]> git.ipfire.org Git - thirdparty/iptables.git/commit
nft: use payload matching for layer 4 protocol
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 9 Jun 2023 10:30:30 +0000 (12:30 +0200)
committerPhil Sutter <phil@nwl.cc>
Fri, 16 Jun 2023 11:37:16 +0000 (13:37 +0200)
commit69278f9602b43df80821c55c21c0666f5c6f7e2f
tree2f513de9156cc4dd01b74d53847678d90ab62354
parent3513f2dd8b9c101dcecee6145a7eac62297ca1c8
nft: use payload matching for layer 4 protocol

This is an IPv4 header, which does not require the special handling
as in IPv6, use the payload matching instead of meta l4proto which
is slightly faster in this case.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Phil Sutter <phil@nwl.cc>
iptables/nft-ipv4.c