diff options
author | Eric Leblond <eric@regit.org> | 2013-07-29 00:30:56 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-07-31 19:27:25 +0200 |
commit | d0218ea4573837d775c3e605913a45021f1526b9 (patch) | |
tree | e22d649f5bb96353d2ab1fda6a78dfae279b774e /src/scanner.l | |
parent | a320531e78f1bcb12b24da048f34592771392a9a (diff) |
src: Add icmpv6 support
This patch adds ICMPv6 support to nftables. It is now possible to
write rules such as:
nft add rule ip6 filter input icmpv6 type nd-router-advert accept
Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/scanner.l')
-rw-r--r-- | src/scanner.l | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/scanner.l b/src/scanner.l index 7946e94f..59e0aac7 100644 --- a/src/scanner.l +++ b/src/scanner.l @@ -323,6 +323,10 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "nexthdr" { return NEXTHDR; } "hoplimit" { return HOPLIMIT; } +"icmpv6" { return ICMP6; } +"param-problem" { return PPTR; } +"max-delay" { return MAXDELAY; } + "ah" { return AH; } "reserved" { return RESERVED; } "spi" { return SPI; } |