On Wednesday 2008-10-15 04:10, KOVACS Krisztian wrote:
>Add user-space code for the TPROXY target.
>
>+++ b/include/linux/netfilter/xt_TPROXY.h
>@@ -0,0 +1,14 @@
>+#ifndef _XT_TPROXY_H_target
>+#define _XT_TPROXY_H_target
>+
>+/* TPROXY target is capable of marking the packet to perform
>+ * redirection. We can get rid of that whenever we get support for
>+ * mutliple targets in the same rule. */
>+struct xt_tproxy_target_info {
>+ u_int32_t mark_mask;
>+ u_int32_t mark_value;
>+ __be32 laddr;
>+ __be16 lport;
>+};
A bit of forward planning would not have been bad; like using a
"union nf_inet_addr laddr" for a future IPv6 expansion, since those
pesky structs (xt_mymodule) tend be quite fixed and when they change,
they require a new revision.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
