include/linux/netfilter_ipv6/ip6t_policy.h

   1 #ifndef _IP6T_POLICY_H
   2 #define _IP6T_POLICY_H
   3
   4 #define IP6T_POLICY_MAX_ELEM    4
   5
   6 enum ip6t_policy_flags
   7 {
   8         IP6T_POLICY_MATCH_IN            = 0x1,
   9         IP6T_POLICY_MATCH_OUT           = 0x2,
  10         IP6T_POLICY_MATCH_NONE          = 0x4,
  11         IP6T_POLICY_MATCH_STRICT        = 0x8,
  12 };
  13
  14 enum ip6t_policy_modes
  15 {
  16         IP6T_POLICY_MODE_TRANSPORT,
  17         IP6T_POLICY_MODE_TUNNEL
  18 };
  19
  20 struct ip6t_policy_spec
  21 {
  22         u_int8_t        saddr:1,
  23                         daddr:1,
  24                         proto:1,
  25                         mode:1,
  26                         spi:1,
  27                         reqid:1;
  28 };
  29
  30 struct ip6t_policy_elem
  31 {
  32         struct in6_addr saddr;
  33         struct in6_addr smask;
  34         struct in6_addr daddr;
  35         struct in6_addr dmask;
  36         u_int32_t       spi;
  37         u_int32_t       reqid;
  38         u_int8_t        proto;
  39         u_int8_t        mode;
  40
  41         struct ip6t_policy_spec match;
  42         struct ip6t_policy_spec invert;
  43 };
  44
  45 struct ip6t_policy_info
  46 {
  47         struct ip6t_policy_elem pol[IP6T_POLICY_MAX_ELEM];
  48         u_int16_t flags;
  49         u_int16_t len;
  50 };
  51
  52 #endif /* _IP6T_POLICY_H */