]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nft_exthdr: add boolean DCCP option matching
authorJeremy Sowden <jeremy@azazel.net>
Tue, 9 May 2023 21:19:45 +0000 (22:19 +0100)
committerFlorian Westphal <fw@strlen.de>
Thu, 18 May 2023 06:48:54 +0000 (08:48 +0200)
commitb9f9a485fb0eb80b0e2b90410b28cbb9b0e85687
treedb9da6e7738d3cc83ac2b5a65949f4e46696cecc
parentd4b7f29eb85c93893bc27388b37709efbc3c9a0e
netfilter: nft_exthdr: add boolean DCCP option matching

The xt_dccp iptables module supports the matching of DCCP packets based
on the presence or absence of DCCP options.  Extend nft_exthdr to add
this functionality to nftables.

Link: https://bugzilla.netfilter.org/show_bug.cgi?id=930
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_exthdr.c