selectively delete chains in filter and nat tables
[project/firewall3.git] / ipsets.h
1 /*
2 * firewall3 - 3rd OpenWrt UCI firewall implementation
3 *
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
5 *
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19 #ifndef __FW3_IPSETS_H
20 #define __FW3_IPSETS_H
21
22 #include "options.h"
23 #include "utils.h"
24
25 enum fw3_ipset_opts {
26 FW3_IPSET_OPT_IPRANGE = (1 << 0),
27 FW3_IPSET_OPT_PORTRANGE = (1 << 1),
28 FW3_IPSET_OPT_NETMASK = (1 << 2),
29 FW3_IPSET_OPT_HASHSIZE = (1 << 3),
30 FW3_IPSET_OPT_MAXELEM = (1 << 4),
31 FW3_IPSET_OPT_FAMILY = (1 << 5),
32 };
33
34 struct fw3_ipset_settype {
35 enum fw3_ipset_method method;
36 uint32_t types;
37 uint8_t required;
38 uint8_t optional;
39 };
40
41 void fw3_load_ipsets(struct fw3_state *state, struct uci_package *p);
42 void fw3_create_ipsets(struct fw3_state *state);
43
44 void fw3_destroy_ipsets(struct list_head *statefile);
45
46 void fw3_free_ipset(struct fw3_ipset *ipset);
47
48 struct fw3_ipset * fw3_lookup_ipset(struct fw3_state *state, const char *name);
49
50 #endif