[mirror_ubuntu-bionic-kernel.git] / include / uapi / linux / netfilter / xt_set.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
#ifndef _XT_SET_H
#define _XT_SET_H

#include <linux/types.h>
#include <linux/netfilter/ipset/ip_set.h>

/* Revision 0 interface: backward compatible with netfilter/iptables */

/*
 * Option flags for kernel operations (xt_set_info_v0)
 */
#define IPSET_SRC		0x01	/* Source match/add */
#define IPSET_DST		0x02	/* Destination match/add */
#define IPSET_MATCH_INV		0x04	/* Inverse matching */

struct xt_set_info_v0 {
	ip_set_id_t index;
	union {
		__u32 flags[IPSET_DIM_MAX + 1];
		struct {
			__u32 __flags[IPSET_DIM_MAX];
			__u8 dim;
			__u8 flags;
		} compat;
	} u;
};

/* match and target infos */
struct xt_set_info_match_v0 {
	struct xt_set_info_v0 match_set;
};

struct xt_set_info_target_v0 {
	struct xt_set_info_v0 add_set;
	struct xt_set_info_v0 del_set;
};

/* Revision 1  match and target */

struct xt_set_info {
	ip_set_id_t index;
	__u8 dim;
	__u8 flags;
};

/* match and target infos */
struct xt_set_info_match_v1 {
	struct xt_set_info match_set;
};

struct xt_set_info_target_v1 {
	struct xt_set_info add_set;
	struct xt_set_info del_set;
};

/* Revision 2 target */

struct xt_set_info_target_v2 {
	struct xt_set_info add_set;
	struct xt_set_info del_set;
	__u32 flags;
	__u32 timeout;
};

/* Revision 3 match */

struct xt_set_info_match_v3 {
	struct xt_set_info match_set;
	struct ip_set_counter_match0 packets;
	struct ip_set_counter_match0 bytes;
	__u32 flags;
};

/* Revision 3 target */

struct xt_set_info_target_v3 {
	struct xt_set_info add_set;
	struct xt_set_info del_set;
	struct xt_set_info map_set;
	__u32 flags;
	__u32 timeout;
};

/* Revision 4 match */

struct xt_set_info_match_v4 {
	struct xt_set_info match_set;
	struct ip_set_counter_match packets;
	struct ip_set_counter_match bytes;
	__u32 flags;
};

#endif /*_XT_SET_H*/
Commit	Line	Data
6f52b16c	1	/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
d956798d JK	2	#ifndef _XT_SET_H
	3	#define _XT_SET_H
	4
e3e241b2	5	#include <linux/types.h>
d956798d JK	6	#include <linux/netfilter/ipset/ip_set.h>
	7
	8	/* Revision 0 interface: backward compatible with netfilter/iptables */
	9
	10	/*
	11	* Option flags for kernel operations (xt_set_info_v0)
	12	*/
	13	#define IPSET_SRC 0x01 /* Source match/add */
	14	#define IPSET_DST 0x02 /* Destination match/add */
	15	#define IPSET_MATCH_INV 0x04 /* Inverse matching */
	16
	17	struct xt_set_info_v0 {
	18	ip_set_id_t index;
	19	union {
	20	__u32 flags[IPSET_DIM_MAX + 1];
	21	struct {
	22	__u32 __flags[IPSET_DIM_MAX];
	23	__u8 dim;
	24	__u8 flags;
	25	} compat;
	26	} u;
	27	};
	28
	29	/* match and target infos */
	30	struct xt_set_info_match_v0 {
	31	struct xt_set_info_v0 match_set;
	32	};
	33
	34	struct xt_set_info_target_v0 {
	35	struct xt_set_info_v0 add_set;
	36	struct xt_set_info_v0 del_set;
	37	};
	38
ac8cc925	39	/* Revision 1 match and target */
d956798d JK	40
	41	struct xt_set_info {
	42	ip_set_id_t index;
	43	__u8 dim;
	44	__u8 flags;
	45	};
	46
	47	/* match and target infos */
ac8cc925	48	struct xt_set_info_match_v1 {
d956798d JK	49	struct xt_set_info match_set;
	50	};
	51
ac8cc925	52	struct xt_set_info_target_v1 {
d956798d JK	53	struct xt_set_info add_set;
	54	struct xt_set_info del_set;
	55	};
	56
ac8cc925 JK	57	/* Revision 2 target */
	58
	59	struct xt_set_info_target_v2 {
	60	struct xt_set_info add_set;
	61	struct xt_set_info del_set;
5276e16b JE	62	__u32 flags;
5276e16b JE	63	__u32 timeout;
ac8cc925 JK	64	};
ac8cc925 JK	65
6e01781d JK	66	/* Revision 3 match */
	67
	68	struct xt_set_info_match_v3 {
	69	struct xt_set_info match_set;
a51b9199 JK	70	struct ip_set_counter_match0 packets;
a51b9199 JK	71	struct ip_set_counter_match0 bytes;
6e01781d JK	72	__u32 flags;
	73	};
	74
76cea410 AD	75	/* Revision 3 target */
	76
	77	struct xt_set_info_target_v3 {
	78	struct xt_set_info add_set;
	79	struct xt_set_info del_set;
	80	struct xt_set_info map_set;
	81	__u32 flags;
	82	__u32 timeout;
	83	};
	84
a51b9199 JK	85	/* Revision 4 match */
	86
	87	struct xt_set_info_match_v4 {
	88	struct xt_set_info match_set;
	89	struct ip_set_counter_match packets;
	90	struct ip_set_counter_match bytes;
	91	__u32 flags;
	92	};
	93
d956798d	94	#endif /_XT_SET_H/