1 /* SPDX-License-Identifier: GPL-2.0 */ 2 #ifndef __LINUX_BRIDGE_NETFILTER_H 3 #define __LINUX_BRIDGE_NETFILTER_H 4 5 #include <uapi/linux/netfilter_bridge.h> 6 #include <linux/skbuff.h> 7 8 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 9 10 int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb); 11 12 static inline void br_drop_fake_rtable(struct sk_buff *skb) 13 { 14 struct dst_entry *dst = skb_dst(skb); 15 16 if (dst && (dst->flags & DST_FAKE_RTABLE)) 17 skb_dst_drop(skb); 18 } 19 20 static inline struct nf_bridge_info * 21 nf_bridge_info_get(const struct sk_buff *skb) 22 { 23 return skb_ext_find(skb, SKB_EXT_BRIDGE_NF); 24 } 25 26 static inline bool nf_bridge_info_exists(const struct sk_buff *skb) 27 { 28 return skb_ext_exist(skb, SKB_EXT_BRIDGE_NF); 29 } 30 31 static inline int nf_bridge_get_physinif(const struct sk_buff *skb) 32 { 33 const struct nf_bridge_info *nf_bridge = nf_bridge_info_get(skb); 34 35 if (!nf_bridge) 36 return 0; 37 38 return nf_bridge->physindev ? nf_bridge->physindev->ifindex : 0; 39 } 40 41 static inline int nf_bridge_get_physoutif(const struct sk_buff *skb) 42 { 43 const struct nf_bridge_info *nf_bridge = nf_bridge_info_get(skb); 44 45 if (!nf_bridge) 46 return 0; 47 48 return nf_bridge->physoutdev ? nf_bridge->physoutdev->ifindex : 0; 49 } 50 51 static inline struct net_device * 52 nf_bridge_get_physindev(const struct sk_buff *skb) 53 { 54 const struct nf_bridge_info *nf_bridge = nf_bridge_info_get(skb); 55 56 return nf_bridge ? nf_bridge->physindev : NULL; 57 } 58 59 static inline struct net_device * 60 nf_bridge_get_physoutdev(const struct sk_buff *skb) 61 { 62 const struct nf_bridge_info *nf_bridge = nf_bridge_info_get(skb); 63 64 return nf_bridge ? nf_bridge->physoutdev : NULL; 65 } 66 67 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb) 68 { 69 const struct nf_bridge_info *nf_bridge = nf_bridge_info_get(skb); 70 71 return nf_bridge && nf_bridge->in_prerouting; 72 } 73 #else 74 #define br_drop_fake_rtable(skb) do { } while (0) 75 static inline bool nf_bridge_in_prerouting(const struct sk_buff *skb) 76 { 77 return false; 78 } 79 #endif /* CONFIG_BRIDGE_NETFILTER */ 80 81 #endif 82