This is the kernel change for the overall changes with this description: Add capability to have rules matching IPv4 options. This is developed mainly to support dropping of IP packets with loose and/or strict source route route options.
Showing the changes to include/uapi/linux (1 of 3 files). Show all
Unified · Split
| @@ -730,10 +730,12 @@ enum nft_exthdr_flags { · 729 unmodified lines | |||
| 730 | * | 730 | * |
| 731 | * @NFT_EXTHDR_OP_IPV6: match against ipv6 extension headers | 731 | * @NFT_EXTHDR_OP_IPV6: match against ipv6 extension headers |
| 732 | * @NFT_EXTHDR_OP_TCP: match against tcp options | 732 | * @NFT_EXTHDR_OP_TCP: match against tcp options |
| 733 | * @NFT_EXTHDR_OP_IPV4: match against ipv4 options | ||
| 733 | */ | 734 | */ |
| 734 | enum nft_exthdr_op { | 735 | enum nft_exthdr_op { |
| 735 | NFT_EXTHDR_OP_IPV6, | 736 | NFT_EXTHDR_OP_IPV6, |
| 736 | NFT_EXTHDR_OP_TCPOPT, | 737 | NFT_EXTHDR_OP_TCPOPT, |
| 738 | NFT_EXTHDR_OP_IPV4, | ||
| 737 | __NFT_EXTHDR_OP_MAX | 739 | __NFT_EXTHDR_OP_MAX |
| 738 | }; | 740 | }; |
| 739 | #define NFT_EXTHDR_OP_MAX (__NFT_EXTHDR_OP_MAX - 1) | 741 | #define NFT_EXTHDR_OP_MAX (__NFT_EXTHDR_OP_MAX - 1) |