summaryrefslogtreecommitdiff
path: root/include/uapi/linux/netfilter_bridge.h
diff options
context:
space:
mode:
authorMáté Eckl <ecklm94@gmail.com>2018-08-03 14:36:13 +0300
committerPablo Neira Ayuso <pablo@netfilter.org>2018-08-03 22:15:09 +0300
commit94276fa8a2a4c08ccb2e9d55e88b95dc972ccea3 (patch)
tree3ff5e703ba7378d404433eec69a48dfc6675fee9 /include/uapi/linux/netfilter_bridge.h
parentaaecfdb5c5dd8bac2dfd112166844a9f2d5711f0 (diff)
downloadlinux-94276fa8a2a4c08ccb2e9d55e88b95dc972ccea3.tar.xz
netfilter: bridge: Expose nf_tables bridge hook priorities through uapi
Netfilter exposes standard hook priorities in case of ipv4, ipv6 and arp but not in case of bridge. This patch exposes the hook priority values of the bridge family (which are different from the formerly mentioned) via uapi so that they can be used by user-space applications just like the others. Signed-off-by: Máté Eckl <ecklm94@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/uapi/linux/netfilter_bridge.h')
-rw-r--r--include/uapi/linux/netfilter_bridge.h11
1 files changed, 11 insertions, 0 deletions
diff --git a/include/uapi/linux/netfilter_bridge.h b/include/uapi/linux/netfilter_bridge.h
index 12fb77633f83..156ccd089df1 100644
--- a/include/uapi/linux/netfilter_bridge.h
+++ b/include/uapi/linux/netfilter_bridge.h
@@ -26,4 +26,15 @@
#define NF_BR_BROUTING 5
#define NF_BR_NUMHOOKS 6
+enum nf_br_hook_priorities {
+ NF_BR_PRI_FIRST = INT_MIN,
+ NF_BR_PRI_NAT_DST_BRIDGED = -300,
+ NF_BR_PRI_FILTER_BRIDGED = -200,
+ NF_BR_PRI_BRNF = 0,
+ NF_BR_PRI_NAT_DST_OTHER = 100,
+ NF_BR_PRI_FILTER_OTHER = 200,
+ NF_BR_PRI_NAT_SRC = 300,
+ NF_BR_PRI_LAST = INT_MAX,
+};
+
#endif /* _UAPI__LINUX_BRIDGE_NETFILTER_H */