[NETFILTER]: x_tables: add NFLOG target
Add new NFLOG target to allow use of nfnetlink_log for both IPv4 and IPv6. Currently we have two (unsupported by userspace) hacks in the LOG and ULOG targets to optionally call to the nflog API. They lack a few features, namely the IPv4 and IPv6 LOG targets can not specify a number of arguments related to nfnetlink_log, while the ULOG target is only available for IPv4. Remove those hacks and add a clean way to use nfnetlink_log. Signed-off-by: Patrick McHardy <kaber@trash.net>
This commit is contained in:
committed by
David S. Miller
parent
39b46fc6f0
commit
baf7b1e112
@ -440,13 +440,8 @@ ip6t_log_target(struct sk_buff **pskb,
|
||||
li.u.log.level = loginfo->level;
|
||||
li.u.log.logflags = loginfo->logflags;
|
||||
|
||||
if (loginfo->logflags & IP6T_LOG_NFLOG)
|
||||
nf_log_packet(PF_INET6, hooknum, *pskb, in, out, &li,
|
||||
"%s", loginfo->prefix);
|
||||
else
|
||||
ip6t_log_packet(PF_INET6, hooknum, *pskb, in, out, &li,
|
||||
loginfo->prefix);
|
||||
|
||||
ip6t_log_packet(PF_INET6, hooknum, *pskb, in, out, &li,
|
||||
loginfo->prefix);
|
||||
return IP6T_CONTINUE;
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user