI_IIFVPROTO support

This patch allows you to match on bridge vlan protocol, eg. nft add rule bridge firewall zones counter meta ibrvproto 0x8100

wenxu committed 7 years ago

Commit 2a3a93e1 parent 31aed462 files · +14 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -796,6 +796,7 @@ enum nft_exthdr_attributes { · 795 unmodified lines
796 * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind)796 * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind)
797 * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind)797 * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind)
798 * @NFT_META_BRI_IIFPVID: packet input bridge port pvid798 * @NFT_META_BRI_IIFPVID: packet input bridge port pvid
799 * @NFT_META_BRI_IIFVPROTO: packet input bridge vlan proto
799 */800 */
800enum nft_meta_keys {801enum nft_meta_keys {
801 NFT_META_LEN,802 NFT_META_LEN,
@@ -827,6 +828,7 @@ enum nft_meta_keys { · 25 unmodified lines
827 NFT_META_IIFKIND,828 NFT_META_IIFKIND,
828 NFT_META_OIFKIND,829 NFT_META_OIFKIND,
829 NFT_META_BRI_IIFPVID,830 NFT_META_BRI_IIFPVID,
831 NFT_META_BRI_IIFVPROTO,
830};832};
831 833
832/**834/**