diff options
author | Claudio Jeker <claudio@cvs.openbsd.org> | 2012-11-13 09:47:21 +0000 |
---|---|---|
committer | Claudio Jeker <claudio@cvs.openbsd.org> | 2012-11-13 09:47:21 +0000 |
commit | bb8c0be811b76c6ab88d9ab6f84dfd86fefb3dbb (patch) | |
tree | a8f0d48b7ce316fd0743d13e0b77734b4a78b42d /usr.sbin/bgpd/bgpd.h | |
parent | 006fb6cf8bdb3bff5e028c1acaa88a19108a3c62 (diff) |
Allow filtering based on the NEXTHOP attribute. This allows to build rules
like: allow from any nexthop neighbor (to allow only prefixes that use the
routers IP address as nexthop). Lots of testing, input and OK florian@
Diffstat (limited to 'usr.sbin/bgpd/bgpd.h')
-rw-r--r-- | usr.sbin/bgpd/bgpd.h | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/usr.sbin/bgpd/bgpd.h b/usr.sbin/bgpd/bgpd.h index 370b62ab320..a412a641531 100644 --- a/usr.sbin/bgpd/bgpd.h +++ b/usr.sbin/bgpd/bgpd.h @@ -1,4 +1,4 @@ -/* $OpenBSD: bgpd.h,v 1.273 2012/09/18 10:10:00 claudio Exp $ */ +/* $OpenBSD: bgpd.h,v 1.274 2012/11/13 09:47:20 claudio Exp $ */ /* * Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org> @@ -749,6 +749,13 @@ struct filter_prefix { u_int8_t len; }; +struct filter_nexthop { + struct bgpd_addr addr; + u_int8_t flags; +#define FILTER_NEXTHOP_ADDR 1 +#define FILTER_NEXTHOP_NEIGHBOR 2 +}; + struct filter_prefixlen { enum comp_ops op; u_int8_t aid; @@ -759,6 +766,7 @@ struct filter_prefixlen { struct filter_match { struct filter_prefix prefix; struct filter_prefixlen prefixlen; + struct filter_nexthop nexthop; struct filter_as as; struct filter_aslen aslen; struct filter_community community; |