mirror of
https://github.com/strongswan/strongswan.git
synced 2025-11-29 00:00:17 -05:00
62 lines
1.8 KiB
Plaintext
62 lines
1.8 KiB
Plaintext
From 4553ba0130bb9f0aa266cc1e4c3288a52f34eed6 Mon Sep 17 00:00:00 2001
|
|
From: Martin Willi <martin@revosec.ch>
|
|
Date: Wed, 7 Apr 2010 11:40:15 +0200
|
|
Subject: [PATCH] Added XFRM hooks to iptables headers
|
|
|
|
---
|
|
include/linux/netfilter.h | 2 ++
|
|
include/linux/netfilter_ipv4.h | 6 +++++-
|
|
include/linux/netfilter_ipv6.h | 6 +++++-
|
|
3 files changed, 12 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/include/linux/netfilter.h b/include/linux/netfilter.h
|
|
index 2eb00b6..b692c67 100644
|
|
--- a/include/linux/netfilter.h
|
|
+++ b/include/linux/netfilter.h
|
|
@@ -35,6 +35,8 @@ enum nf_inet_hooks {
|
|
NF_INET_FORWARD,
|
|
NF_INET_LOCAL_OUT,
|
|
NF_INET_POST_ROUTING,
|
|
+ NF_INET_XFRM_IN,
|
|
+ NF_INET_XFRM_OUT,
|
|
NF_INET_NUMHOOKS
|
|
};
|
|
|
|
diff --git a/include/linux/netfilter_ipv4.h b/include/linux/netfilter_ipv4.h
|
|
index 4d7ba3e..28d3ca9 100644
|
|
--- a/include/linux/netfilter_ipv4.h
|
|
+++ b/include/linux/netfilter_ipv4.h
|
|
@@ -47,7 +47,11 @@
|
|
#define NF_IP_LOCAL_OUT 3
|
|
/* Packets about to hit the wire. */
|
|
#define NF_IP_POST_ROUTING 4
|
|
-#define NF_IP_NUMHOOKS 5
|
|
+/* Packets going into XFRM input transformation. */
|
|
+#define NF_IP_XFRM_IN 5
|
|
+/* Packets going into XFRM output transformation. */
|
|
+#define NF_IP_XFRM_OUT 6
|
|
+#define NF_IP_NUMHOOKS 7
|
|
|
|
enum nf_ip_hook_priorities {
|
|
NF_IP_PRI_FIRST = INT_MIN,
|
|
diff --git a/include/linux/netfilter_ipv6.h b/include/linux/netfilter_ipv6.h
|
|
index 7430b39..18590a5 100644
|
|
--- a/include/linux/netfilter_ipv6.h
|
|
+++ b/include/linux/netfilter_ipv6.h
|
|
@@ -51,7 +51,11 @@
|
|
#define NF_IP6_LOCAL_OUT 3
|
|
/* Packets about to hit the wire. */
|
|
#define NF_IP6_POST_ROUTING 4
|
|
-#define NF_IP6_NUMHOOKS 5
|
|
+/* Packets going into XFRM input transformation. */
|
|
+#define NF_IP6_XFRM_IN 5
|
|
+/* Packets going into XFRM output transformation. */
|
|
+#define NF_IP6_XFRM_OUT 6
|
|
+#define NF_IP6_NUMHOOKS 7
|
|
|
|
|
|
enum nf_ip6_hook_priorities {
|
|
--
|
|
1.6.3.3
|
|
|