summaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorMáté Eckl <ecklm94@gmail.com>2018-07-20 09:38:24 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2018-07-30 14:10:24 +0200
commitc5a98195523416e4fa21fc649b4c61ef653eec32 (patch)
tree076afa7e238687e82c478add282a2a2058ff823a /include
parent18454d929ac351c0b52ad8454a3905663198658d (diff)
expr: Add tproxy support
Signed-off-by: Máté Eckl <ecklm94@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
-rw-r--r--include/libnftnl/expr.h6
-rw-r--r--include/linux/netfilter/nf_tables.h16
2 files changed, 22 insertions, 0 deletions
diff --git a/include/libnftnl/expr.h b/include/libnftnl/expr.h
index 219104e..141b04a 100644
--- a/include/libnftnl/expr.h
+++ b/include/libnftnl/expr.h
@@ -138,6 +138,12 @@ enum {
};
enum {
+ NFTNL_EXPR_TPROXY_FAMILY = NFTNL_EXPR_BASE,
+ NFTNL_EXPR_TPROXY_REG_ADDR,
+ NFTNL_EXPR_TPROXY_REG_PORT,
+};
+
+enum {
NFTNL_EXPR_LOOKUP_SREG = NFTNL_EXPR_BASE,
NFTNL_EXPR_LOOKUP_DREG,
NFTNL_EXPR_LOOKUP_SET,
diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h
index eef157d..4b3a95e 100644
--- a/include/linux/netfilter/nf_tables.h
+++ b/include/linux/netfilter/nf_tables.h
@@ -1226,6 +1226,22 @@ enum nft_nat_attributes {
#define NFTA_NAT_MAX (__NFTA_NAT_MAX - 1)
/**
+ * enum nft_tproxy_attributes - nf_tables tproxy expression netlink attributes
+ *
+ * NFTA_TPROXY_FAMILY: Target address family (NLA_U32: nft_registers)
+ * NFTA_TPROXY_REG_ADDR: Target address register (NLA_U32: nft_registers)
+ * NFTA_TPROXY_REG_PORT: Target port register (NLA_U32: nft_registers)
+ */
+enum nft_tproxy_attributes {
+ NFTA_TPROXY_UNSPEC,
+ NFTA_TPROXY_FAMILY,
+ NFTA_TPROXY_REG_ADDR,
+ NFTA_TPROXY_REG_PORT,
+ __NFTA_TPROXY_MAX
+};
+#define NFTA_TPROXY_MAX (__NFTA_TPROXY_MAX - 1)
+
+/**
* enum nft_masq_attributes - nf_tables masquerade expression attributes
*
* @NFTA_MASQ_FLAGS: NAT flags (see NF_NAT_RANGE_* in linux/netfilter/nf_nat.h) (NLA_U32)