diff options
author | Fernando Fernandez Mancera <ffmancera@riseup.net> | 2018-08-03 23:47:11 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-08-04 00:21:19 +0200 |
commit | 9f28b685b473b2424524d0443ef1e0ed8ba276de (patch) | |
tree | 14834b9e589da013b8b058b49beaf8a2b8ceae72 /include/linux/netfilter/nf_tables.h | |
parent | cdb5655ee44da4113d1ee72fbd6afa6ca4ffaa14 (diff) |
src: introduce passive OS fingerprint matching
Add support for "osf" expression. Example:
table ip foo {
chain bar {
type filter hook input priority 0; policy accept;
osf name "Linux" counter packets 3 bytes 132
}
}
Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/linux/netfilter/nf_tables.h')
-rw-r--r-- | include/linux/netfilter/nf_tables.h | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h index ea374ae6..63b90546 100644 --- a/include/linux/netfilter/nf_tables.h +++ b/include/linux/netfilter/nf_tables.h @@ -934,6 +934,18 @@ enum nft_socket_keys { #define NFT_SOCKET_MAX (__NFT_SOCKET_MAX - 1) /** + * enum nft_osf_attributes - nf_tables osf expression netlink attributes + * + * @NFTA_OSF_DREG: destination register (NLA_U32: nft_registers) + */ +enum nft_osf_attributes { + NFTA_OSF_UNSPEC, + NFTA_OSF_DREG, + __NFTA_OSF_MAX +}; +#define NFT_OSF_MAX (__NFTA_OSF_MAX - 1) + +/** * enum nft_ct_keys - nf_tables ct expression keys * * @NFT_CT_STATE: conntrack state (bitmask of enum ip_conntrack_info) |