interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

make links stable

This commit is contained in:
Michael Stapelberg 2022-05-15 23:15:01 +02:00
parent 8ea944061f
commit 58da7d8bf3
6 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
xt/match_addrtype.go
View File

@ -4,7 +4,7 @@ import (
"github.com/google/nftables/alignedbuff" "github.com/google/nftables/alignedbuff"
) )
// Rev. 0, see https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_addrtype.h#L38 // Rev. 0, see https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_addrtype.h#L38
type AddrType struct { type AddrType struct {
Source uint16 Source uint16
Dest uint16 Dest uint16
@ -29,7 +29,7 @@ const (
AddrTypeXresolve AddrTypeXresolve
) )
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_addrtype.h#L31 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_addrtype.h#L31
type AddrTypeV1 struct { type AddrTypeV1 struct {
Source uint16 Source uint16
Dest uint16 Dest uint16

6
xt/match_conntrack.go
View File

@ -43,21 +43,21 @@ type ConntrackMtinfoBase struct {
ReplDstPort uint16 ReplDstPort uint16
} }
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_conntrack.h#L38 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L38
type ConntrackMtinfo1 struct { type ConntrackMtinfo1 struct {
ConntrackMtinfoBase ConntrackMtinfoBase
StateMask uint8 StateMask uint8
StatusMask uint8 StatusMask uint8
} }
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_conntrack.h#L51 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L51
type ConntrackMtinfo2 struct { type ConntrackMtinfo2 struct {
ConntrackMtinfoBase ConntrackMtinfoBase
StateMask uint16 StateMask uint16
StatusMask uint16 StatusMask uint16
} }
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_conntrack.h#L64 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L64
type ConntrackMtinfo3 struct { type ConntrackMtinfo3 struct {
ConntrackMtinfo2 ConntrackMtinfo2
OrigSrcPortHigh uint16 OrigSrcPortHigh uint16

2
xt/match_tcp.go
View File

@ -8,7 +8,7 @@ import (
// (https://wiki.nftables.org/wiki-nftables/index.php/Supported_features_compared_to_xtables#tcp). // (https://wiki.nftables.org/wiki-nftables/index.php/Supported_features_compared_to_xtables#tcp).
// //
// See // See
// https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_tcpudp.h#L8 // https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_tcpudp.h#L8
type Tcp struct { type Tcp struct {
SrcPorts [2]uint16 // min, max source port range SrcPorts [2]uint16 // min, max source port range
DstPorts [2]uint16 // min, max destination port range DstPorts [2]uint16 // min, max destination port range

2
xt/match_udp.go
View File

@ -8,7 +8,7 @@ import (
// (https://wiki.nftables.org/wiki-nftables/index.php/Supported_features_compared_to_xtables#tcp). // (https://wiki.nftables.org/wiki-nftables/index.php/Supported_features_compared_to_xtables#tcp).
// //
// See // See
// https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/xt_tcpudp.h#L8 // https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_tcpudp.h#L25
type Udp struct { type Udp struct {
SrcPorts [2]uint16 // min, max source port range SrcPorts [2]uint16 // min, max source port range
DstPorts [2]uint16 // min, max destination port range DstPorts [2]uint16 // min, max destination port range

6
xt/target_dnat.go
View File

@ -8,7 +8,7 @@ import (
type NatRangeFlags uint type NatRangeFlags uint
// See: https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/nf_nat.h#L8 // See: https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L8
const ( const (
NatRangeMapIPs NatRangeFlags = (1 << iota) NatRangeMapIPs NatRangeFlags = (1 << iota)
NatRangeProtoSpecified NatRangeProtoSpecified
@ -23,7 +23,7 @@ const (
NatRangeProtoRandomAll = NatRangeProtoRandom | NatRangeProtoRandomFully NatRangeProtoRandomAll = NatRangeProtoRandom | NatRangeProtoRandomFully
) )
// see: https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/nf_nat.h#L38 // see: https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L38
type NatRange struct { type NatRange struct {
Flags uint // sic! platform/arch/compiler-dependent uint size Flags uint // sic! platform/arch/compiler-dependent uint size
MinIP net.IP // always taking up space for an IPv6 address MinIP net.IP // always taking up space for an IPv6 address
@ -32,7 +32,7 @@ type NatRange struct {
MaxPort uint16 MaxPort uint16
} }
// see: https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/nf_nat.h#L46 // see: https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L46
type NatRange2 struct { type NatRange2 struct {
NatRange NatRange
BasePort uint16 BasePort uint16

4
xt/target_masquerade_ip.go
View File

@ -7,7 +7,7 @@ import (
"github.com/google/nftables/alignedbuff" "github.com/google/nftables/alignedbuff"
) )
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/nf_nat.h#L25 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L25
type NatIPv4Range struct { type NatIPv4Range struct {
Flags uint // sic! Flags uint // sic!
MinIP net.IP MinIP net.IP
@ -19,7 +19,7 @@ type NatIPv4Range struct {
// NatIPv4MultiRangeCompat despite being a slice of NAT IPv4 ranges is currently allowed to // NatIPv4MultiRangeCompat despite being a slice of NAT IPv4 ranges is currently allowed to
// only hold exactly one element. // only hold exactly one element.
// //
// See https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/netfilter/nf_nat.h#L33 // See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L33
type NatIPv4MultiRangeCompat []NatIPv4Range type NatIPv4MultiRangeCompat []NatIPv4Range
func (x *NatIPv4MultiRangeCompat) marshal(fam TableFamily, rev uint32) ([]byte, error) { func (x *NatIPv4MultiRangeCompat) marshal(fam TableFamily, rev uint32) ([]byte, error) {