From 89f0ea845ef570e3e9c5eb35236c85d54f4dcd52 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Wed, 14 Mar 2018 15:14:48 +0100 Subject: src: synproxy support Signed-off-by: Pablo Neira Ayuso --- include/network.h | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'include/network.h') diff --git a/include/network.h b/include/network.h index ec9fadf..95aad82 100644 --- a/include/network.h +++ b/include/network.h @@ -231,6 +231,7 @@ enum nta_attr { NTA_LABELS, /* array of uint32_t (variable length) */ NTA_SNAT_IPV6, /* uint32_t * 4 */ NTA_DNAT_IPV6, /* uint32_t * 4 */ + NTA_SYNPROXY, /* struct nft_attr_synproxy */ NTA_MAX }; @@ -246,6 +247,12 @@ struct nta_attr_natseqadj { uint32_t repl_seq_offset_after; }; +struct nta_attr_synproxy { + uint32_t its; + uint32_t isn; + uint32_t tsoff; +}; + void ct2msg(const struct nf_conntrack *ct, struct nethdr *n); int msg2ct(struct nf_conntrack *ct, struct nethdr *n, size_t remain); -- cgit v1.2.3