netfilter: nft_reject: introduce icmp code abstraction for inet and bridge

[deliverable/linux.git] / include / net / netfilter / ipv4 / nf_reject.h

diff --git a/include/net/netfilter/ipv4/nf_reject.h b/include/net/netfilter/ipv4/nf_reject.h
index 931fbf812171afa37c53f258213a77759cd43edb..8ce06385a552f62cf29f1b62cc2b1c849cf41c9d 100644 (file)
--- a/include/net/netfilter/ipv4/nf_reject.h
+++ b/include/net/netfilter/ipv4/nf_reject.h
@@ -5,6 +5,7 @@
 #include <net/tcp.h>
 #include <net/route.h>
 #include <net/dst.h>
+#include <net/icmp.h>
 
 static inline void nf_send_unreach(struct sk_buff *skb_in, int code)
 {
@@ -98,7 +99,7 @@ static void nf_send_reset(struct sk_buff *oldskb, int hook)
 
        nf_ct_attach(nskb, oldskb);
 
-#ifdef CONFIG_BRIDGE_NETFILTER
+#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
        /* If we use ip_local_out for bridged traffic, the MAC source on
         * the RST will be ours, instead of the destination's.  This confuses
         * some routers/firewalls, and they drop the packet.  So we need to