summaryrefslogtreecommitdiffstats
path: root/src/rule.c
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2013-08-22 17:26:31 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2013-08-27 00:38:01 +0200
commit2e27f2468ea69bd4ef15b7582e5d0ebe85c80da8 (patch)
tree22ca140eb616714782908c7843559a6981afb9b9 /src/rule.c
parentfacb3d65ae911418ee10ca2fd1c1ed9a9749cf3b (diff)
src: allow to specify the base chain type
This patch allows you to specify the type of the base chain, eg. add table mangle add chain mangle OUTPUT { type route hook NF_INET_LOCAL_OUT 0; } The chain type determines the semantics of the chain, we currently have three types: * filter, used for plain packet filtering. * nat, it only sees the first packet of the flow. * route, which is the equivalent of the iptables mangle table, that triggers a re-route if there is any change in some of the packet header fields, eg. IP TOS/DSCP, or the packet metainformation, eg. mark. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/rule.c')
-rw-r--r--src/rule.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/src/rule.c b/src/rule.c
index 83686240..fb0387c3 100644
--- a/src/rule.c
+++ b/src/rule.c
@@ -250,9 +250,8 @@ static void chain_print(const struct chain *chain)
printf("\tchain %s {\n", chain->handle.chain);
if (chain->hooknum) {
- printf("\t\t hook %s %u;\n",
- hooknum2str(chain->hooknum),
- chain->priority);
+ printf("\t\t type %s hook %s %u;\n", chain->type,
+ hooknum2str(chain->hooknum), chain->priority);
}
list_for_each_entry(rule, &chain->rules, list) {
printf("\t\t");