]> git.ipfire.org Git - thirdparty/nftables.git/commit
icmpv6: Allow matching target address in NS/NA, redirect and MLD
authorNicolas Cavallari <nicolas.cavallari@green-communications.fr>
Wed, 20 Sep 2023 15:03:34 +0000 (17:03 +0200)
committerFlorian Westphal <fw@strlen.de>
Fri, 6 Oct 2023 09:22:20 +0000 (11:22 +0200)
commit2e86f45d0260a0dab8fed974853d84d9923bbc55
treedc38fd171b9261f4155da20512b3054be80e2c7a
parent8b9ae77598b4d074cfa6dc263e6064d9bd5610d4
icmpv6: Allow matching target address in NS/NA, redirect and MLD

It was currently not possible to match the target address of a neighbor
solicitation or neighbor advertisement against a dynamic set, unlike in
IPv4.

Since they are many ICMPv6 messages with an address at the same offset,
allow filtering on the target address for all icmp types that have one.

While at it, also allow matching the destination address of an ICMPv6
redirect.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Florian Westphal <fw@strlen.de>
doc/payload-expression.txt
include/proto.h
src/parser_bison.y
src/payload.c
src/proto.c
src/scanner.l
tests/py/ip6/icmpv6.t
tests/py/ip6/icmpv6.t.json
tests/py/ip6/icmpv6.t.payload.ip6