Patchwork [RFC,1/4] netfilter: Define FAILOPEN flag

login
register
mail settings
Submitter Krishna Kumar
Date May 7, 2012, 6:03 a.m.
Message ID <20120507060349.19528.65110.sendpatchset@localhost.localdomain>
Download mbox | patch
Permalink /patch/157223/
State Superseded
Headers show

Comments

Krishna Kumar - May 7, 2012, 6:03 a.m.
Define a new verdict: FAIL_OPEN

Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
---
 include/linux/netfilter.h |    1 +
 1 file changed, 1 insertion(+)


--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Patch

diff -ruNp org/include/linux/netfilter.h new/include/linux/netfilter.h
--- org/include/linux/netfilter.h	2012-05-07 09:20:53.763813313 +0530
+++ new/include/linux/netfilter.h	2012-05-07 09:20:53.738752088 +0530
@@ -30,6 +30,7 @@ 
 #define NF_VERDICT_MASK 0x000000ff
 
 /* extra verdict flags have mask 0x0000ff00 */
+#define NF_VERDICT_FLAG_FAIL_OPEN	0x00004000
 #define NF_VERDICT_FLAG_QUEUE_BYPASS	0x00008000
 
 /* queue number (NF_QUEUE) or errno (NF_DROP) */