---
name: "ipq_set_verdict"
section: "3"
platform: "linux"
package: "iptables"
version: "1:1.8.13-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/ipq_set_verdict"
---

# ipq\_set\_verdict(3)

issue verdict and optionally modified packet to kernel

## NAME

ipq\_set\_verdict — issue verdict and optionally modified packet to kernel

## SYNOPSIS

**#include \<linux/netfilter.h\>**\
 **#include \<libipq.h\>**

**int ipq\_set\_verdict(const struct ipq\_handle \****h***, ipq\_id\_t** *id***, unsigned int** *verdict***, size\_t** *data\_len***, unsigned char \****buf***);**

## DESCRIPTION

The **ipq\_set\_verdict** function issues a verdict on a packet previously obtained with **ipq\_read**, specifying the intended disposition of the packet, and optionally supplying a modified version of the payload data.

The *h* parameter is a context handle which must previously have been returned  successfully from a call to **ipq\_create\_handle**.

The *id* parameter is the packet identifier obtained via **ipq\_get\_packet**.

The *verdict* parameter must be one of:

- **NF\_ACCEPT**

  Accept the packet and continue traversal within the kernel.\

- **NF\_DROP**

  Drop the packet.

- **NF\_QUEUE**

  Requeue the packet.

**NF\_STOLEN** and **NF\_REPEAT** are kernel-internal constants and should not be used from userspace as their exact side effects have not been investigated.

The *data\_len* parameter is the length of the data pointed to by *buf*, the optional replacement payload data.

If simply setting a verdict without modifying the payload data, use zero for *data\_len* and NULL for *buf*.

The application is responsible for recalculating any packet checksums when modifying packets.

## RETURN VALUE

On failure, -1 is returned.\
 On success, a non-zero positive value is returned.

## ERRORS

On error, a descriptive error message will be available via the **ipq\_errstr** function.

## BUGS

None known.

## AUTHOR

James Morris \<jmorris@intercode.com.au\>

## COPYRIGHT

Copyright (c) 2000-2001 Netfilter Core Team.

Distributed under the GNU General Public License.

## SEE ALSO

[**iptables**(8)](/iptables/8.md), [**libipq**(3)](/libipq/3.md).