pfinet/linux-src/include/net/ip6_fw.h


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

#ifndef __NET_IP6_FW_H
#define __NET_IP6_FW_H

#define IP6_FW_LISTHEAD		0x1000
#define IP6_FW_ACCEPT		0x0001
#define IP6_FW_REJECT		0x0002

#define IP6_FW_DEBUG	2

#define IP6_FW_MSG_ADD		1
#define IP6_FW_MSG_DEL		2
#define IP6_FW_MSG_REPORT	3


/*
 *	Fast "hack" user interface
 */
struct ip6_fw_msg {
	struct in6_addr		dst;
	struct in6_addr		src;
	int			dst_len;
	int			src_len;
	int			action;
	int			policy;
	int			proto;
	union {
		struct {
			__u16	sport;
			__u16	dport;
		} transp;

		unsigned long	data;

		int		icmp_type;
	} u;

	int			msg_len;
};

#ifdef __KERNEL__

#include <net/flow.h>

struct ip6_fw_rule {
	struct flow_rule	flowr;
	struct ip6_fw_rule	*next;
	struct ip6_fw_rule	*prev;
	struct flowi		info;
	unsigned long		policy;
};

#endif

#endif