]> git.ipfire.org Git - thirdparty/nftables.git/commit
exthdr: add boolean DCCP option matching
authorJeremy Sowden <jeremy@azazel.net>
Tue, 11 Apr 2023 20:45:34 +0000 (21:45 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 1 Jun 2023 19:43:16 +0000 (21:43 +0200)
commit6ab0fd6c67dbccedb49209b94eb7f740dd32fd2a
tree8f376a718fd3c1bc28577a6fb00ec5c3ccdf9133
parent19245dd1e0c8e1e007a3b98527e379337d57b49a
exthdr: add boolean DCCP option matching

Iptables supports the matching of DCCP packets based on the presence
or absence of DCCP options.  Extend exthdr expressions to add this
functionality to nftables.

Link: https://bugzilla.netfilter.org/show_bug.cgi?id=930
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
16 files changed:
doc/libnftables-json.adoc
doc/payload-expression.txt
include/dccpopt.h [new file with mode: 0644]
include/exthdr.h
include/linux/netfilter/nf_tables.h
src/Makefile.am
src/dccpopt.c [new file with mode: 0644]
src/evaluate.c
src/exthdr.c
src/json.c
src/parser_bison.y
src/parser_json.c
src/scanner.l
tests/py/inet/dccp.t
tests/py/inet/dccp.t.json
tests/py/inet/dccp.t.payload