Signed-off-by: Ander Juaristi <a@xxxxxxxxxxxx> --- include/linux/netfilter/nf_tables.h | 6 ++++++ src/expr/meta.c | 5 ++++- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h index 1bf4346..0a6bc7f 100644 --- a/include/linux/netfilter/nf_tables.h +++ b/include/linux/netfilter/nf_tables.h @@ -794,6 +794,9 @@ enum nft_exthdr_attributes { * @NFT_META_SECPATH: boolean, secpath_exists (!!skb->sp) * @NFT_META_IIFKIND: packet input interface kind name (dev->rtnl_link_ops->kind) * @NFT_META_OIFKIND: packet output interface kind name (dev->rtnl_link_ops->kind) + * @NFT_META_TIME: a UNIX timestamp + * @NFT_META_TIME_DAY: day of week + * @NFT_META_TIME_HOUR: hour of day */ enum nft_meta_keys { NFT_META_LEN, @@ -824,6 +827,9 @@ enum nft_meta_keys { NFT_META_SECPATH, NFT_META_IIFKIND, NFT_META_OIFKIND, + NFT_META_TIME, + NFT_META_TIME_DAY, + NFT_META_TIME_HOUR, }; /** diff --git a/src/expr/meta.c b/src/expr/meta.c index f1984f6..c2ac72e 100644 --- a/src/expr/meta.c +++ b/src/expr/meta.c @@ -22,7 +22,7 @@ #include <libnftnl/rule.h> #ifndef NFT_META_MAX -#define NFT_META_MAX (NFT_META_OIFKIND + 1) +#define NFT_META_MAX (NFT_META_TIME_HOUR + 1) #endif struct nftnl_expr_meta { @@ -161,6 +161,9 @@ static const char *meta_key2str_array[NFT_META_MAX] = { [NFT_META_SECPATH] = "secpath", [NFT_META_IIFKIND] = "iifkind", [NFT_META_OIFKIND] = "oifkind", + [NFT_META_TIME] = "time", + [NFT_META_TIME_DAY] = "day", + [NFT_META_TIME_HOUR] = "hour", }; static const char *meta_key2str(uint8_t key) -- 2.17.1