netfilter
firewalling, NAT, and packet mangling for linux
 All Data Structures Namespaces Files Functions Variables Typedefs Enumerations Enumerator Macros Modules Pages
ip_tables.h File Reference
#include <linux/types.h>
#include <linux/netfilter_ipv4.h>
#include <linux/netfilter/x_tables.h>
#include <linux/netfilter/xt_tcpudp.h>
Include dependency graph for ip_tables.h:
This graph shows which files directly or indirectly include this file:

Data Structures

struct  ipt_ip
 
struct  ipt_entry
 
struct  ipt_icmp
 
struct  ipt_getinfo
 
struct  ipt_replace
 
struct  ipt_get_entries
 

Macros

#define IPT_FUNCTION_MAXNAMELEN   XT_FUNCTION_MAXNAMELEN
 
#define IPT_TABLE_MAXNAMELEN   XT_TABLE_MAXNAMELEN
 
#define ipt_match   xt_match
 
#define ipt_target   xt_target
 
#define ipt_table   xt_table
 
#define ipt_get_revision   xt_get_revision
 
#define ipt_entry_match   xt_entry_match
 
#define ipt_entry_target   xt_entry_target
 
#define ipt_standard_target   xt_standard_target
 
#define ipt_error_target   xt_error_target
 
#define ipt_counters   xt_counters
 
#define IPT_CONTINUE   XT_CONTINUE
 
#define IPT_RETURN   XT_RETURN
 
#define ipt_udp   xt_udp
 
#define ipt_tcp   xt_tcp
 
#define IPT_TCP_INV_SRCPT   XT_TCP_INV_SRCPT
 
#define IPT_TCP_INV_DSTPT   XT_TCP_INV_DSTPT
 
#define IPT_TCP_INV_FLAGS   XT_TCP_INV_FLAGS
 
#define IPT_TCP_INV_OPTION   XT_TCP_INV_OPTION
 
#define IPT_TCP_INV_MASK   XT_TCP_INV_MASK
 
#define IPT_UDP_INV_SRCPT   XT_UDP_INV_SRCPT
 
#define IPT_UDP_INV_DSTPT   XT_UDP_INV_DSTPT
 
#define IPT_UDP_INV_MASK   XT_UDP_INV_MASK
 
#define ipt_counters_info   xt_counters_info
 
#define IPT_STANDARD_TARGET   XT_STANDARD_TARGET
 
#define IPT_ERROR_TARGET   XT_ERROR_TARGET
 
#define IPT_MATCH_ITERATE(e, fn, args...)   XT_MATCH_ITERATE(struct ipt_entry, e, fn, ## args)
 
#define IPT_ENTRY_ITERATE(entries, size, fn, args...)   XT_ENTRY_ITERATE(struct ipt_entry, entries, size, fn, ## args)
 
#define IPT_F_FRAG   0x01 /* Set if rule is a fragment rule */
 
#define IPT_F_GOTO   0x02 /* Set if jump is a goto */
 
#define IPT_F_MASK   0x03 /* All possible flag bits mask. */
 
#define IPT_INV_VIA_IN   0x01 /* Invert the sense of IN IFACE. */
 
#define IPT_INV_VIA_OUT   0x02 /* Invert the sense of OUT IFACE */
 
#define IPT_INV_TOS   0x04 /* Invert the sense of TOS. */
 
#define IPT_INV_SRCIP   0x08 /* Invert the sense of SRC IP. */
 
#define IPT_INV_DSTIP   0x10 /* Invert the sense of DST OP. */
 
#define IPT_INV_FRAG   0x20 /* Invert the sense of FRAG. */
 
#define IPT_INV_PROTO   XT_INV_PROTO
 
#define IPT_INV_MASK   0x7F /* All possible flag bits mask. */
 
#define IPT_BASE_CTL   64
 
#define IPT_SO_SET_REPLACE   (IPT_BASE_CTL)
 
#define IPT_SO_SET_ADD_COUNTERS   (IPT_BASE_CTL + 1)
 
#define IPT_SO_SET_MAX   IPT_SO_SET_ADD_COUNTERS
 
#define IPT_SO_GET_INFO   (IPT_BASE_CTL)
 
#define IPT_SO_GET_ENTRIES   (IPT_BASE_CTL + 1)
 
#define IPT_SO_GET_REVISION_MATCH   (IPT_BASE_CTL + 2)
 
#define IPT_SO_GET_REVISION_TARGET   (IPT_BASE_CTL + 3)
 
#define IPT_SO_GET_MAX   IPT_SO_GET_REVISION_TARGET
 
#define IPT_ICMP_INV   0x01 /* Invert the sense of type/code test */
 

Macro Definition Documentation

#define IPT_BASE_CTL   64
#define IPT_CONTINUE   XT_CONTINUE
#define ipt_counters   xt_counters
#define ipt_counters_info   xt_counters_info
#define IPT_ENTRY_ITERATE (   entries,
  size,
  fn,
  args... 
)    XT_ENTRY_ITERATE(struct ipt_entry, entries, size, fn, ## args)
#define ipt_entry_match   xt_entry_match
#define ipt_entry_target   xt_entry_target
#define ipt_error_target   xt_error_target
#define IPT_ERROR_TARGET   XT_ERROR_TARGET
#define IPT_F_FRAG   0x01 /* Set if rule is a fragment rule */
#define IPT_F_GOTO   0x02 /* Set if jump is a goto */

Referenced by do_command4(), and print_rule4().

#define IPT_F_MASK   0x03 /* All possible flag bits mask. */
#define IPT_FUNCTION_MAXNAMELEN   XT_FUNCTION_MAXNAMELEN
#define ipt_get_revision   xt_get_revision
#define IPT_ICMP_INV   0x01 /* Invert the sense of type/code test */
#define IPT_INV_DSTIP   0x10 /* Invert the sense of DST OP. */

Referenced by do_command4(), and print_rule4().

#define IPT_INV_FRAG   0x20 /* Invert the sense of FRAG. */

Referenced by print_rule4().

#define IPT_INV_MASK   0x7F /* All possible flag bits mask. */
#define IPT_INV_PROTO   XT_INV_PROTO
#define IPT_INV_SRCIP   0x08 /* Invert the sense of SRC IP. */

Referenced by do_command4(), and print_rule4().

#define IPT_INV_TOS   0x04 /* Invert the sense of TOS. */
#define IPT_INV_VIA_IN   0x01 /* Invert the sense of IN IFACE. */
#define IPT_INV_VIA_OUT   0x02 /* Invert the sense of OUT IFACE */
#define ipt_match   xt_match
#define IPT_MATCH_ITERATE (   e,
  fn,
  args... 
)    XT_MATCH_ITERATE(struct ipt_entry, e, fn, ## args)

Referenced by print_rule4().

#define IPT_RETURN   XT_RETURN
#define IPT_SO_GET_ENTRIES   (IPT_BASE_CTL + 1)
#define IPT_SO_GET_INFO   (IPT_BASE_CTL)
#define IPT_SO_GET_MAX   IPT_SO_GET_REVISION_TARGET
#define IPT_SO_GET_REVISION_MATCH   (IPT_BASE_CTL + 2)

Referenced by nft_compatible_revision().

#define IPT_SO_GET_REVISION_TARGET   (IPT_BASE_CTL + 3)
#define IPT_SO_SET_ADD_COUNTERS   (IPT_BASE_CTL + 1)
#define IPT_SO_SET_MAX   IPT_SO_SET_ADD_COUNTERS
#define IPT_SO_SET_REPLACE   (IPT_BASE_CTL)
#define ipt_standard_target   xt_standard_target
#define IPT_STANDARD_TARGET   XT_STANDARD_TARGET
#define ipt_table   xt_table
#define IPT_TABLE_MAXNAMELEN   XT_TABLE_MAXNAMELEN
#define ipt_target   xt_target
#define ipt_tcp   xt_tcp
#define IPT_TCP_INV_DSTPT   XT_TCP_INV_DSTPT
#define IPT_TCP_INV_FLAGS   XT_TCP_INV_FLAGS
#define IPT_TCP_INV_MASK   XT_TCP_INV_MASK
#define IPT_TCP_INV_OPTION   XT_TCP_INV_OPTION
#define IPT_TCP_INV_SRCPT   XT_TCP_INV_SRCPT
#define ipt_udp   xt_udp
#define IPT_UDP_INV_DSTPT   XT_UDP_INV_DSTPT
#define IPT_UDP_INV_MASK   XT_UDP_INV_MASK
#define IPT_UDP_INV_SRCPT   XT_UDP_INV_SRCPT