1 /* SPDX-License-Identifier: GPL-2.0 */ 2 #ifndef __LINUX_BRIDGE_NETFILTER_H 3 #define __LINUX_BRIDGE_NETFILTER_H 4 5 #include <uapi/linux/netfilter_bridge.h> 6 #include <linux/skbuff.h> 7 8 enum nf_br_hook_priorities { 9 NF_BR_PRI_FIRST = INT_MIN, 10 NF_BR_PRI_NAT_DST_BRIDGED = -300, 11 NF_BR_PRI_FILTER_BRIDGED = -200, 12 NF_BR_PRI_BRNF = 0, 13 NF_BR_PRI_NAT_DST_OTHER = 100, 14 NF_BR_PRI_FILTER_OTHER = 200, 15 NF_BR_PRI_NAT_SRC = 300, 16 NF_BR_PRI_LAST = INT_MAX, 17 }; 18 19 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 20 21 int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb); 22 23 static inline void br_drop_fake_rtable(struct sk_buff *skb) 24 { 25 struct dst_entry *dst = skb_dst(skb); 26 27 if (dst && (dst->flags & DST_FAKE_RTABLE)) 28 skb_dst_drop(skb); 29 } 30 31 static inline int nf_bridge_get_physinif(const struct sk_buff *skb) 32 { 33 struct nf_bridge_info *nf_bridge; 34 35 if (skb->nf_bridge == NULL) 36 return 0; 37 38 nf_bridge = skb->nf_bridge; 39 return nf_bridge->physindev ? nf_bridge->physindev->ifindex : 0; 40 } 41 42 static inline int nf_bridge_get_physoutif(const struct sk_buff *skb) 43 { 44 struct nf_bridge_info *nf_bridge; 45 46 if (skb->nf_bridge == NULL) 47 return 0; 48 49 nf_bridge = skb->nf_bridge; 50 return nf_bridge->physoutdev ? nf_bridge->physoutdev->ifindex : 0; 51 } 52 53 static inline struct net_device * 54 nf_bridge_get_physindev(const struct sk_buff *skb) 55 { 56 return skb->nf_bridge ? skb->nf_bridge->physindev : NULL; 57 } 58 59 static inline struct net_device * 60 nf_bridge_get_physoutdev(const struct sk_buff *skb) 61 { 62 return skb->nf_bridge ? skb->nf_bridge->physoutdev : NULL; 63 } 64 65 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb) 66 { 67 return skb->nf_bridge && skb->nf_bridge->in_prerouting; 68 } 69 #else 70 #define br_drop_fake_rtable(skb) do { } while (0) 71 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb) 72 { 73 return false; 74 } 75 #endif /* CONFIG_BRIDGE_NETFILTER */ 76 77 #endif 78