From 2e27f2468ea69bd4ef15b7582e5d0ebe85c80da8 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Thu, 22 Aug 2013 17:26:31 +0200 Subject: src: allow to specify the base chain type This patch allows you to specify the type of the base chain, eg. add table mangle add chain mangle OUTPUT { type route hook NF_INET_LOCAL_OUT 0; } The chain type determines the semantics of the chain, we currently have three types: * filter, used for plain packet filtering. * nat, it only sees the first packet of the flow. * route, which is the equivalent of the iptables mangle table, that triggers a re-route if there is any change in some of the packet header fields, eg. IP TOS/DSCP, or the packet metainformation, eg. mark. Signed-off-by: Pablo Neira Ayuso --- src/rule.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'src/rule.c') diff --git a/src/rule.c b/src/rule.c index 83686240..fb0387c3 100644 --- a/src/rule.c +++ b/src/rule.c @@ -250,9 +250,8 @@ static void chain_print(const struct chain *chain) printf("\tchain %s {\n", chain->handle.chain); if (chain->hooknum) { - printf("\t\t hook %s %u;\n", - hooknum2str(chain->hooknum), - chain->priority); + printf("\t\t type %s hook %s %u;\n", chain->type, + hooknum2str(chain->hooknum), chain->priority); } list_for_each_entry(rule, &chain->rules, list) { printf("\t\t"); -- cgit v1.2.3