diff options
author | David S. Miller <davem@davemloft.net> | 2011-02-02 15:24:48 -0800 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2011-02-02 15:24:48 -0800 |
commit | 8fe73503fae8cb8f00c80dd6444c1ddcd19257bd (patch) | |
tree | 39cc6d38a628c445da7d52c006df6930a2c58411 /include/linux/netfilter/xt_set.h | |
parent | ipv4: Rename fib_hash_* locals in fib_semantics.c (diff) | |
parent | netfilter: xtables: add device group match (diff) | |
download | linux-dev-8fe73503fae8cb8f00c80dd6444c1ddcd19257bd.tar.xz linux-dev-8fe73503fae8cb8f00c80dd6444c1ddcd19257bd.zip |
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6
Diffstat (limited to 'include/linux/netfilter/xt_set.h')
-rw-r--r-- | include/linux/netfilter/xt_set.h | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/include/linux/netfilter/xt_set.h b/include/linux/netfilter/xt_set.h new file mode 100644 index 000000000000..081f1ded2842 --- /dev/null +++ b/include/linux/netfilter/xt_set.h @@ -0,0 +1,56 @@ +#ifndef _XT_SET_H +#define _XT_SET_H + +#include <linux/types.h> +#include <linux/netfilter/ipset/ip_set.h> + +/* Revision 0 interface: backward compatible with netfilter/iptables */ + +/* + * Option flags for kernel operations (xt_set_info_v0) + */ +#define IPSET_SRC 0x01 /* Source match/add */ +#define IPSET_DST 0x02 /* Destination match/add */ +#define IPSET_MATCH_INV 0x04 /* Inverse matching */ + +struct xt_set_info_v0 { + ip_set_id_t index; + union { + __u32 flags[IPSET_DIM_MAX + 1]; + struct { + __u32 __flags[IPSET_DIM_MAX]; + __u8 dim; + __u8 flags; + } compat; + } u; +}; + +/* match and target infos */ +struct xt_set_info_match_v0 { + struct xt_set_info_v0 match_set; +}; + +struct xt_set_info_target_v0 { + struct xt_set_info_v0 add_set; + struct xt_set_info_v0 del_set; +}; + +/* Revision 1: current interface to netfilter/iptables */ + +struct xt_set_info { + ip_set_id_t index; + __u8 dim; + __u8 flags; +}; + +/* match and target infos */ +struct xt_set_info_match { + struct xt_set_info match_set; +}; + +struct xt_set_info_target { + struct xt_set_info add_set; + struct xt_set_info del_set; +}; + +#endif /*_XT_SET_H*/ |