]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: esp: Save/xlate inverted full ranges
authorPhil Sutter <phil@nwl.cc>
Thu, 1 Feb 2024 14:47:09 +0000 (15:47 +0100)
committerPhil Sutter <phil@nwl.cc>
Fri, 2 Feb 2024 17:26:14 +0000 (18:26 +0100)
commitda13460f05eaee3b92c3b6d0ca2023c5377f4aca
treeea4313678cd6fe7de8d20ca08196e265741027aa
parenta0e5dad34a6410e4960feb621780c4b06f374477
extensions: esp: Save/xlate inverted full ranges

Also add a translation for plain '-m esp' match which depends on the
address family: While ip6tables-translate may emit an exthdr exists
match, iptables-translate must stick to meta l4proto.

Fixes: 6cfa723a83d45 ("extensions: libxt_esp: Add translation to nft")
Signed-off-by: Phil Sutter <phil@nwl.cc>
extensions/libxt_esp.c
extensions/libxt_esp.t
extensions/libxt_esp.txlate