1 #ifndef __LINUX_IP_NETFILTER_H
2 #define __LINUX_IP_NETFILTER_H
4 /* IPv4-specific defines for netfilter.
5 * (C)1998 Rusty Russell -- This code is GPL.
8 #include <linux/netfilter.h>
10 /* only for userspace compatibility */
14 #define NFC_IP_SRC 0x0001
15 /* Dest IP address. */
16 #define NFC_IP_DST 0x0002
18 #define NFC_IP_IF_IN 0x0004
20 #define NFC_IP_IF_OUT 0x0008
22 #define NFC_IP_TOS 0x0010
24 #define NFC_IP_PROTO 0x0020
26 #define NFC_IP_OPTIONS 0x0040
28 #define NFC_IP_FRAG 0x0080
30 /* Per-protocol information: only matters if proto match. */
32 #define NFC_IP_TCPFLAGS 0x0100
34 #define NFC_IP_SRC_PT 0x0200
36 #define NFC_IP_DST_PT 0x0400
37 /* Something else about the proto */
38 #define NFC_IP_PROTO_UNKNOWN 0x2000
39 #endif /* ! __KERNEL__ */
41 /* Cone NAT, Otherwise Symmetric NAT */
42 #define NFC_IP_CONE_NAT 0x0800
43 #define NFC_IP_CONE_NAT_ALTERED 0x1000
46 /* After promisc drops, checksum checks. */
47 #define NF_IP_PRE_ROUTING 0
48 /* If the packet is destined for this box. */
49 #define NF_IP_LOCAL_IN 1
50 /* If the packet is destined for another interface. */
51 #define NF_IP_FORWARD 2
52 /* Packets coming from a local process. */
53 #define NF_IP_LOCAL_OUT 3
54 /* Packets about to hit the wire. */
55 #define NF_IP_POST_ROUTING 4
56 #define NF_IP_NUMHOOKS 5
58 enum nf_ip_hook_priorities
{
59 NF_IP_PRI_FIRST
= INT_MIN
,
60 NF_IP_PRI_CONNTRACK_DEFRAG
= -400,
62 NF_IP_PRI_SELINUX_FIRST
= -225,
63 NF_IP_PRI_CONNTRACK
= -200,
64 NF_IP_PRI_MANGLE
= -150,
65 NF_IP_PRI_NAT_DST
= -100,
67 NF_IP_PRI_NAT_SRC
= 100,
68 NF_IP_PRI_SELINUX_LAST
= 225,
69 NF_IP_PRI_CONNTRACK_HELPER
= INT_MAX
- 2,
70 NF_IP_PRI_NAT_SEQ_ADJUST
= INT_MAX
- 1,
71 NF_IP_PRI_CONNTRACK_CONFIRM
= INT_MAX
,
72 NF_IP_PRI_LAST
= INT_MAX
,
75 /* Arguments for setsockopt SOL_IP: */
76 /* 2.0 firewalling went from 64 through 71 (and +256, +512, etc). */
77 /* 2.2 firewalling (+ masq) went from 64 through 76 */
78 /* 2.4 firewalling went 64 through 67. */
79 #define SO_ORIGINAL_DST 80
82 extern int ip_route_me_harder(struct sk_buff
**pskb
, unsigned addr_type
);
83 extern int ip_xfrm_me_harder(struct sk_buff
**pskb
);
84 extern __sum16
nf_ip_checksum(struct sk_buff
*skb
, unsigned int hook
,
85 unsigned int dataoff
, u_int8_t protocol
);
88 #endif /*__LINUX_IP_NETFILTER_H*/