diff options
author | Robin Geuze <robing@transip.nl> | 2019-05-28 07:03:59 +0000 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-09-30 18:23:17 +0200 |
commit | fd31364ba44ee57274faaac53b895bcc717f77c9 (patch) | |
tree | 23f6ac429d6367f3db43751947d2a060e53b0089 /include/hash.h | |
parent | 7c5f4b390f4b8dc02aceb0a18ed7c59ff14f392c (diff) |
conntrackd: Fix "Address Accept" filter case
This fixes a bug in the Address Accept filter case where if you only
specify either addresses or masks it would never match, eg.
Filter From Usespace {
Address Accept {
IPv4_address 127.0.0.1
}
}
or
Filter From Usespace {
Address Accept {
IPv4_address 0.0.0.0/0
}
}
If lpm filter fails, fall back to hashtable lookup for exact matching.
If lpm filter succeeds, then depending on the policy, skip hashtable
lookup (in case policy is accept) or return mismatch (in case policy is
ignore).
Signed-off-by: Robin Geuze <robing@transip.nl>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/hash.h')
0 files changed, 0 insertions, 0 deletions