xref: /linux/include/linux/netfilter/nf_conntrack_ftp.h (revision 564eb714f5f09ac733c26860d5f0831f213fbdf1)
1 #ifndef _NF_CONNTRACK_FTP_H
2 #define _NF_CONNTRACK_FTP_H
3 
4 #include <uapi/linux/netfilter/nf_conntrack_ftp.h>
5 
6 
7 #define FTP_PORT	21
8 
9 #define NF_CT_FTP_SEQ_PICKUP	(1 << 0)
10 
11 #define NUM_SEQ_TO_REMEMBER 2
12 /* This structure exists only once per master */
13 struct nf_ct_ftp_master {
14 	/* Valid seq positions for cmd matching after newline */
15 	u_int32_t seq_aft_nl[IP_CT_DIR_MAX][NUM_SEQ_TO_REMEMBER];
16 	/* 0 means seq_match_aft_nl not set */
17 	u_int16_t seq_aft_nl_num[IP_CT_DIR_MAX];
18 	/* pickup sequence tracking, useful for conntrackd */
19 	u_int16_t flags[IP_CT_DIR_MAX];
20 };
21 
22 struct nf_conntrack_expect;
23 
24 /* For NAT to hook in when we find a packet which describes what other
25  * connection we should expect. */
26 extern unsigned int (*nf_nat_ftp_hook)(struct sk_buff *skb,
27 				       enum ip_conntrack_info ctinfo,
28 				       enum nf_ct_ftp_type type,
29 				       unsigned int protoff,
30 				       unsigned int matchoff,
31 				       unsigned int matchlen,
32 				       struct nf_conntrack_expect *exp);
33 #endif /* _NF_CONNTRACK_FTP_H */
34