linux/include/uapi/linux/netfilter.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
#ifndef _UAPI__LINUX_NETFILTER_H
#define _UAPI__LINUX_NETFILTER_H

#include <linux/types.h>
#include <linux/compiler.h>
#include <linux/in.h>
#include <linux/in6.h>

/* Responses from hook functions. */
#define NF_DROP …
#define NF_ACCEPT …
#define NF_STOLEN …
#define NF_QUEUE …
#define NF_REPEAT …
#define NF_STOP …
#define NF_MAX_VERDICT …

/* we overload the higher bits for encoding auxiliary data such as the queue
 * number or errno values. Not nice, but better than additional function
 * arguments. */
#define NF_VERDICT_MASK …

/* extra verdict flags have mask 0x0000ff00 */
#define NF_VERDICT_FLAG_QUEUE_BYPASS …

/* queue number (NF_QUEUE) or errno (NF_DROP) */
#define NF_VERDICT_QMASK …
#define NF_VERDICT_QBITS …

#define NF_QUEUE_NR(x) …

#define NF_DROP_ERR(x) …

/* only for userspace compatibility */
#ifndef __KERNEL__

/* NF_VERDICT_BITS should be 8 now, but userspace might break if this changes */
#define NF_VERDICT_BITS …
#endif

enum nf_inet_hooks { … };

enum nf_dev_hooks { … };

enum { … };

nf_inet_addr;

#endif /* _UAPI__LINUX_NETFILTER_H */