helpers: implement explicit CT helper assignment support

[project/firewall3.git] / iptables.c

diff --git a/iptables.c b/iptables.c
index d8482399dbaa85f611f6720aaae1d29727b0bf17..a48a8b6ec1c465e57d92931f2aa39aa378373834 100644 (file)
--- a/iptables.c
+++ b/iptables.c
@@ -1025,6 +1025,16 @@ fw3_ipt_rule_ipset(struct fw3_ipt_rule *r, struct fw3_setmatch *match)
        fw3_ipt_rule_addarg(r, false, buf, NULL);
 }
 
+void
+fw3_ipt_rule_helper(struct fw3_ipt_rule *r, struct fw3_cthelpermatch *match)
+{
+       if (!match || !match->set || !match->ptr)
+               return;
+
+       fw3_ipt_rule_addarg(r, false, "-m", "helper");
+       fw3_ipt_rule_addarg(r, match->invert, "--helper", match->ptr->name);
+}
+
 void
 fw3_ipt_rule_time(struct fw3_ipt_rule *r, struct fw3_time *time)
 {