diff options
| author | Stephen Suryaputra <ssuryaextr@gmail.com> | 2019-06-20 12:19:59 -0400 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-06-21 12:35:51 -0400 |
| commit | dbb5281a1f84b2f93032d4864c211ce8a20811a7 (patch) | |
| tree | a204da3a545973d53b5f9ae4672cc34934d86775 /net/ipv4/ip_options.c | |
| parent | f76c7bfca4326140d86ab86168214ef447177bc0 (diff) | |
netfilter: nf_tables: add support for matching IPv4 options
This is the kernel change for the overall changes with this description:
Add capability to have rules matching IPv4 options. This is developed
mainly to support dropping of IP packets with loose and/or strict source
route route options.
Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv4/ip_options.c')
| -rw-r--r-- | net/ipv4/ip_options.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv4/ip_options.c b/net/ipv4/ip_options.c index 3db31bb9df50..ddaa01ec2bce 100644 --- a/net/ipv4/ip_options.c +++ b/net/ipv4/ip_options.c | |||
| @@ -473,6 +473,7 @@ error: | |||
| 473 | *info = htonl((pp_ptr-iph)<<24); | 473 | *info = htonl((pp_ptr-iph)<<24); |
| 474 | return -EINVAL; | 474 | return -EINVAL; |
| 475 | } | 475 | } |
| 476 | EXPORT_SYMBOL(__ip_options_compile); | ||
| 476 | 477 | ||
| 477 | int ip_options_compile(struct net *net, | 478 | int ip_options_compile(struct net *net, |
| 478 | struct ip_options *opt, struct sk_buff *skb) | 479 | struct ip_options *opt, struct sk_buff *skb) |