include/linux/netfilter/xt_conntrack.h

   1 /* Header file for kernel module to match connection tracking information.
   2  * GPL (C) 2001  Marc Boucher (marc@mbsi.ca).
   3  */
   4
   5 #ifndef _XT_CONNTRACK_H
   6 #define _XT_CONNTRACK_H
   7
   8 #include <linux/netfilter/nf_conntrack_tuple_common.h>
   9 #include <linux/in.h>
  10
  11 #define XT_CONNTRACK_STATE_BIT(ctinfo) (1 << ((ctinfo)%IP_CT_IS_REPLY+1))
  12 #define XT_CONNTRACK_STATE_INVALID (1 << 0)
  13
  14 #define XT_CONNTRACK_STATE_SNAT (1 << (IP_CT_NUMBER + 1))
  15 #define XT_CONNTRACK_STATE_DNAT (1 << (IP_CT_NUMBER + 2))
  16 #define XT_CONNTRACK_STATE_UNTRACKED (1 << (IP_CT_NUMBER + 3))
  17
  18 /* flags, invflags: */
  19 #define XT_CONNTRACK_STATE      0x01
  20 #define XT_CONNTRACK_PROTO      0x02
  21 #define XT_CONNTRACK_ORIGSRC    0x04
  22 #define XT_CONNTRACK_ORIGDST    0x08
  23 #define XT_CONNTRACK_REPLSRC    0x10
  24 #define XT_CONNTRACK_REPLDST    0x20
  25 #define XT_CONNTRACK_STATUS     0x40
  26 #define XT_CONNTRACK_EXPIRES    0x80
  27
  28 /* This is exposed to userspace, so remains frozen in time. */
  29 struct ip_conntrack_old_tuple
  30 {
  31         struct {
  32                 __u32 ip;
  33                 union {
  34                         __u16 all;
  35                 } u;
  36         } src;
  37
  38         struct {
  39                 __u32 ip;
  40                 union {
  41                         __u16 all;
  42                 } u;
  43
  44                 /* The protocol. */
  45                 __u16 protonum;
  46         } dst;
  47 };
  48
  49 struct xt_conntrack_info
  50 {
  51         unsigned int statemask, statusmask;
  52
  53         struct ip_conntrack_old_tuple tuple[IP_CT_DIR_MAX];
  54         struct in_addr sipmsk[IP_CT_DIR_MAX], dipmsk[IP_CT_DIR_MAX];
  55
  56         unsigned long expires_min, expires_max;
  57
  58         /* Flags word */
  59         u_int8_t flags;
  60         /* Inverse flags */
  61         u_int8_t invflags;
  62 };
  63 #endif /*_XT_CONNTRACK_H*/