1 #ifndef __LINUX_NETFILTER_H
2 #define __LINUX_NETFILTER_H
4 #include <linux/types.h>
6 #include <linux/sysctl.h>
8 /* Responses from hook functions. */
15 #define NF_MAX_VERDICT NF_STOP
17 /* we overload the higher bits for encoding auxiliary data such as the queue
18 * number or errno values. Not nice, but better than additional function
20 #define NF_VERDICT_MASK 0x000000ff
22 /* extra verdict flags have mask 0x0000ff00 */
23 #define NF_VERDICT_FLAG_QUEUE_BYPASS 0x00008000
25 /* queue number (NF_QUEUE) or errno (NF_DROP) */
26 #define NF_VERDICT_QMASK 0xffff0000
27 #define NF_VERDICT_QBITS 16
29 #define NF_QUEUE_NR(x) ((((x) << 16) & NF_VERDICT_QMASK) | NF_QUEUE)
31 #define NF_DROP_ERR(x) (((-x) << 16) | NF_DROP)
33 /* only for userspace compatibility */
34 /* Generic cache responses from hook functions.
35 <= 0x2000 is used for protocol-flags. */
36 #define NFC_UNKNOWN 0x4000
37 #define NFC_ALTERED 0x8000
39 /* NF_VERDICT_BITS should be 8 now, but userspace might break if this changes */
40 #define NF_VERDICT_BITS 16
69 #endif /*__LINUX_NETFILTER_H*/