]> git.ipfire.org Git - thirdparty/nftables.git/commit
meta: add secpath support
authorFlorian Westphal <fw@strlen.de>
Fri, 1 Dec 2017 12:40:21 +0000 (13:40 +0100)
committerFlorian Westphal <fw@strlen.de>
Tue, 16 Jan 2018 14:57:22 +0000 (15:57 +0100)
commit49f6e9a846c6c8325b95debe04d5ebc3c01246fb
tree4de70952424cf45846cc67287967fca823edc0c9
parent1dbd13c97e300dcaf6581bc7b0b0f23cc74c6645
meta: add secpath support

This can be used to check if a packet has a secpath attached to it, i.e.
was subject to ipsec processing.  Example:

add rule inet raw prerouting meta secpath exists accept

Signed-off-by: Florian Westphal <fw@strlen.de>
doc/nft.xml
include/linux/netfilter/nf_tables.h
src/meta.c
tests/py/inet/meta.t
tests/py/inet/meta.t.payload