]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: add support for matching IPv4 options
authorStephen Suryaputra <ssuryaextr@gmail.com>
Thu, 20 Jun 2019 16:19:59 +0000 (12:19 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Jun 2019 16:35:51 +0000 (18:35 +0200)
commitf8e9c1677aa644eee44d2a6a7aa5a406441a029b
treea204da3a545973d53b5f9ae4672cc34934d86775
parent09627d9f042cbef98ae30cb4c962316f6277356f
netfilter: nf_tables: add support for matching IPv4 options

This is the kernel change for the overall changes with this description:
Add capability to have rules matching IPv4 options. This is developed
mainly to support dropping of IP packets with loose and/or strict source
route route options.

Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/ipv4/ip_options.c
net/netfilter/nft_exthdr.c