diff options
| author | Fernando Fernandez Mancera <fmancera@suse.de> | 2025-10-14 14:20:42 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2025-10-14 18:30:57 +0200 |
| commit | 376d60e345819b33c1ffafc27bf7dbe21457b9fc (patch) | |
| tree | a54c3f8582a435b39fb9576aca95aec1edf03227 /include/linux/netfilter | |
| parent | b9516b0a4dfb6e16e3e11c3024683a2df1ea09ab (diff) | |
meta: introduce meta ibrhwaddr support
Can be used in bridge prerouting hook to redirect the packet to the
receiving physical device for processing.
table bridge nat {
chain PREROUTING {
type filter hook prerouting priority 0; policy accept;
ether daddr de:ad:00:00:be:ef meta pkttype set host ether daddr set meta ibrhwaddr accept
}
}
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/linux/netfilter')
| -rw-r--r-- | include/linux/netfilter/nf_tables.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h index b38d4780..45d0b92b 100644 --- a/include/linux/netfilter/nf_tables.h +++ b/include/linux/netfilter/nf_tables.h @@ -949,6 +949,7 @@ enum nft_exthdr_attributes { * @NFT_META_SDIF: slave device interface index * @NFT_META_SDIFNAME: slave device interface name * @NFT_META_BRI_BROUTE: packet br_netfilter_broute bit + * @NFT_META_BRI_IIFHWADDR: packet input bridge interface ethernet address */ enum nft_meta_keys { NFT_META_LEN, @@ -989,6 +990,7 @@ enum nft_meta_keys { NFT_META_SDIFNAME, NFT_META_BRI_BROUTE, __NFT_META_IIFTYPE, + NFT_META_BRI_IIFHWADDR, }; /** |