History

netfilter: nft_meta_bridge: Add NFT_META_BRI_IIFVPROTO support

This patch allows you to match on bridge vlan protocol, eg. nft add rule bridge firewall zones counter meta ibrvproto 0x8100

wenxu committed 7 years ago

Commit 2a3a93e1 parent 31aed462 files · +14 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -796,6 +796,7 @@ enum nft_exthdr_attributes { · 795 unmodified lines
796796 * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind)
797797 * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind)
798798 * @NFT_META_BRI_IIFPVID: packet input bridge port pvid
799+ * @NFT_META_BRI_IIFVPROTO: packet input bridge vlan proto
799800 */
800801 enum nft_meta_keys {
801802 NFT_META_LEN,
@@ -827,6 +828,7 @@ enum nft_meta_keys { · 25 unmodified lines
827828 NFT_META_IIFKIND,
828829 NFT_META_OIFKIND,
829830 NFT_META_BRI_IIFPVID,
831+ NFT_META_BRI_IIFVPROTO,
830832 };
831833
832834 /**