diff options
| author |   Patrick McHardy <kaber@trash.net> | 2014-02-05 15:03:38 +0000 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2014-02-06 09:44:10 +0100 |
| commit | cc4723ca316742891954efa346298e7c747c0d17 (patch) | |
| tree | 998eae9bbf8de6eeeb75c633921b8ab2e28cc258 /include | |
| parent | netfilter: nf_tables: add AF specific expression support (diff) | |
| download | linux-dev-cc4723ca316742891954efa346298e7c747c0d17.tar.xz linux-dev-cc4723ca316742891954efa346298e7c747c0d17.zip | |
netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
Currently the nft_reject module depends on symbols from ipv6. This is
wrong since no generic module should force IPv6 support to be loaded.
Split up the module into AF-specific and a generic part.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/net/netfilter/nft_reject.h | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/include/net/netfilter/nft_reject.h b/include/net/netfilter/nft_reject.h new file mode 100644 index 000000000000..ecda75945e77 --- /dev/null +++ b/include/net/netfilter/nft_reject.h @@ -0,0 +1,17 @@ +#ifndef _NFT_REJECT_H_ +#define _NFT_REJECT_H_ + +struct nft_reject { + enum nft_reject_types type:8; + u8 icmp_code; +}; + +extern const struct nla_policy nft_reject_policy[]; + +int nft_reject_init(const struct nft_ctx *ctx, + const struct nft_expr *expr, + const struct nlattr * const tb[]); + +int nft_reject_dump(struct sk_buff *skb, const struct nft_expr *expr); + +#endif |