OSDN Git Service

netfilter: nf_tables: add support for matching IPv4 options
authorStephen Suryaputra <ssuryaextr@gmail.com>
Thu, 20 Jun 2019 16:19:59 +0000 (12:19 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Jun 2019 16:35:51 +0000 (18:35 +0200)
commitdbb5281a1f84b2f93032d4864c211ce8a20811a7
treea204da3a545973d53b5f9ae4672cc34934d86775
parentf76c7bfca4326140d86ab86168214ef447177bc0
netfilter: nf_tables: add support for matching IPv4 options

This is the kernel change for the overall changes with this description:
Add capability to have rules matching IPv4 options. This is developed
mainly to support dropping of IP packets with loose and/or strict source
route route options.

Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/ipv4/ip_options.c
net/netfilter/nft_exthdr.c