| commit | 60a3815da702fd9e4759945f26cce5c47d3967ad | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Oct 08 01:14:47 2020 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Oct 12 01:57:34 2020 +0200 |
| tree | 24e82983b0beedc92c51921f49f13089bfb20ae2 | |
| parent | ddcfa710d40b39e3134d318e5fe07ba672288054 [diff] |
netfilter: add inet ingress support This patch adds the NF_INET_INGRESS pseudohook for the NFPROTO_INET family. This is a mapping this new hook to the existing NFPROTO_NETDEV and NF_NETDEV_INGRESS hook. The hook does not guarantee that packets are inet only, users must filter out non-ip traffic explicitly. This infrastructure makes it easier to support this new hook in nf_tables. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>