summaryrefslogtreecommitdiffhomepage
path: root/system-linux.c
diff options
context:
space:
mode:
authorStefan Tomanek <stefan.tomanek@wertarbyte.de>2017-06-07 12:47:04 +0200
committerHans Dedecker <dedeckeh@gmail.com>2017-06-11 15:07:18 +0200
commit90e2e2c404eeeb3414c794dfb45f5ee4b88cd479 (patch)
tree8d2a78ef9b3fce2f3edcf3e524ea09fdf6b026d0 /system-linux.c
parent08f1875201a60dc20c65d2af26b41af987662f10 (diff)
iprule: Add option to suppress unspecific routing lookups
After applying this patch, policy routing rules can be employed that ignore parts of a routing table. The following config snippet ignores routing lookups from the specified main routing table yielding the default route, passing the lookup process on to the next rule (that might provide a special default route for marked packets): config rule option priority 10 # check main routing table first, but ignore default route result option lookup main option suppress_prefixlength 0 config rule option priority 11 # use special routing table for marked packets # (unless already consumed by previous rule) option mark 0xFF option lookup 100 The result is a ruleset like this (only visible using the full 'ip' binary): # ip rule 0: from all lookup local 10: from all lookup main suppress_prefixlength 0 11: from all fwmark 0xff lookup 100 32766: from all lookup main 32767: from all lookup default # Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de>
Diffstat (limited to 'system-linux.c')
-rw-r--r--system-linux.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/system-linux.c b/system-linux.c
index 3605d9b..06c6abd 100644
--- a/system-linux.c
+++ b/system-linux.c
@@ -2171,6 +2171,9 @@ static int system_iprule(struct iprule *rule, int cmd)
nla_put_u32(msg, FRA_TABLE, rule->lookup);
}
+ if (rule->flags & IPRULE_SUP_PREFIXLEN)
+ nla_put_u32(msg, FRA_SUPPRESS_PREFIXLEN, rule->sup_prefixlen);
+
if (rule->flags & IPRULE_GOTO)
nla_put_u32(msg, FRA_GOTO, rule->gotoid);