netfilter: nft_ct: Add support to set the connmark
authorKristian Evensen <kristian.evensen@gmail.com>
Tue, 7 Jan 2014 15:43:54 +0000 (16:43 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 9 Jan 2014 18:07:44 +0000 (19:07 +0100)
commitc4ede3d3821a732120fd671846c2606a1eb4e8b3
tree5f36dcf17d27abb86778eba8b072d811d3c901ab
parent9638f33ecf7e1b7eb844603c1137bc3468902c17
netfilter: nft_ct: Add support to set the connmark

This patch adds kernel support for setting properties of tracked
connections. Currently, only connmark is supported. One use-case
for this feature is to provide the same functionality as
-j CONNMARK --save-mark in iptables.

Some restructuring was needed to implement the set op. The new
structure follows that of nft_meta.

Signed-off-by: Kristian Evensen <kristian.evensen@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_ct.c