src: add notrack support

This patch adds the notrack statement, to skip connection tracking for
certain packets.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 6 insertions, 0 deletions

diff --git a/src/parser_bison.y b/src/parser_bison.y
index 74f24a52..91955c18 100644
--- a/src/parser_bison.y
+++ b/src/parser_bison.y
@@ -425,6 +425,8 @@ static void location_update(struct location *loc, struct location *rhs, int n)
 %token XML			"xml"
 %token JSON			"json"
 
+%token NOTRACK			"notrack"
+
 %type <string>			identifier type_identifier string comment_spec
 %destructor { xfree($$); }	identifier type_identifier string comment_spec
 
@@ -2564,6 +2566,10 @@ meta_stmt		:	META	meta_key	SET	expr
 
 				$$ = meta_stmt_alloc(&@$, key, $4);
 			}
+			|	NOTRACK
+			{
+				$$ = notrack_stmt_alloc(&@$);
+			}
 			;
 
 offset_opt		:	/* empty */	{ $$ = 0; }