include/linux/netfilter_bridge.h

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 #ifndef __LINUX_BRIDGE_NETFILTER_H
   3 #define __LINUX_BRIDGE_NETFILTER_H
   4
   5 #include <uapi/linux/netfilter_bridge.h>
   6 #include <linux/skbuff.h>
   7
   8 enum nf_br_hook_priorities {
   9         NF_BR_PRI_FIRST = INT_MIN,
  10         NF_BR_PRI_NAT_DST_BRIDGED = -300,
  11         NF_BR_PRI_FILTER_BRIDGED = -200,
  12         NF_BR_PRI_BRNF = 0,
  13         NF_BR_PRI_NAT_DST_OTHER = 100,
  14         NF_BR_PRI_FILTER_OTHER = 200,
  15         NF_BR_PRI_NAT_SRC = 300,
  16         NF_BR_PRI_LAST = INT_MAX,
  17 };
  18
  19 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
  20
  21 int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
  22
  23 static inline void br_drop_fake_rtable(struct sk_buff *skb)
  24 {
  25         struct dst_entry *dst = skb_dst(skb);
  26
  27         if (dst && (dst->flags & DST_FAKE_RTABLE))
  28                 skb_dst_drop(skb);
  29 }
  30
  31 static inline int nf_bridge_get_physinif(const struct sk_buff *skb)
  32 {
  33         struct nf_bridge_info *nf_bridge;
  34
  35         if (skb->nf_bridge == NULL)
  36                 return 0;
  37
  38         nf_bridge = skb->nf_bridge;
  39         return nf_bridge->physindev ? nf_bridge->physindev->ifindex : 0;
  40 }
  41
  42 static inline int nf_bridge_get_physoutif(const struct sk_buff *skb)
  43 {
  44         struct nf_bridge_info *nf_bridge;
  45
  46         if (skb->nf_bridge == NULL)
  47                 return 0;
  48
  49         nf_bridge = skb->nf_bridge;
  50         return nf_bridge->physoutdev ? nf_bridge->physoutdev->ifindex : 0;
  51 }
  52
  53 static inline struct net_device *
  54 nf_bridge_get_physindev(const struct sk_buff *skb)
  55 {
  56         return skb->nf_bridge ? skb->nf_bridge->physindev : NULL;
  57 }
  58
  59 static inline struct net_device *
  60 nf_bridge_get_physoutdev(const struct sk_buff *skb)
  61 {
  62         return skb->nf_bridge ? skb->nf_bridge->physoutdev : NULL;
  63 }
  64
  65 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb)
  66 {
  67         return skb->nf_bridge && skb->nf_bridge->in_prerouting;
  68 }
  69 #else
  70 #define br_drop_fake_rtable(skb)                do { } while (0)
  71 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb)
  72 {
  73         return false;
  74 }
  75 #endif /* CONFIG_BRIDGE_NETFILTER */
  76
  77 #endif