From b4775dec9f80b74c522edec8ebb4af5092e0e82b Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 13 Oct 2020 12:35:47 +0200 Subject: src: ingress inet support Add support for inet ingress chains. table inet filter { chain ingress { type filter hook ingress device "veth0" priority filter; policy accept; } chain input { type filter hook input priority filter; policy accept; } chain forward { type filter hook forward priority filter; policy accept; } } Signed-off-by: Pablo Neira Ayuso --- src/rule.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/rule.c') diff --git a/src/rule.c b/src/rule.c index d75b36c4..4719fd61 100644 --- a/src/rule.c +++ b/src/rule.c @@ -1019,6 +1019,8 @@ const char *hooknum2str(unsigned int family, unsigned int hooknum) return "postrouting"; case NF_INET_LOCAL_OUT: return "output"; + case NF_INET_INGRESS: + return "ingress"; default: break; }; -- cgit v1.2.3