From a6a2d0c9fd97196a98cdf5f1389cd64eae7974b9 Mon Sep 17 00:00:00 2001 From: Fernando Fernandez Mancera Date: Wed, 19 Jun 2019 19:53:50 +0200 Subject: src: add synproxy support Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso --- include/libnftnl/expr.h | 6 ++++++ include/linux/netfilter/nf_tables.h | 17 +++++++++++++++++ 2 files changed, 23 insertions(+) (limited to 'include') diff --git a/include/libnftnl/expr.h b/include/libnftnl/expr.h index b2f8d75..3e0f5b0 100644 --- a/include/libnftnl/expr.h +++ b/include/libnftnl/expr.h @@ -291,6 +291,12 @@ enum { NFTNL_EXPR_XFRM_SPNUM, }; +enum { + NFTNL_EXPR_SYNPROXY_MSS = NFTNL_EXPR_BASE, + NFTNL_EXPR_SYNPROXY_WSCALE, + NFTNL_EXPR_SYNPROXY_FLAGS, +}; + #ifdef __cplusplus } /* extern "C" */ #endif diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h index 5b1c380..4777331 100644 --- a/include/linux/netfilter/nf_tables.h +++ b/include/linux/netfilter/nf_tables.h @@ -953,6 +953,23 @@ enum nft_osf_attributes { }; #define NFTA_OSF_MAX (__NFTA_OSF_MAX - 1) +/** + * enum nft_synproxy_attributes - nf_tables synproxy expression + * netlink attributes + * + * @NFTA_SYNPROXY_MSS: mss value sent to the backend (NLA_U16) + * @NFTA_SYNPROXY_WSCALE: wscale value sent to the backend (NLA_U8) + * @NFTA_SYNPROXY_FLAGS: flags (NLA_U32) + */ +enum nft_synproxy_attributes { + NFTA_SYNPROXY_UNSPEC, + NFTA_SYNPROXY_MSS, + NFTA_SYNPROXY_WSCALE, + NFTA_SYNPROXY_FLAGS, + __NFTA_SYNPROXY_MAX, +}; +#define NFTA_SYNPROXY_MAX (__NFTA_SYNPROXY_MAX - 1) + /** * enum nft_ct_keys - nf_tables ct expression keys * -- cgit v1.2.3