summaryrefslogtreecommitdiffstats
path: root/src/conntrack
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2020-10-28 20:55:30 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2020-10-29 11:11:44 +0100
commit60084c30d0f03869a558c2de33a95ede8c0b3aa9 (patch)
tree2ba1da9f099660067ed6b737186235f36d0591de /src/conntrack
parente73700b8b27c848ac753525e8b03c8bfaa06adac (diff)
conntrack: add flush filter command
The NFCT_Q_FLUSH command flushes both IPv4 and IPv6 conntrack tables. Add new command NFCT_Q_FLUSH_FILTER that allows to flush based on the family to retain backward compatibility on NFCT_Q_FLUSH. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/conntrack')
-rw-r--r--src/conntrack/api.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/conntrack/api.c b/src/conntrack/api.c
index 78d7d61..b7f64fb 100644
--- a/src/conntrack/api.c
+++ b/src/conntrack/api.c
@@ -831,6 +831,9 @@ __build_query_ct(struct nfnl_subsys_handle *ssh,
nfct_fill_hdr(req, IPCTNL_MSG_CT_DELETE, NLM_F_ACK, *family,
NFNETLINK_V0);
break;
+ case NFCT_Q_FLUSH_FILTER:
+ nfct_fill_hdr(req, IPCTNL_MSG_CT_DELETE, NLM_F_ACK, *family, 1);
+ break;
case NFCT_Q_DUMP:
nfct_fill_hdr(req, IPCTNL_MSG_CT_GET, NLM_F_DUMP, *family,
NFNETLINK_V0);