Auto merge of #926 - faern:add-netfilter-fields, r=alexcrichton
Add netfilter/nftables fields Adding a few missing `NF_` constants to more complete the story around that header. Then most importantly add a lot of `NFT_` constants needed in my nftables library. Some were added back in #911, but as the library grew I realized I needed more constants.
This commit is contained in:
bors
commit
8650afb555
@ -245,6 +245,7 @@ fn main() {
|
||||
cfg.header("linux/netlink.h");
|
||||
cfg.header("linux/genetlink.h");
|
||||
cfg.header("linux/netfilter_ipv4.h");
|
||||
cfg.header("linux/netfilter_ipv6.h");
|
||||
cfg.header("linux/fs.h");
|
||||
}
|
||||
if !musl {
|
||||
|
||||
@ -148,6 +148,9 @@ cfg_if! {
|
||||
pub enum FILE {}
|
||||
pub enum fpos_t {} // TODO: fill this out with a struct
|
||||
|
||||
pub const INT_MIN: c_int = -2147483648;
|
||||
pub const INT_MAX: c_int = 2147483647;
|
||||
|
||||
extern {
|
||||
pub fn isalnum(c: c_int) -> c_int;
|
||||
pub fn isalpha(c: c_int) -> c_int;
|
||||
|
||||
@ -1001,6 +1001,7 @@ pub const O_TMPFILE: ::c_int = 0o20000000 | O_DIRECTORY;
|
||||
pub const MFD_CLOEXEC: ::c_uint = 0x0001;
|
||||
pub const MFD_ALLOW_SEALING: ::c_uint = 0x0002;
|
||||
|
||||
// linux/netfilter.h
|
||||
pub const NF_DROP: ::c_int = 0;
|
||||
pub const NF_ACCEPT: ::c_int = 1;
|
||||
pub const NF_STOLEN: ::c_int = 2;
|
||||
@ -1037,12 +1038,90 @@ pub const NFPROTO_IPV6: ::c_int = 10;
|
||||
pub const NFPROTO_DECNET: ::c_int = 12;
|
||||
pub const NFPROTO_NUMPROTO: ::c_int = 13;
|
||||
|
||||
// linux/netfilter_ipv4.h
|
||||
pub const NF_IP_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_IP_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_IP_FORWARD: ::c_int = 2;
|
||||
pub const NF_IP_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_IP_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_IP_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
pub const NF_IP_PRI_FIRST: ::c_int = ::INT_MIN;
|
||||
pub const NF_IP_PRI_CONNTRACK_DEFRAG: ::c_int = -400;
|
||||
pub const NF_IP_PRI_RAW: ::c_int = -300;
|
||||
pub const NF_IP_PRI_SELINUX_FIRST: ::c_int = -225;
|
||||
pub const NF_IP_PRI_CONNTRACK: ::c_int = -200;
|
||||
pub const NF_IP_PRI_MANGLE: ::c_int = -150;
|
||||
pub const NF_IP_PRI_NAT_DST: ::c_int = -100;
|
||||
pub const NF_IP_PRI_FILTER: ::c_int = 0;
|
||||
pub const NF_IP_PRI_SECURITY: ::c_int = 50;
|
||||
pub const NF_IP_PRI_NAT_SRC: ::c_int = 100;
|
||||
pub const NF_IP_PRI_SELINUX_LAST: ::c_int = 225;
|
||||
pub const NF_IP_PRI_CONNTRACK_HELPER: ::c_int = 300;
|
||||
pub const NF_IP_PRI_CONNTRACK_CONFIRM: ::c_int = ::INT_MAX;
|
||||
pub const NF_IP_PRI_LAST: ::c_int = ::INT_MAX;
|
||||
|
||||
// linux/netfilter_ipv6.h
|
||||
pub const NF_IP6_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_IP6_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_IP6_FORWARD: ::c_int = 2;
|
||||
pub const NF_IP6_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_IP6_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_IP6_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
pub const NF_IP6_PRI_FIRST: ::c_int = ::INT_MIN;
|
||||
pub const NF_IP6_PRI_CONNTRACK_DEFRAG: ::c_int = -400;
|
||||
pub const NF_IP6_PRI_RAW: ::c_int = -300;
|
||||
pub const NF_IP6_PRI_SELINUX_FIRST: ::c_int = -225;
|
||||
pub const NF_IP6_PRI_CONNTRACK: ::c_int = -200;
|
||||
pub const NF_IP6_PRI_MANGLE: ::c_int = -150;
|
||||
pub const NF_IP6_PRI_NAT_DST: ::c_int = -100;
|
||||
pub const NF_IP6_PRI_FILTER: ::c_int = 0;
|
||||
pub const NF_IP6_PRI_SECURITY: ::c_int = 50;
|
||||
pub const NF_IP6_PRI_NAT_SRC: ::c_int = 100;
|
||||
pub const NF_IP6_PRI_SELINUX_LAST: ::c_int = 225;
|
||||
pub const NF_IP6_PRI_CONNTRACK_HELPER: ::c_int = 300;
|
||||
pub const NF_IP6_PRI_LAST: ::c_int = ::INT_MAX;
|
||||
|
||||
// linux/netfilter/nf_tables.h
|
||||
pub const NFT_TABLE_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_CHAIN_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_SET_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_OBJ_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_USERDATA_MAXLEN: ::c_int = 256;
|
||||
|
||||
pub const NFT_REG_VERDICT: ::c_int = 0;
|
||||
pub const NFT_REG_1: ::c_int = 1;
|
||||
pub const NFT_REG_2: ::c_int = 2;
|
||||
pub const NFT_REG_3: ::c_int = 3;
|
||||
pub const NFT_REG_4: ::c_int = 4;
|
||||
pub const __NFT_REG_MAX: ::c_int = 5;
|
||||
pub const NFT_REG32_00: ::c_int = 8;
|
||||
pub const NFT_REG32_01: ::c_int = 9;
|
||||
pub const NFT_REG32_02: ::c_int = 10;
|
||||
pub const NFT_REG32_03: ::c_int = 11;
|
||||
pub const NFT_REG32_04: ::c_int = 12;
|
||||
pub const NFT_REG32_05: ::c_int = 13;
|
||||
pub const NFT_REG32_06: ::c_int = 14;
|
||||
pub const NFT_REG32_07: ::c_int = 15;
|
||||
pub const NFT_REG32_08: ::c_int = 16;
|
||||
pub const NFT_REG32_09: ::c_int = 17;
|
||||
pub const NFT_REG32_10: ::c_int = 18;
|
||||
pub const NFT_REG32_11: ::c_int = 19;
|
||||
pub const NFT_REG32_12: ::c_int = 20;
|
||||
pub const NFT_REG32_13: ::c_int = 21;
|
||||
pub const NFT_REG32_14: ::c_int = 22;
|
||||
pub const NFT_REG32_15: ::c_int = 23;
|
||||
|
||||
pub const NFT_REG_SIZE: ::c_int = 16;
|
||||
pub const NFT_REG32_SIZE: ::c_int = 4;
|
||||
|
||||
pub const NFT_CONTINUE: ::c_int = -1;
|
||||
pub const NFT_BREAK: ::c_int = -2;
|
||||
pub const NFT_JUMP: ::c_int = -3;
|
||||
pub const NFT_GOTO: ::c_int = -4;
|
||||
pub const NFT_RETURN: ::c_int = -5;
|
||||
|
||||
pub const NFT_MSG_NEWTABLE: ::c_int = 0;
|
||||
pub const NFT_MSG_GETTABLE: ::c_int = 1;
|
||||
pub const NFT_MSG_DELTABLE: ::c_int = 2;
|
||||
@ -1067,6 +1146,126 @@ pub const NFT_MSG_DELOBJ: ::c_int = 20;
|
||||
pub const NFT_MSG_GETOBJ_RESET: ::c_int = 21;
|
||||
pub const NFT_MSG_MAX: ::c_int = 22;
|
||||
|
||||
pub const NFT_SET_ANONYMOUS: ::c_int = 0x1;
|
||||
pub const NFT_SET_CONSTANT: ::c_int = 0x2;
|
||||
pub const NFT_SET_INTERVAL: ::c_int = 0x4;
|
||||
pub const NFT_SET_MAP: ::c_int = 0x8;
|
||||
pub const NFT_SET_TIMEOUT: ::c_int = 0x10;
|
||||
pub const NFT_SET_EVAL: ::c_int = 0x20;
|
||||
|
||||
pub const NFT_SET_POL_PERFORMANCE: ::c_int = 0;
|
||||
pub const NFT_SET_POL_MEMORY: ::c_int = 1;
|
||||
|
||||
pub const NFT_SET_ELEM_INTERVAL_END: ::c_int = 0x1;
|
||||
|
||||
pub const NFT_DATA_VALUE: ::c_uint = 0;
|
||||
pub const NFT_DATA_VERDICT: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_RESERVED_MASK: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_VALUE_MAXLEN: ::c_int = 64;
|
||||
|
||||
pub const NFT_BYTEORDER_NTOH: ::c_int = 0;
|
||||
pub const NFT_BYTEORDER_HTON: ::c_int = 1;
|
||||
|
||||
pub const NFT_CMP_EQ: ::c_int = 0;
|
||||
pub const NFT_CMP_NEQ: ::c_int = 1;
|
||||
pub const NFT_CMP_LT: ::c_int = 2;
|
||||
pub const NFT_CMP_LTE: ::c_int = 3;
|
||||
pub const NFT_CMP_GT: ::c_int = 4;
|
||||
pub const NFT_CMP_GTE: ::c_int = 5;
|
||||
|
||||
pub const NFT_RANGE_EQ: ::c_int = 0;
|
||||
pub const NFT_RANGE_NEQ: ::c_int = 1;
|
||||
|
||||
pub const NFT_LOOKUP_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_DYNSET_OP_ADD: ::c_int = 0;
|
||||
pub const NFT_DYNSET_OP_UPDATE: ::c_int = 1;
|
||||
|
||||
pub const NFT_DYNSET_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_PAYLOAD_LL_HEADER: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_NETWORK_HEADER: ::c_int = 1;
|
||||
pub const NFT_PAYLOAD_TRANSPORT_HEADER: ::c_int = 2;
|
||||
|
||||
pub const NFT_PAYLOAD_CSUM_NONE: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_CSUM_INET: ::c_int = 1;
|
||||
|
||||
pub const NFT_META_LEN: ::c_int = 0;
|
||||
pub const NFT_META_PROTOCOL: ::c_int = 1;
|
||||
pub const NFT_META_PRIORITY: ::c_int = 2;
|
||||
pub const NFT_META_MARK: ::c_int = 3;
|
||||
pub const NFT_META_IIF: ::c_int = 4;
|
||||
pub const NFT_META_OIF: ::c_int = 5;
|
||||
pub const NFT_META_IIFNAME: ::c_int = 6;
|
||||
pub const NFT_META_OIFNAME: ::c_int = 7;
|
||||
pub const NFT_META_IIFTYPE: ::c_int = 8;
|
||||
pub const NFT_META_OIFTYPE: ::c_int = 9;
|
||||
pub const NFT_META_SKUID: ::c_int = 10;
|
||||
pub const NFT_META_SKGID: ::c_int = 11;
|
||||
pub const NFT_META_NFTRACE: ::c_int = 12;
|
||||
pub const NFT_META_RTCLASSID: ::c_int = 13;
|
||||
pub const NFT_META_SECMARK: ::c_int = 14;
|
||||
pub const NFT_META_NFPROTO: ::c_int = 15;
|
||||
pub const NFT_META_L4PROTO: ::c_int = 16;
|
||||
pub const NFT_META_BRI_IIFNAME: ::c_int = 17;
|
||||
pub const NFT_META_BRI_OIFNAME: ::c_int = 18;
|
||||
pub const NFT_META_PKTTYPE: ::c_int = 19;
|
||||
pub const NFT_META_CPU: ::c_int = 20;
|
||||
pub const NFT_META_IIFGROUP: ::c_int = 21;
|
||||
pub const NFT_META_OIFGROUP: ::c_int = 22;
|
||||
pub const NFT_META_CGROUP: ::c_int = 23;
|
||||
pub const NFT_META_PRANDOM: ::c_int = 24;
|
||||
|
||||
pub const NFT_CT_STATE: ::c_int = 0;
|
||||
pub const NFT_CT_DIRECTION: ::c_int = 1;
|
||||
pub const NFT_CT_STATUS: ::c_int = 2;
|
||||
pub const NFT_CT_MARK: ::c_int = 3;
|
||||
pub const NFT_CT_SECMARK: ::c_int = 4;
|
||||
pub const NFT_CT_EXPIRATION: ::c_int = 5;
|
||||
pub const NFT_CT_HELPER: ::c_int = 6;
|
||||
pub const NFT_CT_L3PROTOCOL: ::c_int = 7;
|
||||
pub const NFT_CT_SRC: ::c_int = 8;
|
||||
pub const NFT_CT_DST: ::c_int = 9;
|
||||
pub const NFT_CT_PROTOCOL: ::c_int = 10;
|
||||
pub const NFT_CT_PROTO_SRC: ::c_int = 11;
|
||||
pub const NFT_CT_PROTO_DST: ::c_int = 12;
|
||||
pub const NFT_CT_LABELS: ::c_int = 13;
|
||||
pub const NFT_CT_PKTS: ::c_int = 14;
|
||||
pub const NFT_CT_BYTES: ::c_int = 15;
|
||||
|
||||
pub const NFT_LIMIT_PKTS: ::c_int = 0;
|
||||
pub const NFT_LIMIT_PKT_BYTES: ::c_int = 1;
|
||||
|
||||
pub const NFT_LIMIT_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_QUEUE_FLAG_BYPASS: ::c_int = 0x01;
|
||||
pub const NFT_QUEUE_FLAG_CPU_FANOUT: ::c_int = 0x02;
|
||||
pub const NFT_QUEUE_FLAG_MASK: ::c_int = 0x03;
|
||||
|
||||
pub const NFT_QUOTA_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_REJECT_ICMP_UNREACH: ::c_int = 0;
|
||||
pub const NFT_REJECT_TCP_RST: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_UNREACH: ::c_int = 2;
|
||||
|
||||
pub const NFT_REJECT_ICMPX_NO_ROUTE: ::c_int = 0;
|
||||
pub const NFT_REJECT_ICMPX_PORT_UNREACH: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_HOST_UNREACH: ::c_int = 2;
|
||||
pub const NFT_REJECT_ICMPX_ADMIN_PROHIBITED: ::c_int = 3;
|
||||
|
||||
pub const NFT_NAT_SNAT: ::c_int = 0;
|
||||
pub const NFT_NAT_DNAT: ::c_int = 1;
|
||||
|
||||
pub const NFT_TRACETYPE_UNSPEC: ::c_int = 0;
|
||||
pub const NFT_TRACETYPE_POLICY: ::c_int = 1;
|
||||
pub const NFT_TRACETYPE_RETURN: ::c_int = 2;
|
||||
pub const NFT_TRACETYPE_RULE: ::c_int = 3;
|
||||
|
||||
pub const NFT_NG_INCREMENTAL: ::c_int = 0;
|
||||
pub const NFT_NG_RANDOM: ::c_int = 1;
|
||||
|
||||
pub const IFF_TUN: ::c_int = 0x0001;
|
||||
pub const IFF_TAP: ::c_int = 0x0002;
|
||||
pub const IFF_NO_PI: ::c_int = 0x1000;
|
||||
|
||||
@ -700,6 +700,12 @@ pub const EHWPOISON: ::c_int = 168;
|
||||
pub const SIGEV_THREAD_ID: ::c_int = 4;
|
||||
pub const EPOLLWAKEUP: ::c_int = 0x20000000;
|
||||
|
||||
pub const NF_NETDEV_INGRESS: ::c_int = 0;
|
||||
pub const NF_NETDEV_NUMHOOKS: ::c_int = 1;
|
||||
|
||||
pub const NFPROTO_INET: ::c_int = 1;
|
||||
pub const NFPROTO_NETDEV: ::c_int = 5;
|
||||
|
||||
pub const NLA_ALIGNTO: ::c_int = 4;
|
||||
|
||||
pub const GENL_UNS_ADMIN_PERM: ::c_int = 0x10;
|
||||
@ -713,6 +719,38 @@ pub const NFT_SET_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_OBJ_MAXNAMELEN: ::c_int = 32;
|
||||
pub const NFT_USERDATA_MAXLEN: ::c_int = 256;
|
||||
|
||||
pub const NFT_REG_VERDICT: ::c_int = 0;
|
||||
pub const NFT_REG_1: ::c_int = 1;
|
||||
pub const NFT_REG_2: ::c_int = 2;
|
||||
pub const NFT_REG_3: ::c_int = 3;
|
||||
pub const NFT_REG_4: ::c_int = 4;
|
||||
pub const __NFT_REG_MAX: ::c_int = 5;
|
||||
pub const NFT_REG32_00: ::c_int = 8;
|
||||
pub const NFT_REG32_01: ::c_int = 9;
|
||||
pub const NFT_REG32_02: ::c_int = 10;
|
||||
pub const NFT_REG32_03: ::c_int = 11;
|
||||
pub const NFT_REG32_04: ::c_int = 12;
|
||||
pub const NFT_REG32_05: ::c_int = 13;
|
||||
pub const NFT_REG32_06: ::c_int = 14;
|
||||
pub const NFT_REG32_07: ::c_int = 15;
|
||||
pub const NFT_REG32_08: ::c_int = 16;
|
||||
pub const NFT_REG32_09: ::c_int = 17;
|
||||
pub const NFT_REG32_10: ::c_int = 18;
|
||||
pub const NFT_REG32_11: ::c_int = 19;
|
||||
pub const NFT_REG32_12: ::c_int = 20;
|
||||
pub const NFT_REG32_13: ::c_int = 21;
|
||||
pub const NFT_REG32_14: ::c_int = 22;
|
||||
pub const NFT_REG32_15: ::c_int = 23;
|
||||
|
||||
pub const NFT_REG_SIZE: ::c_int = 16;
|
||||
pub const NFT_REG32_SIZE: ::c_int = 4;
|
||||
|
||||
pub const NFT_CONTINUE: ::c_int = -1;
|
||||
pub const NFT_BREAK: ::c_int = -2;
|
||||
pub const NFT_JUMP: ::c_int = -3;
|
||||
pub const NFT_GOTO: ::c_int = -4;
|
||||
pub const NFT_RETURN: ::c_int = -5;
|
||||
|
||||
pub const NFT_MSG_NEWTABLE: ::c_int = 0;
|
||||
pub const NFT_MSG_GETTABLE: ::c_int = 1;
|
||||
pub const NFT_MSG_DELTABLE: ::c_int = 2;
|
||||
@ -737,6 +775,126 @@ pub const NFT_MSG_DELOBJ: ::c_int = 20;
|
||||
pub const NFT_MSG_GETOBJ_RESET: ::c_int = 21;
|
||||
pub const NFT_MSG_MAX: ::c_int = 22;
|
||||
|
||||
pub const NFT_SET_ANONYMOUS: ::c_int = 0x1;
|
||||
pub const NFT_SET_CONSTANT: ::c_int = 0x2;
|
||||
pub const NFT_SET_INTERVAL: ::c_int = 0x4;
|
||||
pub const NFT_SET_MAP: ::c_int = 0x8;
|
||||
pub const NFT_SET_TIMEOUT: ::c_int = 0x10;
|
||||
pub const NFT_SET_EVAL: ::c_int = 0x20;
|
||||
|
||||
pub const NFT_SET_POL_PERFORMANCE: ::c_int = 0;
|
||||
pub const NFT_SET_POL_MEMORY: ::c_int = 1;
|
||||
|
||||
pub const NFT_SET_ELEM_INTERVAL_END: ::c_int = 0x1;
|
||||
|
||||
pub const NFT_DATA_VALUE: ::c_uint = 0;
|
||||
pub const NFT_DATA_VERDICT: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_RESERVED_MASK: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_VALUE_MAXLEN: ::c_int = 64;
|
||||
|
||||
pub const NFT_BYTEORDER_NTOH: ::c_int = 0;
|
||||
pub const NFT_BYTEORDER_HTON: ::c_int = 1;
|
||||
|
||||
pub const NFT_CMP_EQ: ::c_int = 0;
|
||||
pub const NFT_CMP_NEQ: ::c_int = 1;
|
||||
pub const NFT_CMP_LT: ::c_int = 2;
|
||||
pub const NFT_CMP_LTE: ::c_int = 3;
|
||||
pub const NFT_CMP_GT: ::c_int = 4;
|
||||
pub const NFT_CMP_GTE: ::c_int = 5;
|
||||
|
||||
pub const NFT_RANGE_EQ: ::c_int = 0;
|
||||
pub const NFT_RANGE_NEQ: ::c_int = 1;
|
||||
|
||||
pub const NFT_LOOKUP_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_DYNSET_OP_ADD: ::c_int = 0;
|
||||
pub const NFT_DYNSET_OP_UPDATE: ::c_int = 1;
|
||||
|
||||
pub const NFT_DYNSET_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_PAYLOAD_LL_HEADER: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_NETWORK_HEADER: ::c_int = 1;
|
||||
pub const NFT_PAYLOAD_TRANSPORT_HEADER: ::c_int = 2;
|
||||
|
||||
pub const NFT_PAYLOAD_CSUM_NONE: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_CSUM_INET: ::c_int = 1;
|
||||
|
||||
pub const NFT_META_LEN: ::c_int = 0;
|
||||
pub const NFT_META_PROTOCOL: ::c_int = 1;
|
||||
pub const NFT_META_PRIORITY: ::c_int = 2;
|
||||
pub const NFT_META_MARK: ::c_int = 3;
|
||||
pub const NFT_META_IIF: ::c_int = 4;
|
||||
pub const NFT_META_OIF: ::c_int = 5;
|
||||
pub const NFT_META_IIFNAME: ::c_int = 6;
|
||||
pub const NFT_META_OIFNAME: ::c_int = 7;
|
||||
pub const NFT_META_IIFTYPE: ::c_int = 8;
|
||||
pub const NFT_META_OIFTYPE: ::c_int = 9;
|
||||
pub const NFT_META_SKUID: ::c_int = 10;
|
||||
pub const NFT_META_SKGID: ::c_int = 11;
|
||||
pub const NFT_META_NFTRACE: ::c_int = 12;
|
||||
pub const NFT_META_RTCLASSID: ::c_int = 13;
|
||||
pub const NFT_META_SECMARK: ::c_int = 14;
|
||||
pub const NFT_META_NFPROTO: ::c_int = 15;
|
||||
pub const NFT_META_L4PROTO: ::c_int = 16;
|
||||
pub const NFT_META_BRI_IIFNAME: ::c_int = 17;
|
||||
pub const NFT_META_BRI_OIFNAME: ::c_int = 18;
|
||||
pub const NFT_META_PKTTYPE: ::c_int = 19;
|
||||
pub const NFT_META_CPU: ::c_int = 20;
|
||||
pub const NFT_META_IIFGROUP: ::c_int = 21;
|
||||
pub const NFT_META_OIFGROUP: ::c_int = 22;
|
||||
pub const NFT_META_CGROUP: ::c_int = 23;
|
||||
pub const NFT_META_PRANDOM: ::c_int = 24;
|
||||
|
||||
pub const NFT_CT_STATE: ::c_int = 0;
|
||||
pub const NFT_CT_DIRECTION: ::c_int = 1;
|
||||
pub const NFT_CT_STATUS: ::c_int = 2;
|
||||
pub const NFT_CT_MARK: ::c_int = 3;
|
||||
pub const NFT_CT_SECMARK: ::c_int = 4;
|
||||
pub const NFT_CT_EXPIRATION: ::c_int = 5;
|
||||
pub const NFT_CT_HELPER: ::c_int = 6;
|
||||
pub const NFT_CT_L3PROTOCOL: ::c_int = 7;
|
||||
pub const NFT_CT_SRC: ::c_int = 8;
|
||||
pub const NFT_CT_DST: ::c_int = 9;
|
||||
pub const NFT_CT_PROTOCOL: ::c_int = 10;
|
||||
pub const NFT_CT_PROTO_SRC: ::c_int = 11;
|
||||
pub const NFT_CT_PROTO_DST: ::c_int = 12;
|
||||
pub const NFT_CT_LABELS: ::c_int = 13;
|
||||
pub const NFT_CT_PKTS: ::c_int = 14;
|
||||
pub const NFT_CT_BYTES: ::c_int = 15;
|
||||
|
||||
pub const NFT_LIMIT_PKTS: ::c_int = 0;
|
||||
pub const NFT_LIMIT_PKT_BYTES: ::c_int = 1;
|
||||
|
||||
pub const NFT_LIMIT_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_QUEUE_FLAG_BYPASS: ::c_int = 0x01;
|
||||
pub const NFT_QUEUE_FLAG_CPU_FANOUT: ::c_int = 0x02;
|
||||
pub const NFT_QUEUE_FLAG_MASK: ::c_int = 0x03;
|
||||
|
||||
pub const NFT_QUOTA_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_REJECT_ICMP_UNREACH: ::c_int = 0;
|
||||
pub const NFT_REJECT_TCP_RST: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_UNREACH: ::c_int = 2;
|
||||
|
||||
pub const NFT_REJECT_ICMPX_NO_ROUTE: ::c_int = 0;
|
||||
pub const NFT_REJECT_ICMPX_PORT_UNREACH: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_HOST_UNREACH: ::c_int = 2;
|
||||
pub const NFT_REJECT_ICMPX_ADMIN_PROHIBITED: ::c_int = 3;
|
||||
|
||||
pub const NFT_NAT_SNAT: ::c_int = 0;
|
||||
pub const NFT_NAT_DNAT: ::c_int = 1;
|
||||
|
||||
pub const NFT_TRACETYPE_UNSPEC: ::c_int = 0;
|
||||
pub const NFT_TRACETYPE_POLICY: ::c_int = 1;
|
||||
pub const NFT_TRACETYPE_RETURN: ::c_int = 2;
|
||||
pub const NFT_TRACETYPE_RULE: ::c_int = 3;
|
||||
|
||||
pub const NFT_NG_INCREMENTAL: ::c_int = 0;
|
||||
pub const NFT_NG_RANDOM: ::c_int = 1;
|
||||
|
||||
#[doc(hidden)]
|
||||
pub const AF_MAX: ::c_int = 42;
|
||||
#[doc(hidden)]
|
||||
|
||||
@ -1316,6 +1316,84 @@ pub const CTRL_ATTR_MCAST_GRP_UNSPEC: ::c_int = 0;
|
||||
pub const CTRL_ATTR_MCAST_GRP_NAME: ::c_int = 1;
|
||||
pub const CTRL_ATTR_MCAST_GRP_ID: ::c_int = 2;
|
||||
|
||||
// linux/netfilter.h
|
||||
pub const NF_DROP: ::c_int = 0;
|
||||
pub const NF_ACCEPT: ::c_int = 1;
|
||||
pub const NF_STOLEN: ::c_int = 2;
|
||||
pub const NF_QUEUE: ::c_int = 3;
|
||||
pub const NF_REPEAT: ::c_int = 4;
|
||||
pub const NF_STOP: ::c_int = 5;
|
||||
pub const NF_MAX_VERDICT: ::c_int = NF_STOP;
|
||||
|
||||
pub const NF_VERDICT_MASK: ::c_int = 0x000000ff;
|
||||
pub const NF_VERDICT_FLAG_QUEUE_BYPASS: ::c_int = 0x00008000;
|
||||
|
||||
pub const NF_VERDICT_QMASK: ::c_int = 0xffff0000;
|
||||
pub const NF_VERDICT_QBITS: ::c_int = 16;
|
||||
|
||||
pub const NF_VERDICT_BITS: ::c_int = 16;
|
||||
|
||||
pub const NF_INET_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_INET_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_INET_FORWARD: ::c_int = 2;
|
||||
pub const NF_INET_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_INET_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_INET_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
// Some NFPROTO are not compatible with musl and are defined in submodules.
|
||||
pub const NFPROTO_UNSPEC: ::c_int = 0;
|
||||
pub const NFPROTO_IPV4: ::c_int = 2;
|
||||
pub const NFPROTO_ARP: ::c_int = 3;
|
||||
pub const NFPROTO_BRIDGE: ::c_int = 7;
|
||||
pub const NFPROTO_IPV6: ::c_int = 10;
|
||||
pub const NFPROTO_DECNET: ::c_int = 12;
|
||||
pub const NFPROTO_NUMPROTO: ::c_int = 13;
|
||||
|
||||
// linux/netfilter_ipv4.h
|
||||
pub const NF_IP_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_IP_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_IP_FORWARD: ::c_int = 2;
|
||||
pub const NF_IP_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_IP_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_IP_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
pub const NF_IP_PRI_FIRST: ::c_int = ::INT_MIN;
|
||||
pub const NF_IP_PRI_CONNTRACK_DEFRAG: ::c_int = -400;
|
||||
pub const NF_IP_PRI_RAW: ::c_int = -300;
|
||||
pub const NF_IP_PRI_SELINUX_FIRST: ::c_int = -225;
|
||||
pub const NF_IP_PRI_CONNTRACK: ::c_int = -200;
|
||||
pub const NF_IP_PRI_MANGLE: ::c_int = -150;
|
||||
pub const NF_IP_PRI_NAT_DST: ::c_int = -100;
|
||||
pub const NF_IP_PRI_FILTER: ::c_int = 0;
|
||||
pub const NF_IP_PRI_SECURITY: ::c_int = 50;
|
||||
pub const NF_IP_PRI_NAT_SRC: ::c_int = 100;
|
||||
pub const NF_IP_PRI_SELINUX_LAST: ::c_int = 225;
|
||||
pub const NF_IP_PRI_CONNTRACK_HELPER: ::c_int = 300;
|
||||
pub const NF_IP_PRI_CONNTRACK_CONFIRM: ::c_int = ::INT_MAX;
|
||||
pub const NF_IP_PRI_LAST: ::c_int = ::INT_MAX;
|
||||
|
||||
// linux/netfilter_ipv6.h
|
||||
pub const NF_IP6_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_IP6_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_IP6_FORWARD: ::c_int = 2;
|
||||
pub const NF_IP6_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_IP6_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_IP6_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
pub const NF_IP6_PRI_FIRST: ::c_int = ::INT_MIN;
|
||||
pub const NF_IP6_PRI_CONNTRACK_DEFRAG: ::c_int = -400;
|
||||
pub const NF_IP6_PRI_RAW: ::c_int = -300;
|
||||
pub const NF_IP6_PRI_SELINUX_FIRST: ::c_int = -225;
|
||||
pub const NF_IP6_PRI_CONNTRACK: ::c_int = -200;
|
||||
pub const NF_IP6_PRI_MANGLE: ::c_int = -150;
|
||||
pub const NF_IP6_PRI_NAT_DST: ::c_int = -100;
|
||||
pub const NF_IP6_PRI_FILTER: ::c_int = 0;
|
||||
pub const NF_IP6_PRI_SECURITY: ::c_int = 50;
|
||||
pub const NF_IP6_PRI_NAT_SRC: ::c_int = 100;
|
||||
pub const NF_IP6_PRI_SELINUX_LAST: ::c_int = 225;
|
||||
pub const NF_IP6_PRI_CONNTRACK_HELPER: ::c_int = 300;
|
||||
pub const NF_IP6_PRI_LAST: ::c_int = ::INT_MAX;
|
||||
|
||||
f! {
|
||||
pub fn CPU_ZERO(cpuset: &mut cpu_set_t) -> () {
|
||||
for slot in cpuset.bits.iter_mut() {
|
||||
|
||||
@ -589,42 +589,13 @@ pub const TIOCM_DSR: ::c_int = 0x100;
|
||||
pub const TIOCM_CD: ::c_int = TIOCM_CAR;
|
||||
pub const TIOCM_RI: ::c_int = TIOCM_RNG;
|
||||
|
||||
pub const NF_DROP: ::c_int = 0;
|
||||
pub const NF_ACCEPT: ::c_int = 1;
|
||||
pub const NF_STOLEN: ::c_int = 2;
|
||||
pub const NF_QUEUE: ::c_int = 3;
|
||||
pub const NF_REPEAT: ::c_int = 4;
|
||||
pub const NF_STOP: ::c_int = 5;
|
||||
pub const NF_MAX_VERDICT: ::c_int = NF_STOP;
|
||||
|
||||
pub const NF_VERDICT_MASK: ::c_int = 0x000000ff;
|
||||
pub const NF_VERDICT_FLAG_QUEUE_BYPASS: ::c_int = 0x00008000;
|
||||
|
||||
pub const NF_VERDICT_QMASK: ::c_int = 0xffff0000;
|
||||
pub const NF_VERDICT_QBITS: ::c_int = 16;
|
||||
|
||||
pub const NF_VERDICT_BITS: ::c_int = 16;
|
||||
|
||||
pub const NF_INET_PRE_ROUTING: ::c_int = 0;
|
||||
pub const NF_INET_LOCAL_IN: ::c_int = 1;
|
||||
pub const NF_INET_FORWARD: ::c_int = 2;
|
||||
pub const NF_INET_LOCAL_OUT: ::c_int = 3;
|
||||
pub const NF_INET_POST_ROUTING: ::c_int = 4;
|
||||
pub const NF_INET_NUMHOOKS: ::c_int = 5;
|
||||
|
||||
pub const NF_NETDEV_INGRESS: ::c_int = 0;
|
||||
pub const NF_NETDEV_NUMHOOKS: ::c_int = 1;
|
||||
|
||||
pub const NFPROTO_UNSPEC: ::c_int = 0;
|
||||
pub const NFPROTO_INET: ::c_int = 1;
|
||||
pub const NFPROTO_IPV4: ::c_int = 2;
|
||||
pub const NFPROTO_ARP: ::c_int = 3;
|
||||
pub const NFPROTO_NETDEV: ::c_int = 5;
|
||||
pub const NFPROTO_BRIDGE: ::c_int = 7;
|
||||
pub const NFPROTO_IPV6: ::c_int = 10;
|
||||
pub const NFPROTO_DECNET: ::c_int = 12;
|
||||
pub const NFPROTO_NUMPROTO: ::c_int = 13;
|
||||
|
||||
// linux/netfilter/nf_tables.h
|
||||
cfg_if!{
|
||||
if #[cfg(any(target_arch = "arm", target_arch = "powerpc",
|
||||
target_arch = "powerpc64", target_arch = "aarch64"))] {
|
||||
@ -645,6 +616,38 @@ cfg_if!{
|
||||
}
|
||||
pub const NFT_USERDATA_MAXLEN: ::c_int = 256;
|
||||
|
||||
pub const NFT_REG_VERDICT: ::c_int = 0;
|
||||
pub const NFT_REG_1: ::c_int = 1;
|
||||
pub const NFT_REG_2: ::c_int = 2;
|
||||
pub const NFT_REG_3: ::c_int = 3;
|
||||
pub const NFT_REG_4: ::c_int = 4;
|
||||
pub const __NFT_REG_MAX: ::c_int = 5;
|
||||
pub const NFT_REG32_00: ::c_int = 8;
|
||||
pub const NFT_REG32_01: ::c_int = 9;
|
||||
pub const NFT_REG32_02: ::c_int = 10;
|
||||
pub const NFT_REG32_03: ::c_int = 11;
|
||||
pub const NFT_REG32_04: ::c_int = 12;
|
||||
pub const NFT_REG32_05: ::c_int = 13;
|
||||
pub const NFT_REG32_06: ::c_int = 14;
|
||||
pub const NFT_REG32_07: ::c_int = 15;
|
||||
pub const NFT_REG32_08: ::c_int = 16;
|
||||
pub const NFT_REG32_09: ::c_int = 17;
|
||||
pub const NFT_REG32_10: ::c_int = 18;
|
||||
pub const NFT_REG32_11: ::c_int = 19;
|
||||
pub const NFT_REG32_12: ::c_int = 20;
|
||||
pub const NFT_REG32_13: ::c_int = 21;
|
||||
pub const NFT_REG32_14: ::c_int = 22;
|
||||
pub const NFT_REG32_15: ::c_int = 23;
|
||||
|
||||
pub const NFT_REG_SIZE: ::c_int = 16;
|
||||
pub const NFT_REG32_SIZE: ::c_int = 4;
|
||||
|
||||
pub const NFT_CONTINUE: ::c_int = -1;
|
||||
pub const NFT_BREAK: ::c_int = -2;
|
||||
pub const NFT_JUMP: ::c_int = -3;
|
||||
pub const NFT_GOTO: ::c_int = -4;
|
||||
pub const NFT_RETURN: ::c_int = -5;
|
||||
|
||||
pub const NFT_MSG_NEWTABLE: ::c_int = 0;
|
||||
pub const NFT_MSG_GETTABLE: ::c_int = 1;
|
||||
pub const NFT_MSG_DELTABLE: ::c_int = 2;
|
||||
@ -675,6 +678,126 @@ cfg_if! {
|
||||
}
|
||||
}
|
||||
|
||||
pub const NFT_SET_ANONYMOUS: ::c_int = 0x1;
|
||||
pub const NFT_SET_CONSTANT: ::c_int = 0x2;
|
||||
pub const NFT_SET_INTERVAL: ::c_int = 0x4;
|
||||
pub const NFT_SET_MAP: ::c_int = 0x8;
|
||||
pub const NFT_SET_TIMEOUT: ::c_int = 0x10;
|
||||
pub const NFT_SET_EVAL: ::c_int = 0x20;
|
||||
|
||||
pub const NFT_SET_POL_PERFORMANCE: ::c_int = 0;
|
||||
pub const NFT_SET_POL_MEMORY: ::c_int = 1;
|
||||
|
||||
pub const NFT_SET_ELEM_INTERVAL_END: ::c_int = 0x1;
|
||||
|
||||
pub const NFT_DATA_VALUE: ::c_uint = 0;
|
||||
pub const NFT_DATA_VERDICT: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_RESERVED_MASK: ::c_uint = 0xffffff00;
|
||||
|
||||
pub const NFT_DATA_VALUE_MAXLEN: ::c_int = 64;
|
||||
|
||||
pub const NFT_BYTEORDER_NTOH: ::c_int = 0;
|
||||
pub const NFT_BYTEORDER_HTON: ::c_int = 1;
|
||||
|
||||
pub const NFT_CMP_EQ: ::c_int = 0;
|
||||
pub const NFT_CMP_NEQ: ::c_int = 1;
|
||||
pub const NFT_CMP_LT: ::c_int = 2;
|
||||
pub const NFT_CMP_LTE: ::c_int = 3;
|
||||
pub const NFT_CMP_GT: ::c_int = 4;
|
||||
pub const NFT_CMP_GTE: ::c_int = 5;
|
||||
|
||||
pub const NFT_RANGE_EQ: ::c_int = 0;
|
||||
pub const NFT_RANGE_NEQ: ::c_int = 1;
|
||||
|
||||
pub const NFT_LOOKUP_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_DYNSET_OP_ADD: ::c_int = 0;
|
||||
pub const NFT_DYNSET_OP_UPDATE: ::c_int = 1;
|
||||
|
||||
pub const NFT_DYNSET_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_PAYLOAD_LL_HEADER: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_NETWORK_HEADER: ::c_int = 1;
|
||||
pub const NFT_PAYLOAD_TRANSPORT_HEADER: ::c_int = 2;
|
||||
|
||||
pub const NFT_PAYLOAD_CSUM_NONE: ::c_int = 0;
|
||||
pub const NFT_PAYLOAD_CSUM_INET: ::c_int = 1;
|
||||
|
||||
pub const NFT_META_LEN: ::c_int = 0;
|
||||
pub const NFT_META_PROTOCOL: ::c_int = 1;
|
||||
pub const NFT_META_PRIORITY: ::c_int = 2;
|
||||
pub const NFT_META_MARK: ::c_int = 3;
|
||||
pub const NFT_META_IIF: ::c_int = 4;
|
||||
pub const NFT_META_OIF: ::c_int = 5;
|
||||
pub const NFT_META_IIFNAME: ::c_int = 6;
|
||||
pub const NFT_META_OIFNAME: ::c_int = 7;
|
||||
pub const NFT_META_IIFTYPE: ::c_int = 8;
|
||||
pub const NFT_META_OIFTYPE: ::c_int = 9;
|
||||
pub const NFT_META_SKUID: ::c_int = 10;
|
||||
pub const NFT_META_SKGID: ::c_int = 11;
|
||||
pub const NFT_META_NFTRACE: ::c_int = 12;
|
||||
pub const NFT_META_RTCLASSID: ::c_int = 13;
|
||||
pub const NFT_META_SECMARK: ::c_int = 14;
|
||||
pub const NFT_META_NFPROTO: ::c_int = 15;
|
||||
pub const NFT_META_L4PROTO: ::c_int = 16;
|
||||
pub const NFT_META_BRI_IIFNAME: ::c_int = 17;
|
||||
pub const NFT_META_BRI_OIFNAME: ::c_int = 18;
|
||||
pub const NFT_META_PKTTYPE: ::c_int = 19;
|
||||
pub const NFT_META_CPU: ::c_int = 20;
|
||||
pub const NFT_META_IIFGROUP: ::c_int = 21;
|
||||
pub const NFT_META_OIFGROUP: ::c_int = 22;
|
||||
pub const NFT_META_CGROUP: ::c_int = 23;
|
||||
pub const NFT_META_PRANDOM: ::c_int = 24;
|
||||
|
||||
pub const NFT_CT_STATE: ::c_int = 0;
|
||||
pub const NFT_CT_DIRECTION: ::c_int = 1;
|
||||
pub const NFT_CT_STATUS: ::c_int = 2;
|
||||
pub const NFT_CT_MARK: ::c_int = 3;
|
||||
pub const NFT_CT_SECMARK: ::c_int = 4;
|
||||
pub const NFT_CT_EXPIRATION: ::c_int = 5;
|
||||
pub const NFT_CT_HELPER: ::c_int = 6;
|
||||
pub const NFT_CT_L3PROTOCOL: ::c_int = 7;
|
||||
pub const NFT_CT_SRC: ::c_int = 8;
|
||||
pub const NFT_CT_DST: ::c_int = 9;
|
||||
pub const NFT_CT_PROTOCOL: ::c_int = 10;
|
||||
pub const NFT_CT_PROTO_SRC: ::c_int = 11;
|
||||
pub const NFT_CT_PROTO_DST: ::c_int = 12;
|
||||
pub const NFT_CT_LABELS: ::c_int = 13;
|
||||
pub const NFT_CT_PKTS: ::c_int = 14;
|
||||
pub const NFT_CT_BYTES: ::c_int = 15;
|
||||
|
||||
pub const NFT_LIMIT_PKTS: ::c_int = 0;
|
||||
pub const NFT_LIMIT_PKT_BYTES: ::c_int = 1;
|
||||
|
||||
pub const NFT_LIMIT_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_QUEUE_FLAG_BYPASS: ::c_int = 0x01;
|
||||
pub const NFT_QUEUE_FLAG_CPU_FANOUT: ::c_int = 0x02;
|
||||
pub const NFT_QUEUE_FLAG_MASK: ::c_int = 0x03;
|
||||
|
||||
pub const NFT_QUOTA_F_INV: ::c_int = (1 << 0);
|
||||
|
||||
pub const NFT_REJECT_ICMP_UNREACH: ::c_int = 0;
|
||||
pub const NFT_REJECT_TCP_RST: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_UNREACH: ::c_int = 2;
|
||||
|
||||
pub const NFT_REJECT_ICMPX_NO_ROUTE: ::c_int = 0;
|
||||
pub const NFT_REJECT_ICMPX_PORT_UNREACH: ::c_int = 1;
|
||||
pub const NFT_REJECT_ICMPX_HOST_UNREACH: ::c_int = 2;
|
||||
pub const NFT_REJECT_ICMPX_ADMIN_PROHIBITED: ::c_int = 3;
|
||||
|
||||
pub const NFT_NAT_SNAT: ::c_int = 0;
|
||||
pub const NFT_NAT_DNAT: ::c_int = 1;
|
||||
|
||||
pub const NFT_TRACETYPE_UNSPEC: ::c_int = 0;
|
||||
pub const NFT_TRACETYPE_POLICY: ::c_int = 1;
|
||||
pub const NFT_TRACETYPE_RETURN: ::c_int = 2;
|
||||
pub const NFT_TRACETYPE_RULE: ::c_int = 3;
|
||||
|
||||
pub const NFT_NG_INCREMENTAL: ::c_int = 0;
|
||||
pub const NFT_NG_RANDOM: ::c_int = 1;
|
||||
|
||||
#[doc(hidden)]
|
||||
pub const AF_MAX: ::c_int = 42;
|
||||
#[doc(hidden)]
|
||||
|
||||
Loading…
Reference in New Issue
Block a user