ipq_set_verdict (3) - Linux Man Pages
ipq_set_verdict: issue verdict and optionally modified packet to kernel
ipq_set_verdict --- issue verdict and optionally modified packet to kernel
DESCRIPTIONThe ipq_set_verdict function issues a verdict on a packet previously obtained with ipq_read, specifing the intended disposition of the packet, and optionally supplying a modified version of the payload data.
The h parameter is a context handle which must previously have been returned successfully from a call to ipq_create_handle.
The id parameter is the packet identifier obtained via ipq_get_packet.
The verdict parameter must be one of:
Accept the packet and continue traversal within the kernel.
- Drop the packet.
- Requeue the packet.
NF_STOLEN and NF_REPEAT are kernel-internal constants and should not be used from userspace as their exact side effects have not been investigated.
The data_len parameter is the length of the data pointed to by buf, the optional replacement payload data.
If simply setting a verdict without modifying the payload data, use zero for data_len and NULL for buf.
RETURN VALUEOn failure, -1 is returned.
On success, a non-zero positive value is returned.