diff options
author | Krishna Kumar <krkumar2@in.ibm.com> | 2012-06-06 00:59:00 +0000 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-07-14 15:57:33 +0200 |
commit | 8b6ab7a3a503be66216db7c046646fcd15c28771 (patch) | |
tree | 0ce1bdee55fbd95ea20d1f0b2563eae72770c4af /src/libnetfilter_queue.c | |
parent | 2c481c1fd73bb744957b2e5c5161c7a0804ab2e4 (diff) |
src: implement API to set per-queue flags
Implement API to set per-queue flags. This is initially used
to implement fail-open support in NFQUEUE.
[ Pablo mangled this patch to bump LIBVERSION as well ]
Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/libnetfilter_queue.c')
-rw-r--r-- | src/libnetfilter_queue.c | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/src/libnetfilter_queue.c b/src/libnetfilter_queue.c index d57a523..dcfc36d 100644 --- a/src/libnetfilter_queue.c +++ b/src/libnetfilter_queue.c @@ -602,6 +602,48 @@ int nfq_set_mode(struct nfq_q_handle *qh, } /** + * nfq_set_queue_flags - set flags (options) for the kernel queue + * \param qh Netfilter queue handle obtained by call to nfq_create_queue(). + * \param mask specifies which flag bits to modify + * \param flag bitmask of flags + * + * Here's a little code snippet to show how to use this API: + * \verbatim + uint32_t flags = NFQA_CFG_F_FAIL_OPEN; + uint32_t mask = NFQA_CFG_F_FAIL_OPEN; + + printf("Enabling fail-open on this q\n"); + err = nfq_set_queue_flags(qh, mask, flags); + + printf("Disabling fail-open on this q\n"); + flags &= ~NFQA_CFG_F_FAIL_OPEN; + err = nfq_set_queue_flags(qh, mask, flags); +\endverbatim + * \return -1 on error with errno set appropriately; =0 otherwise. + */ +int nfq_set_queue_flags(struct nfq_q_handle *qh, + uint32_t mask, uint32_t flags) +{ + union { + char buf[NFNL_HEADER_LEN + +NFA_LENGTH(sizeof(mask) + +NFA_LENGTH(sizeof(flags)))]; + struct nlmsghdr nmh; + } u; + + mask = htonl(mask); + flags = htonl(flags); + + nfnl_fill_hdr(qh->h->nfnlssh, &u.nmh, 0, AF_UNSPEC, qh->id, + NFQNL_MSG_CONFIG, NLM_F_REQUEST|NLM_F_ACK); + + nfnl_addattr32(&u.nmh, sizeof(u), NFQA_CFG_FLAGS, flags); + nfnl_addattr32(&u.nmh, sizeof(u), NFQA_CFG_MASK, mask); + + return nfnl_query(qh->h->nfnlh, &u.nmh); +} + +/** * nfq_set_queue_maxlen - Set kernel queue maximum length parameter * \param qh Netfilter queue handle obtained by call to nfq_create_queue(). * \param queuelen the length of the queue |