diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-11-24 21:26:27 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-01-31 22:32:18 +0100 |
commit | 6f137a2db3419e961e41eda28668cd99e8a3f2e2 (patch) | |
tree | a53b45962d657c1c02363d9b248aa944840a9134 /src/netlink_linearize.c | |
parent | 8a236ef68cd43af81fac10c5b58658514273a14e (diff) |
src: add fwd statement for netdev
This patch add support for the forward statement, only available at the
netdev family.
# nft add table netdev filter
# nft add chain netdev filter ingress { type filter hook ingress device eth0 priority 0\; }
# nft add rule netdev filter ingress fwd to dummy0
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/netlink_linearize.c')
-rw-r--r-- | src/netlink_linearize.c | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/src/netlink_linearize.c b/src/netlink_linearize.c index 0dc7f97e..63b3146c 100644 --- a/src/netlink_linearize.c +++ b/src/netlink_linearize.c @@ -969,6 +969,22 @@ static void netlink_gen_dup_stmt(struct netlink_linearize_ctx *ctx, nftnl_rule_add_expr(ctx->nlr, nle); } +static void netlink_gen_fwd_stmt(struct netlink_linearize_ctx *ctx, + const struct stmt *stmt) +{ + enum nft_registers sreg1; + struct nftnl_expr *nle; + + nle = alloc_nft_expr("fwd"); + + sreg1 = get_register(ctx, stmt->fwd.to); + netlink_gen_expr(ctx, stmt->fwd.to, sreg1); + netlink_put_register(nle, NFTNL_EXPR_FWD_SREG_DEV, sreg1); + release_register(ctx, stmt->fwd.to); + + nftnl_rule_add_expr(ctx->nlr, nle); +} + static void netlink_gen_queue_stmt(struct netlink_linearize_ctx *ctx, const struct stmt *stmt) { @@ -1069,6 +1085,8 @@ static void netlink_gen_stmt(struct netlink_linearize_ctx *ctx, return netlink_gen_ct_stmt(ctx, stmt); case STMT_SET: return netlink_gen_set_stmt(ctx, stmt); + case STMT_FWD: + return netlink_gen_fwd_stmt(ctx, stmt); default: BUG("unknown statement type %s\n", stmt->ops->name); } |