aboutsummaryrefslogtreecommitdiff
path: root/sys/net
diff options
context:
space:
mode:
authorKristof Provost <kp@FreeBSD.org>2022-04-12 11:20:18 +0000
committerKristof Provost <kp@FreeBSD.org>2022-04-20 11:01:12 +0000
commit812839e5aaaf495a85ac7dcb743b565c4792d74d (patch)
tree6cf1ae83c374cfeeb2ad0bce3baec26ac5973ce2 /sys/net
parent583bb9c530b2316c83017fc51517d3acad1ed9dd (diff)
downloadsrc-812839e5aaaf495a85ac7dcb743b565c4792d74d.tar.gz
src-812839e5aaaf495a85ac7dcb743b565c4792d74d.zip
pf: allow the use of tables in ethernet rules
Allow tables to be used for the l3 source/destination matching. This requires taking the PF_RULES read lock. Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D34917
Diffstat (limited to 'sys/net')
-rw-r--r--sys/net/pfvar.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/net/pfvar.h b/sys/net/pfvar.h
index db6b5c22f07f..adcf69905698 100644
--- a/sys/net/pfvar.h
+++ b/sys/net/pfvar.h
@@ -2153,6 +2153,8 @@ int pfr_pool_get(struct pfr_ktable *, int *, struct pf_addr *, sa_family_t);
void pfr_dynaddr_update(struct pfr_ktable *, struct pfi_dynaddr *);
struct pfr_ktable *
pfr_attach_table(struct pf_kruleset *, char *);
+struct pfr_ktable *
+ pfr_eth_attach_table(struct pf_keth_ruleset *, char *);
void pfr_detach_table(struct pfr_ktable *);
int pfr_clr_tables(struct pfr_table *, int *, int);
int pfr_add_tables(struct pfr_table *, int, int *, int);