Struct Chain 

pub struct Chain<'a> { /* private fields */ }

Abstraction of a nftnl_chain. Chains reside inside Tables and they hold Rules.

There are two types of chains, “base chain” and “regular chain”. See set_hook for more details.

Implementations

impl<'a> Chain<'a>

pub fn new<T: AsRef<CStr>>(name: T, table: &'a Table) -> Chain<'a>

Creates a new chain instance inside the given Table and with the given name.

pub fn set_hook(&mut self, hook: Hook, priority: Priority)

Sets the hook and priority for this chain. Without calling this method the chain well become a “regular chain” without any hook and will thus not receive any traffic unless some rule forward packets to it via goto or jump verdicts.

By calling set_hook with a hook the chain that is created will be registered with that hook and is thus a “base chain”. A “base chain” is an entry point for packets from the networking stack.

pub fn set_type(&mut self, chain_type: ChainType)

Set the type of a base chain. This only applies if the chain has been registered with a hook by calling set_hook.

pub fn set_policy(&mut self, policy: Policy)

Sets the default policy for this chain. That means what action netfilter will apply to packets processed by this chain, but that did not match any rules in it.

pub fn set_device<T: AsRef<CStr>>(&mut self, device: T)

Sets the device for this chain. This only applies if the chain has been registered with an ingress hook by calling set_hook.

pub fn get_name(&self) -> &CStr

Returns the name of this chain.

pub fn get_table(&self) -> &Table

Returns a reference to the Table this chain belongs to

Trait Implementations

impl Debug for Chain<'_>

fn fmt(&self, fmt: &mut Formatter<'_>) -> Result

Return a string representation of the chain.

impl Drop for Chain<'_>

fn drop(&mut self)

Executes the destructor for this type.

impl NlMsg for Chain<'_>

unsafe fn write(&self, buf: *mut c_void, seq: u32, msg_type: MsgType)

Serializes the Netlink message to the buffer at buf. buf must have space for at least nft_nlmsg_maxsize() bytes. This is not checked by the compiler, which is why this method is unsafe.

impl Send for Chain<'_>

impl Sync for Chain<'_>