History

netfilter: add inet ingress support

This patch adds the NF_INET_INGRESS pseudohook for the NFPROTO_INET family. This is a mapping this new hook to the existing NFPROTO_NETDEV and NF_NETDEV_INGRESS hook. The hook does not guarantee that packets are inet only, users must filter out non-ip traffic explicitly. This infrastructure makes it easier to support this new hook in nf_tables.

Pablo Neira Ayuso committed 6 years ago

Commit 60a38151 parent ddcfa712 files · +83 −21Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter.h+1−0
@@ -45,6 +45,7 @@ enum nf_inet_hooks { · 44 unmodified lines
45 NF_INET_FORWARD,45 NF_INET_FORWARD,
46 NF_INET_LOCAL_OUT,46 NF_INET_LOCAL_OUT,
47 NF_INET_POST_ROUTING,47 NF_INET_POST_ROUTING,
48 NF_INET_INGRESS,
48 NF_INET_NUMHOOKS49 NF_INET_NUMHOOKS
49};50};
50 51

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t