1 #ifndef __LINUX_IP_NETFILTER_H
2 #define __LINUX_IP_NETFILTER_H
4 /* IPv4-specific defines for netfilter.
5 * (C)1998 Rusty Russell -- This code is GPL.
8 #include <linux/netfilter.h>
10 /* only for userspace compatibility */
14 #define NFC_IP_SRC 0x0001
15 /* Dest IP address. */
16 #define NFC_IP_DST 0x0002
18 #define NFC_IP_IF_IN 0x0004
20 #define NFC_IP_IF_OUT 0x0008
22 #define NFC_IP_TOS 0x0010
24 #define NFC_IP_PROTO 0x0020
26 #define NFC_IP_OPTIONS 0x0040
28 #define NFC_IP_FRAG 0x0080
30 /* Per-protocol information: only matters if proto match. */
32 #define NFC_IP_TCPFLAGS 0x0100
34 #define NFC_IP_SRC_PT 0x0200
36 #define NFC_IP_DST_PT 0x0400
37 /* Something else about the proto */
38 #define NFC_IP_PROTO_UNKNOWN 0x2000
41 /* After promisc drops, checksum checks. */
42 #define NF_IP_PRE_ROUTING 0
43 /* If the packet is destined for this box. */
44 #define NF_IP_LOCAL_IN 1
45 /* If the packet is destined for another interface. */
46 #define NF_IP_FORWARD 2
47 /* Packets coming from a local process. */
48 #define NF_IP_LOCAL_OUT 3
49 /* Packets about to hit the wire. */
50 #define NF_IP_POST_ROUTING 4
51 #define NF_IP_NUMHOOKS 5
52 //#endif /* ! __KERNEL__ */
54 #ifdef CONFIG_IP_NF_TARGET_CONE
55 /* Cone NAT, Otherwise Symmetric NAT */
56 #define NFC_IP_CONE_NAT 0x0800
57 #define NFC_IP_CONE_NAT_ALTERED 0x1000
58 #endif /* CONFIG_IP_NF_TARGET_CONE */
60 enum nf_ip_hook_priorities
{
61 NF_IP_PRI_FIRST
= INT_MIN
,
62 NF_IP_PRI_CONNTRACK_DEFRAG
= -400,
64 NF_IP_PRI_SELINUX_FIRST
= -225,
65 NF_IP_PRI_CONNTRACK
= -200,
66 NF_IP_PRI_MANGLE
= -150,
67 NF_IP_PRI_NAT_DST
= -100,
69 NF_IP_PRI_SECURITY
= 50,
70 NF_IP_PRI_NAT_SRC
= 100,
71 NF_IP_PRI_SELINUX_LAST
= 225,
72 NF_IP_PRI_CONNTRACK_CONFIRM
= INT_MAX
,
73 NF_IP_PRI_LAST
= INT_MAX
,
76 /* Arguments for setsockopt SOL_IP: */
77 /* 2.0 firewalling went from 64 through 71 (and +256, +512, etc). */
78 /* 2.2 firewalling (+ masq) went from 64 through 76 */
79 /* 2.4 firewalling went 64 through 67. */
80 #define SO_ORIGINAL_DST 80
83 extern int ip_route_me_harder(struct sk_buff
*skb
, unsigned addr_type
);
84 extern int ip_xfrm_me_harder(struct sk_buff
*skb
);
85 extern __sum16
nf_ip_checksum(struct sk_buff
*skb
, unsigned int hook
,
86 unsigned int dataoff
, u_int8_t protocol
);
89 #endif /*__LINUX_IP_NETFILTER_H*/