This is the kernel change for the overall changes with this description: Add capability to have rules matching IPv4 options. This is developed mainly to support dropping of IP packets with loose and/or strict source route route options.
Showing the changes to include/uapi/linux (1 of 3 files). Show all
Unified · Split
| @@ -730,10 +730,12 @@ enum nft_exthdr_flags { · 729 unmodified lines | ||
| 730 | 730 | * |
| 731 | 731 | * @NFT_EXTHDR_OP_IPV6: match against ipv6 extension headers |
| 732 | 732 | * @NFT_EXTHDR_OP_TCP: match against tcp options |
| 733 | + * @NFT_EXTHDR_OP_IPV4: match against ipv4 options | |
| 733 | 734 | */ |
| 734 | 735 | enum nft_exthdr_op { |
| 735 | 736 | NFT_EXTHDR_OP_IPV6, |
| 736 | 737 | NFT_EXTHDR_OP_TCPOPT, |
| 738 | + NFT_EXTHDR_OP_IPV4, | |
| 737 | 739 | __NFT_EXTHDR_OP_MAX |
| 738 | 740 | }; |
| 739 | 741 | #define NFT_EXTHDR_OP_MAX (__NFT_EXTHDR_OP_MAX - 1) |