Extend high-level API for netlink BSF to add negative logic

This patch introduces nfct_filter_set_logic() to set the filtering
logic which results in a more flexible solution.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 5 insertions, 0 deletions

diff --git a/include/internal.h b/include/internal.h
index 33b0dcd..9dc33f2 100644
--- a/include/internal.h
+++ b/include/internal.h
@@ -185,6 +185,11 @@ struct nfct_filter {
 	 */
 
 	/*
+	 * filter logic: use positive or negative logic
+	 */
+	enum nfct_filter_logic logic[NFCT_FILTER_MAX];
+
+	/*
 	 * This the layer 4 protocol map for filtering.
 	 */
 	u_int32_t l4proto_map[IPPROTO_MAX/32];