History

netfilter: nft_meta_bridge: add NFT_META_BRI_IIFPVID support

This patch allows you to match on the bridge port pvid, eg. nft add rule bridge firewall zones counter meta ibrpvid 10

wenxu committed 7 years ago

Commit c54c7c61 parent 7582f5b2 files · +17 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -795,6 +795,7 @@ enum nft_exthdr_attributes { · 794 unmodified lines
795 * @NFT_META_SECPATH: boolean, secpath_exists (!!skb->sp)795 * @NFT_META_SECPATH: boolean, secpath_exists (!!skb->sp)
796 * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind)796 * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind)
797 * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind)797 * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind)
798 * @NFT_META_BRI_IIFPVID: packet input bridge port pvid
798 */799 */
799enum nft_meta_keys {800enum nft_meta_keys {
800 NFT_META_LEN,801 NFT_META_LEN,
@@ -825,6 +826,7 @@ enum nft_meta_keys { · 24 unmodified lines
825 NFT_META_SECPATH,826 NFT_META_SECPATH,
826 NFT_META_IIFKIND,827 NFT_META_IIFKIND,
827 NFT_META_OIFKIND,828 NFT_META_OIFKIND,
829 NFT_META_BRI_IIFPVID,
828};830};
829 831
830/**832/**