diff options
| author | Phil Sutter <phil@nwl.cc> | 2026-03-20 16:19:39 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2026-07-02 12:17:14 +0200 |
| commit | b010e2a4a9ac2bcd0db2c3a41877d59d827a8a80 (patch) | |
| tree | d59f688b7c5a9a17dafedda2ef3e478b7338ffa6 /include/linux | |
| parent | b8ea7da314c2efcb9c2f559ed65b7a36c869d68e (diff) | |
netfilter: nfnetlink_hook: Dump nat type chains
These chains are indirectly attached to the hook since they are
not called for packets belonging to an established connection.
Introduce NF_HOOK_OP_NAT to identify the container and dump attached
entries instead of the container itself.
Dump these entries with the dispatcher's priority value since their own
priority merely defines ordering within the dispatcher's list.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/linux')
| -rw-r--r-- | include/linux/netfilter.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/include/linux/netfilter.h b/include/linux/netfilter.h index efbbfa770d66..e99afc1414cd 100644 --- a/include/linux/netfilter.h +++ b/include/linux/netfilter.h @@ -93,6 +93,7 @@ enum nf_hook_ops_type { NF_HOOK_OP_NF_TABLES, NF_HOOK_OP_BPF, NF_HOOK_OP_NFT_FT, + NF_HOOK_OP_NAT, }; struct nf_hook_ops { @@ -140,6 +141,12 @@ struct nf_hook_entries { */ }; +struct nf_nat_lookup_hook_priv { + struct nf_hook_entries __rcu *entries; + + struct rcu_head rcu_head; +}; + #ifdef CONFIG_NETFILTER static inline struct nf_hook_ops **nf_hook_entries_get_hook_ops(const struct nf_hook_entries *e) { |