1 /* Kernel module to match NFMARK values. */
3 /* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
11 #include <linux/module.h>
12 #include <linux/skbuff.h>
14 #include <linux/netfilter_ipv6/ip6t_mark.h>
15 #include <linux/netfilter_ipv6/ip6_tables.h>
17 MODULE_LICENSE("GPL");
18 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
19 MODULE_DESCRIPTION("ip6tables mark match");
22 match(const struct sk_buff
*skb
,
23 const struct net_device
*in
,
24 const struct net_device
*out
,
25 const void *matchinfo
,
30 const struct ip6t_mark_info
*info
= matchinfo
;
32 return ((skb
->nfmark
& info
->mask
) == info
->mark
) ^ info
->invert
;
36 checkentry(const char *tablename
,
37 const struct ip6t_ip6
*ip
,
39 unsigned int matchsize
,
40 unsigned int hook_mask
)
42 if (matchsize
!= IP6T_ALIGN(sizeof(struct ip6t_mark_info
)))
48 static struct ip6t_match mark_match
= {
51 .checkentry
= &checkentry
,
55 static int __init
init(void)
57 return ip6t_register_match(&mark_match
);
60 static void __exit
fini(void)
62 ip6t_unregister_match(&mark_match
);