xref: /linux/include/uapi/linux/netfilter_ipv6.h (revision 597473720f4dc69749542bfcfed4a927a43d935e)
1e2be04c7SGreg Kroah-Hartman /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2607ca46eSDavid Howells /* IPv6-specific defines for netfilter.
3607ca46eSDavid Howells  * (C)1998 Rusty Russell -- This code is GPL.
4607ca46eSDavid Howells  * (C)1999 David Jeffery
5607ca46eSDavid Howells  *   this header was blatantly ripped from netfilter_ipv4.h
6607ca46eSDavid Howells  *   it's amazing what adding a bunch of 6s can do =8^)
7607ca46eSDavid Howells  */
8607ca46eSDavid Howells #ifndef _UAPI__LINUX_IP6_NETFILTER_H
9607ca46eSDavid Howells #define _UAPI__LINUX_IP6_NETFILTER_H
10607ca46eSDavid Howells 
11607ca46eSDavid Howells 
12607ca46eSDavid Howells #include <linux/netfilter.h>
13607ca46eSDavid Howells 
14607ca46eSDavid Howells /* only for userspace compatibility */
15607ca46eSDavid Howells #ifndef __KERNEL__
16607ca46eSDavid Howells 
17607ca46eSDavid Howells #include <limits.h> /* for INT_MIN, INT_MAX */
18607ca46eSDavid Howells 
19607ca46eSDavid Howells /* IP6 Hooks */
20607ca46eSDavid Howells /* After promisc drops, checksum checks. */
21607ca46eSDavid Howells #define NF_IP6_PRE_ROUTING	0
22607ca46eSDavid Howells /* If the packet is destined for this box. */
23607ca46eSDavid Howells #define NF_IP6_LOCAL_IN		1
24607ca46eSDavid Howells /* If the packet is destined for another interface. */
25607ca46eSDavid Howells #define NF_IP6_FORWARD		2
26607ca46eSDavid Howells /* Packets coming from a local process. */
27607ca46eSDavid Howells #define NF_IP6_LOCAL_OUT		3
28607ca46eSDavid Howells /* Packets about to hit the wire. */
29607ca46eSDavid Howells #define NF_IP6_POST_ROUTING	4
30607ca46eSDavid Howells #define NF_IP6_NUMHOOKS		5
31607ca46eSDavid Howells #endif /* ! __KERNEL__ */
32607ca46eSDavid Howells 
33607ca46eSDavid Howells 
34607ca46eSDavid Howells enum nf_ip6_hook_priorities {
35607ca46eSDavid Howells 	NF_IP6_PRI_FIRST = INT_MIN,
36*902d6a4cSSubash Abhinov Kasiviswanathan 	NF_IP6_PRI_RAW_BEFORE_DEFRAG = -450,
37607ca46eSDavid Howells 	NF_IP6_PRI_CONNTRACK_DEFRAG = -400,
38607ca46eSDavid Howells 	NF_IP6_PRI_RAW = -300,
39607ca46eSDavid Howells 	NF_IP6_PRI_SELINUX_FIRST = -225,
40607ca46eSDavid Howells 	NF_IP6_PRI_CONNTRACK = -200,
41607ca46eSDavid Howells 	NF_IP6_PRI_MANGLE = -150,
42607ca46eSDavid Howells 	NF_IP6_PRI_NAT_DST = -100,
43607ca46eSDavid Howells 	NF_IP6_PRI_FILTER = 0,
44607ca46eSDavid Howells 	NF_IP6_PRI_SECURITY = 50,
45607ca46eSDavid Howells 	NF_IP6_PRI_NAT_SRC = 100,
46607ca46eSDavid Howells 	NF_IP6_PRI_SELINUX_LAST = 225,
47607ca46eSDavid Howells 	NF_IP6_PRI_CONNTRACK_HELPER = 300,
48607ca46eSDavid Howells 	NF_IP6_PRI_LAST = INT_MAX,
49607ca46eSDavid Howells };
50607ca46eSDavid Howells 
51607ca46eSDavid Howells 
52607ca46eSDavid Howells #endif /* _UAPI__LINUX_IP6_NETFILTER_H */
53