2005-04-16 22:20:36 +00:00
|
|
|
#ifndef __LINUX_BRIDGE_NETFILTER_H
|
|
|
|
#define __LINUX_BRIDGE_NETFILTER_H
|
|
|
|
|
2012-10-13 09:46:48 +00:00
|
|
|
#include <uapi/linux/netfilter_bridge.h>
|
2015-04-02 12:31:41 +00:00
|
|
|
#include <linux/skbuff.h>
|
2005-04-16 22:20:36 +00:00
|
|
|
|
|
|
|
enum nf_br_hook_priorities {
|
|
|
|
NF_BR_PRI_FIRST = INT_MIN,
|
|
|
|
NF_BR_PRI_NAT_DST_BRIDGED = -300,
|
|
|
|
NF_BR_PRI_FILTER_BRIDGED = -200,
|
|
|
|
NF_BR_PRI_BRNF = 0,
|
|
|
|
NF_BR_PRI_NAT_DST_OTHER = 100,
|
|
|
|
NF_BR_PRI_FILTER_OTHER = 200,
|
|
|
|
NF_BR_PRI_NAT_SRC = 300,
|
|
|
|
NF_BR_PRI_LAST = INT_MAX,
|
|
|
|
};
|
|
|
|
|
2014-09-18 09:29:03 +00:00
|
|
|
#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
|
2005-04-16 22:20:36 +00:00
|
|
|
|
2015-09-16 01:04:18 +00:00
|
|
|
int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
|
2010-04-15 10:14:51 +00:00
|
|
|
|
2012-04-19 20:12:51 +00:00
|
|
|
static inline void br_drop_fake_rtable(struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
struct dst_entry *dst = skb_dst(skb);
|
|
|
|
|
|
|
|
if (dst && (dst->flags & DST_FAKE_RTABLE))
|
|
|
|
skb_dst_drop(skb);
|
|
|
|
}
|
|
|
|
|
2015-04-02 12:31:41 +00:00
|
|
|
static inline int nf_bridge_get_physinif(const struct sk_buff *skb)
|
|
|
|
{
|
2015-04-20 10:35:47 +00:00
|
|
|
struct nf_bridge_info *nf_bridge;
|
|
|
|
|
|
|
|
if (skb->nf_bridge == NULL)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
nf_bridge = skb->nf_bridge;
|
|
|
|
return nf_bridge->physindev ? nf_bridge->physindev->ifindex : 0;
|
2015-04-02 12:31:41 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static inline int nf_bridge_get_physoutif(const struct sk_buff *skb)
|
|
|
|
{
|
2015-04-20 10:35:47 +00:00
|
|
|
struct nf_bridge_info *nf_bridge;
|
|
|
|
|
|
|
|
if (skb->nf_bridge == NULL)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
nf_bridge = skb->nf_bridge;
|
|
|
|
return nf_bridge->physoutdev ? nf_bridge->physoutdev->ifindex : 0;
|
2015-04-02 12:31:41 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static inline struct net_device *
|
|
|
|
nf_bridge_get_physindev(const struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return skb->nf_bridge ? skb->nf_bridge->physindev : NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline struct net_device *
|
|
|
|
nf_bridge_get_physoutdev(const struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return skb->nf_bridge ? skb->nf_bridge->physoutdev : NULL;
|
|
|
|
}
|
2015-07-23 14:21:30 +00:00
|
|
|
|
|
|
|
static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return skb->nf_bridge && skb->nf_bridge->in_prerouting;
|
|
|
|
}
|
2006-08-30 00:48:17 +00:00
|
|
|
#else
|
2012-04-19 20:12:51 +00:00
|
|
|
#define br_drop_fake_rtable(skb) do { } while (0)
|
2015-07-23 14:21:30 +00:00
|
|
|
static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return false;
|
|
|
|
}
|
2005-04-16 22:20:36 +00:00
|
|
|
#endif /* CONFIG_BRIDGE_NETFILTER */
|
|
|
|
|
|
|
|
#endif
|