- /*
- *
- * Flow based forwarding rules (usage: firewalling, etc)
- *
- */
- #ifndef _NET_FLOW_H
- #define _NET_FLOW_H
- struct flowi {
- int proto; /* {TCP, UDP, ICMP} */
- union {
- struct {
- __u32 daddr;
- __u32 saddr;
- } ip4_u;
- struct {
- struct in6_addr * daddr;
- struct in6_addr * saddr;
- __u32 flowlabel;
- } ip6_u;
- } nl_u;
- #define fl6_dst nl_u.ip6_u.daddr
- #define fl6_src nl_u.ip6_u.saddr
- #define fl6_flowlabel nl_u.ip6_u.flowlabel
- #define fl4_dst nl_u.ip4_u.daddr
- #define fl4_src nl_u.ip4_u.saddr
- int oif;
- union {
- struct {
- __u16 sport;
- __u16 dport;
- } ports;
- struct {
- __u8 type;
- __u8 code;
- } icmpt;
- unsigned long data;
- } uli_u;
- };
- #define FLOWR_NODECISION 0 /* rule not appliable to flow */
- #define FLOWR_SELECT 1 /* flow must follow this rule */
- #define FLOWR_CLEAR 2 /* priority level clears flow */
- #define FLOWR_ERROR 3
- struct fl_acc_args {
- int type;
- #define FL_ARG_FORWARD 1
- #define FL_ARG_ORIGIN 2
- union {
- struct sk_buff *skb;
- struct {
- struct sock *sk;
- struct flowi *flow;
- } fl_o;
- } fl_u;
- };
- struct pkt_filter {
- atomic_t refcnt;
- unsigned int offset;
- __u32 value;
- __u32 mask;
- struct pkt_filter *next;
- };
- #define FLR_INPUT 1
- #define FLR_OUTPUT 2
- struct flow_filter {
- int type;
- union {
- struct pkt_filter *filter;
- struct sock *sk;
- } u;
- };
- struct flow_rule {
- struct flow_rule_ops *ops;
- unsigned char private[0];
- };
- struct flow_rule_ops {
- int (*accept)(struct rt6_info *rt,
- struct rt6_info *rule,
- struct fl_acc_args *args,
- struct rt6_info **nrt);
- };
- #endif