summaryrefslogtreecommitdiffstats
path: root/include/libnetfilter_queue/linux_nfnetlink_queue.h
diff options
context:
space:
mode:
authorKrishna Kumar <krkumar2@in.ibm.com>2012-06-06 00:59:00 +0000
committerPablo Neira Ayuso <pablo@netfilter.org>2012-07-14 15:57:33 +0200
commit8b6ab7a3a503be66216db7c046646fcd15c28771 (patch)
tree0ce1bdee55fbd95ea20d1f0b2563eae72770c4af /include/libnetfilter_queue/linux_nfnetlink_queue.h
parent2c481c1fd73bb744957b2e5c5161c7a0804ab2e4 (diff)
src: implement API to set per-queue flags
Implement API to set per-queue flags. This is initially used to implement fail-open support in NFQUEUE. [ Pablo mangled this patch to bump LIBVERSION as well ] Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/libnetfilter_queue/linux_nfnetlink_queue.h')
-rw-r--r--include/libnetfilter_queue/linux_nfnetlink_queue.h7
1 files changed, 7 insertions, 0 deletions
diff --git a/include/libnetfilter_queue/linux_nfnetlink_queue.h b/include/libnetfilter_queue/linux_nfnetlink_queue.h
index 6b4f86d..58c8ca5 100644
--- a/include/libnetfilter_queue/linux_nfnetlink_queue.h
+++ b/include/libnetfilter_queue/linux_nfnetlink_queue.h
@@ -87,8 +87,15 @@ enum nfqnl_attr_config {
NFQA_CFG_CMD, /* nfqnl_msg_config_cmd */
NFQA_CFG_PARAMS, /* nfqnl_msg_config_params */
NFQA_CFG_QUEUE_MAXLEN, /* u_int32_t */
+ NFQA_CFG_MASK, /* identify which flags to change */
+ NFQA_CFG_FLAGS, /* value of these flags (__u32) */
__NFQA_CFG_MAX
};
#define NFQA_CFG_MAX (__NFQA_CFG_MAX-1)
+/* Flags/options for NFQA_CFG_FLAGS */
+#define NFQA_CFG_F_FAIL_OPEN (1 << 0)
+#define NFQA_CFG_F_CONNTRACK (1 << 1)
+#define NFQA_CFG_F_MAX (1 << 2)
+
#endif /* _NFNETLINK_QUEUE_H */