History

netfilter: nf_tables: add stateful object reference expression

This new expression allows us to refer to existing stateful objects from rules.

Pablo Neira Ayuso committed 9 years ago

Commit c97d22e1 parent 173705d4 files · +133 −0Browse files

Showing the changes to include/uapi/linux (1 of 4 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+14−0
@@ -1137,6 +1137,20 @@ enum nft_fwd_attributes { · 1136 unmodified lines
1137};1137};
1138#define NFTA_FWD_MAX (__NFTA_FWD_MAX - 1)1138#define NFTA_FWD_MAX (__NFTA_FWD_MAX - 1)
1139 1139
1140/**
1141 * enum nft_objref_attributes - nf_tables stateful object expression netlink attributes
1142 *
1143 * @NFTA_OBJREF_IMM_TYPE: object type for immediate reference (NLA_U32: nft_register)
1144 * @NFTA_OBJREF_IMM_NAME: object name for immediate reference (NLA_STRING)
1145 */
1146enum nft_objref_attributes {
1147 NFTA_OBJREF_UNSPEC,
1148 NFTA_OBJREF_IMM_TYPE,
1149 NFTA_OBJREF_IMM_NAME,
1150 __NFTA_OBJREF_MAX
1151};
1152#define NFTA_OBJREF_MAX (__NFTA_OBJREF_MAX - 1)
1153
1140/**1154/**
1141 * enum nft_gen_attributes - nf_tables ruleset generation attributes1155 * enum nft_gen_attributes - nf_tables ruleset generation attributes
1142 *1156 *