Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
tjh.dev
kernel
os
linux
1#ifndef __LINUX_BRIDGE_NETFILTER_H
2#define __LINUX_BRIDGE_NETFILTER_H
3
4/* bridge-specific defines for netfilter.
5 */
6
7#include <linux/netfilter.h>
8#include <linux/if_ether.h>
9#include <linux/if_vlan.h>
10
11/* Bridge Hooks */
12/* After promisc drops, checksum checks. */
13#define NF_BR_PRE_ROUTING 0
14/* If the packet is destined for this box. */
15#define NF_BR_LOCAL_IN 1
16/* If the packet is destined for another interface. */
17#define NF_BR_FORWARD 2
18/* Packets coming from a local process. */
19#define NF_BR_LOCAL_OUT 3
20/* Packets about to hit the wire. */
21#define NF_BR_POST_ROUTING 4
22/* Not really a hook, but used for the ebtables broute table */
23#define NF_BR_BROUTING 5
24#define NF_BR_NUMHOOKS 6
25
26#ifdef __KERNEL__
27
28enum nf_br_hook_priorities {
29 NF_BR_PRI_FIRST = INT_MIN,
30 NF_BR_PRI_NAT_DST_BRIDGED = -300,
31 NF_BR_PRI_FILTER_BRIDGED = -200,
32 NF_BR_PRI_BRNF = 0,
33 NF_BR_PRI_NAT_DST_OTHER = 100,
34 NF_BR_PRI_FILTER_OTHER = 200,
35 NF_BR_PRI_NAT_SRC = 300,
36 NF_BR_PRI_LAST = INT_MAX,
37};
38
39#ifdef CONFIG_BRIDGE_NETFILTER
40
41#define BRNF_PKT_TYPE 0x01
42#define BRNF_BRIDGED_DNAT 0x02
43#define BRNF_DONT_TAKE_PARENT 0x04
44#define BRNF_BRIDGED 0x08
45#define BRNF_NF_BRIDGE_PREROUTING 0x10
46
47
48/* Only used in br_forward.c */
49extern int nf_bridge_copy_header(struct sk_buff *skb);
50static inline int nf_bridge_maybe_copy_header(struct sk_buff *skb)
51{
52 if (skb->nf_bridge)
53 return nf_bridge_copy_header(skb);
54 return 0;
55}
56
57/* This is called by the IP fragmenting code and it ensures there is
58 * enough room for the encapsulating header (if there is one). */
59static inline int nf_bridge_pad(const struct sk_buff *skb)
60{
61 return (skb->nf_bridge && skb->protocol == htons(ETH_P_8021Q))
62 ? VLAN_HLEN : 0;
63}
64
65struct bridge_skb_cb {
66 union {
67 __be32 ipv4;
68 } daddr;
69};
70
71#else
72#define nf_bridge_maybe_copy_header(skb) (0)
73#define nf_bridge_pad(skb) (0)
74#endif /* CONFIG_BRIDGE_NETFILTER */
75
76#endif /* __KERNEL__ */
77#endif