diff options
author | Florian Westphal <fw@strlen.de> | 2022-01-25 17:52:59 +0100 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2022-01-29 13:38:11 +0100 |
commit | 6aba94ef5f50734dc72f455f195787b9c8540a78 (patch) | |
tree | 7e1dca5c4a1117a797705b9176a58210d846195e /m4 | |
parent | c034cf31dd1a9079e197e4e6bb72bc7d19448114 (diff) |
nft: prefer native expressions instead of tcp match
Instead of using nft_compat+xtables tcp match, prefer to
emit payload+cmp or payload+range expression.
Unlike udp, tcp has flag bits that can be matched too but
we have to fall back to the xt expression for now.
We also don't support tcp option match, but thats a rarely
used feature anyway.
Delinearization support for ports was added in previous patches.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'm4')
0 files changed, 0 insertions, 0 deletions