diff --git a/AUTHORS b/AUTHORS
index 0b7f76afcc058492840220f51b5baed11c279f56..b3da70523c37c1f9261baac2637fa491099a9bbd 100644
--- a/AUTHORS
+++ b/AUTHORS
@@ -198,6 +198,7 @@ Patches have also been contributed by:
Tang Chen
drop
,
- reject
(since 0.9.0),
- or accept
if
- the evaluation of the filtering rule is supposed to drop,
- reject (using ICMP message), or accept a packet
+ action -- mandatory; must either be drop
+ (matching the rule silently discards the packet with no
+ further analysis),
+ reject
(matching the rule generates an ICMP
+ reject message with no further analysis) (since
+ 0.9.0), accept
(matching the rule accepts
+ the packet with no further analysis), return
+ (matching the rule passes this filter, but returns control to
+ the calling filter for further
+ analysis) (since 0.9.7),
+ or continue (matching the rule goes on to the next
+ rule for further analysis) (since
+ 0.9.7).
in
, out
or
diff --git a/src/conf/nwfilter_conf.c b/src/conf/nwfilter_conf.c
index 08ede48fa9a48050746b4a4533d25699b8ad007e..e0c2fb630f606b04e1b2b4991dec0d913be8f087 100644
--- a/src/conf/nwfilter_conf.c
+++ b/src/conf/nwfilter_conf.c
@@ -55,12 +55,16 @@
VIR_ENUM_IMPL(virNWFilterRuleAction, VIR_NWFILTER_RULE_ACTION_LAST,
"drop",
"accept",
- "reject");
+ "reject",
+ "return",
+ "continue");
VIR_ENUM_IMPL(virNWFilterJumpTarget, VIR_NWFILTER_RULE_ACTION_LAST,
"DROP",
"ACCEPT",
- "REJECT");
+ "REJECT",
+ "RETURN",
+ "CONTINUE");
VIR_ENUM_IMPL(virNWFilterRuleDirection, VIR_NWFILTER_RULE_DIRECTION_LAST,
"in",
diff --git a/src/conf/nwfilter_conf.h b/src/conf/nwfilter_conf.h
index 5306403a78118cc4cac87dc72b965aee7884048b..c96851aabbb4780c834cbc127d3cb2962932fdf4 100644
--- a/src/conf/nwfilter_conf.h
+++ b/src/conf/nwfilter_conf.h
@@ -299,6 +299,8 @@ enum virNWFilterRuleActionType {
VIR_NWFILTER_RULE_ACTION_DROP = 0,
VIR_NWFILTER_RULE_ACTION_ACCEPT,
VIR_NWFILTER_RULE_ACTION_REJECT,
+ VIR_NWFILTER_RULE_ACTION_RETURN,
+ VIR_NWFILTER_RULE_ACTION_CONTINUE,
VIR_NWFILTER_RULE_ACTION_LAST,
};