NAME
ipq_set_verdict - issue verdict and optionally modified packet to kernel
SYNOPSIS
#include <linux/netfilter.h>
#include <libipq.h>
I int ipq_set_verdict(const struct ipq_handle * h , ipq_id_t id , unsigned int verdict , size_t data_len , unsigned char * buf );
DESCRIPTION
The
ipq_set_verdict
function issues a verdict on a packet previously obtained with
R ipq_read ,
specifing the intended disposition of the packet, and optionally
supplying a modified version of the payload data.
The
h
parameter is a context handle which must previously have been returned
successfully from a call to
R ipq_create_handle .
The
id
parameter is the packet identifier obtained via
R ipq_get_packet .
The
verdict
parameter must be one of:
NF_ACCEPT
Accept the packet and continue traversal within the kernel.
The
data_len
parameter is the length of the data pointed to
by
R buf ,
the optional replacement payload data.
If simply setting a verdict without modifying the payload data, use zero
for
data_len
and NULL for
R buf .
The application is responsible for recalculating any packet checksums
when modifying packets.
RETURN VALUE
On failure, -1 is returned.
On success, a non-zero positive value is returned.
ERRORS
On error, a descriptive error message will be available
via the
ipq_errstr
function.
BUGS
None known.
AUTHOR
James Morris <jmorris@intercode.com.au>
COPYRIGHT
Copyright (c) 2000-2001 Netfilter Core Team.
Distributed under the GNU General Public License.
SEE ALSO
