netfilter_ipv4.h revision e309c5fa6adf7c48074a08126721838ad4ea2749 
1#ifndef __LINUX_IP_NETFILTER_H
2#define __LINUX_IP_NETFILTER_H
3
4/* IPv4-specific defines for netfilter.
5 * (C)1998 Rusty Russell -- This code is GPL.
6 */
7
8#include <linux/netfilter.h>
9
10/* only for userspace compatibility */
11/* IP Cache bits. */
12/* Src IP address. */
13#define NFC_IP_SRC		0x0001
14/* Dest IP address. */
15#define NFC_IP_DST		0x0002
16/* Input device. */
17#define NFC_IP_IF_IN		0x0004
18/* Output device. */
19#define NFC_IP_IF_OUT		0x0008
20/* TOS. */
21#define NFC_IP_TOS		0x0010
22/* Protocol. */
23#define NFC_IP_PROTO		0x0020
24/* IP options. */
25#define NFC_IP_OPTIONS		0x0040
26/* Frag & flags. */
27#define NFC_IP_FRAG		0x0080
28
29/* Per-protocol information: only matters if proto match. */
30/* TCP flags. */
31#define NFC_IP_TCPFLAGS		0x0100
32/* Source port. */
33#define NFC_IP_SRC_PT		0x0200
34/* Dest port. */
35#define NFC_IP_DST_PT		0x0400
36/* Something else about the proto */
37#define NFC_IP_PROTO_UNKNOWN	0x2000
38
39/* IP Hooks */
40/* After promisc drops, checksum checks. */
41#define NF_IP_PRE_ROUTING	0
42/* If the packet is destined for this box. */
43#define NF_IP_LOCAL_IN		1
44/* If the packet is destined for another interface. */
45#define NF_IP_FORWARD		2
46/* Packets coming from a local process. */
47#define NF_IP_LOCAL_OUT		3
48/* Packets about to hit the wire. */
49#define NF_IP_POST_ROUTING	4
50#define NF_IP_NUMHOOKS		5
51
52enum nf_ip_hook_priorities {
53	NF_IP_PRI_FIRST = INT_MIN,
54	NF_IP_PRI_CONNTRACK_DEFRAG = -400,
55	NF_IP_PRI_RAW = -300,
56	NF_IP_PRI_SELINUX_FIRST = -225,
57	NF_IP_PRI_CONNTRACK = -200,
58	NF_IP_PRI_MANGLE = -150,
59	NF_IP_PRI_NAT_DST = -100,
60	NF_IP_PRI_FILTER = 0,
61	NF_IP_PRI_NAT_SRC = 100,
62	NF_IP_PRI_SELINUX_LAST = 225,
63	NF_IP_PRI_CONNTRACK_HELPER = INT_MAX - 2,
64	NF_IP_PRI_NAT_SEQ_ADJUST = INT_MAX - 1,
65	NF_IP_PRI_CONNTRACK_CONFIRM = INT_MAX,
66	NF_IP_PRI_LAST = INT_MAX,
67};
68
69/* Arguments for setsockopt SOL_IP: */
70/* 2.0 firewalling went from 64 through 71 (and +256, +512, etc). */
71/* 2.2 firewalling (+ masq) went from 64 through 76 */
72/* 2.4 firewalling went 64 through 67. */
73#define SO_ORIGINAL_DST 80
74
75
76#endif /*__LINUX_IP_NETFILTER_H*/
77