diff options
| author | green <green@FreeBSD.org> | 2004-10-03 00:26:35 +0000 |
|---|---|---|
| committer | green <green@FreeBSD.org> | 2004-10-03 00:26:35 +0000 |
| commit | 4f70622005bf8214002abf3a3dcd4f7614f2dd59 (patch) | |
| tree | 1f56ba6706068a376e7a3a3579fc28b31fa13cd0 /sys/netinet/ip_fw.h | |
| parent | 4454a09917934bccea925f619fa53ec38b25a5d7 (diff) | |
| download | FreeBSD-src-4f70622005bf8214002abf3a3dcd4f7614f2dd59.zip FreeBSD-src-4f70622005bf8214002abf3a3dcd4f7614f2dd59.tar.gz | |
Add support to IPFW for classification based on "diverted" status
(that is, input via a divert socket).
Diffstat (limited to 'sys/netinet/ip_fw.h')
| -rw-r--r-- | sys/netinet/ip_fw.h | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/sys/netinet/ip_fw.h b/sys/netinet/ip_fw.h index 943b505..15ce84b 100644 --- a/sys/netinet/ip_fw.h +++ b/sys/netinet/ip_fw.h @@ -135,6 +135,7 @@ enum ipfw_opcodes { /* arguments (4 byte each) */ O_ANTISPOOF, /* none */ O_JAIL, /* u32 = id */ O_ALTQ, /* u32 = altq classif. qid */ + O_DIVERTED, /* arg1=bitmap (1:loop, 2:out) */ O_LAST_OPCODE /* not an opcode! */ }; @@ -415,9 +416,11 @@ typedef struct _ipfw_table { */ #ifdef _KERNEL -#define IP_FW_PORT_DYNT_FLAG 0x10000 -#define IP_FW_PORT_TEE_FLAG 0x20000 -#define IP_FW_PORT_DENY_FLAG 0x40000 +#define IP_FW_PORT_DYNT_FLAG 0x00010000 +#define IP_FW_PORT_TEE_FLAG 0x00020000 +#define IP_FW_PORT_DENY_FLAG 0x00040000 +#define IP_FW_DIVERT_LOOPBACK_FLAG 0x00080000 +#define IP_FW_DIVERT_OUTPUT_FLAG 0x00100000 /* * Arguments for calling ipfw_chk() and dummynet_io(). We put them |
