include/linux/netfilter/nfnetlink.h

   1 #ifndef _NFNETLINK_H
   2 #define _NFNETLINK_H
   3 #include <linux/types.h>
   4 #include <linux/netfilter/nfnetlink_compat.h>
   5
   6 enum nfnetlink_groups {
   7         NFNLGRP_NONE,
   8 #define NFNLGRP_NONE                    NFNLGRP_NONE
   9         NFNLGRP_CONNTRACK_NEW,
  10 #define NFNLGRP_CONNTRACK_NEW           NFNLGRP_CONNTRACK_NEW
  11         NFNLGRP_CONNTRACK_UPDATE,
  12 #define NFNLGRP_CONNTRACK_UPDATE        NFNLGRP_CONNTRACK_UPDATE
  13         NFNLGRP_CONNTRACK_DESTROY,
  14 #define NFNLGRP_CONNTRACK_DESTROY       NFNLGRP_CONNTRACK_DESTROY
  15         NFNLGRP_CONNTRACK_EXP_NEW,
  16 #define NFNLGRP_CONNTRACK_EXP_NEW       NFNLGRP_CONNTRACK_EXP_NEW
  17         NFNLGRP_CONNTRACK_EXP_UPDATE,
  18 #define NFNLGRP_CONNTRACK_EXP_UPDATE    NFNLGRP_CONNTRACK_EXP_UPDATE
  19         NFNLGRP_CONNTRACK_EXP_DESTROY,
  20 #define NFNLGRP_CONNTRACK_EXP_DESTROY   NFNLGRP_CONNTRACK_EXP_DESTROY
  21         __NFNLGRP_MAX,
  22 };
  23 #define NFNLGRP_MAX     (__NFNLGRP_MAX - 1)
  24
  25 /* General form of address family dependent message.
  26  */
  27 struct nfgenmsg {
  28         __u8  nfgen_family;             /* AF_xxx */
  29         __u8  version;          /* nfnetlink version */
  30         __be16    res_id;               /* resource id */
  31 };
  32
  33 #define NFNETLINK_V0    0
  34
  35 /* netfilter netlink message types are split in two pieces:
  36  * 8 bit subsystem, 8bit operation.
  37  */
  38
  39 #define NFNL_SUBSYS_ID(x)       ((x & 0xff00) >> 8)
  40 #define NFNL_MSG_TYPE(x)        (x & 0x00ff)
  41
  42 /* No enum here, otherwise __stringify() trick of MODULE_ALIAS_NFNL_SUBSYS()
  43  * won't work anymore */
  44 #define NFNL_SUBSYS_NONE                0
  45 #define NFNL_SUBSYS_CTNETLINK           1
  46 #define NFNL_SUBSYS_CTNETLINK_EXP       2
  47 #define NFNL_SUBSYS_QUEUE               3
  48 #define NFNL_SUBSYS_ULOG                4
  49 #define NFNL_SUBSYS_OSF                 5
  50 #define NFNL_SUBSYS_IPSET               6
  51 #define NFNL_SUBSYS_ACCT                7
  52 #define NFNL_SUBSYS_CTNETLINK_TIMEOUT   8
  53 #define NFNL_SUBSYS_CTHELPER            9
  54 #define NFNL_SUBSYS_COUNT               10
  55
  56 #ifdef __KERNEL__
  57
  58 #include <linux/netlink.h>
  59 #include <linux/capability.h>
  60 #include <net/netlink.h>
  61
  62 struct nfnl_callback {
  63         int (*call)(struct sock *nl, struct sk_buff *skb,
  64                     const struct nlmsghdr *nlh,
  65                     const struct nlattr * const cda[]);
  66         int (*call_rcu)(struct sock *nl, struct sk_buff *skb,
  67                     const struct nlmsghdr *nlh,
  68                     const struct nlattr * const cda[]);
  69         const struct nla_policy *policy;        /* netlink attribute policy */
  70         const u_int16_t attr_count;             /* number of nlattr's */
  71 };
  72
  73 struct nfnetlink_subsystem {
  74         const char *name;
  75         __u8 subsys_id;                 /* nfnetlink subsystem ID */
  76         __u8 cb_count;                  /* number of callbacks */
  77         const struct nfnl_callback *cb; /* callback for individual types */
  78 };
  79
  80 extern int nfnetlink_subsys_register(const struct nfnetlink_subsystem *n);
  81 extern int nfnetlink_subsys_unregister(const struct nfnetlink_subsystem *n);
  82
  83 extern int nfnetlink_has_listeners(struct net *net, unsigned int group);
  84 extern int nfnetlink_send(struct sk_buff *skb, struct net *net, u32 pid, unsigned int group,
  85                           int echo, gfp_t flags);
  86 extern int nfnetlink_set_err(struct net *net, u32 pid, u32 group, int error);
  87 extern int nfnetlink_unicast(struct sk_buff *skb, struct net *net, u_int32_t pid, int flags);
  88
  89 extern void nfnl_lock(void);
  90 extern void nfnl_unlock(void);
  91
  92 #define MODULE_ALIAS_NFNL_SUBSYS(subsys) \
  93         MODULE_ALIAS("nfnetlink-subsys-" __stringify(subsys))
  94
  95 #endif  /* __KERNEL__ */
  96 #endif  /* _NFNETLINK_H */