diff options
| author | Stephen Suryaputra <ssuryaextr@gmail.com> | 2019-07-03 20:30:52 -0400 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-07-04 14:29:08 +0200 |
| commit | 226a0e072d5c1edeb53cb61b959b011168c5c29a (patch) | |
| tree | 07e43268efe15dc8b64b8ca9baca71e02239213f /src/scanner.l | |
| parent | 1694c01c30fba06461ca82ede070bf6a9cd9a4db (diff) | |
exthdr: add support for matching IPv4 options
Add capability to have rules matching IPv4 options. This is developed
mainly to support dropping of IP packets with loose and/or strict source
route route options.
Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/scanner.l')
| -rw-r--r-- | src/scanner.l | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/scanner.l b/src/scanner.l index b46b25e7..7f6c0431 100644 --- a/src/scanner.l +++ b/src/scanner.l @@ -402,6 +402,14 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "protocol" { return PROTOCOL; } "checksum" { return CHECKSUM; } +"lsrr" { return LSRR; } +"rr" { return RR; } +"ssrr" { return SSRR; } +"ra" { return RA; } + +"value" { return VALUE; } +"ptr" { return PTR; } + "echo" { return ECHO; } "eol" { return EOL; } "maxseg" { return MAXSEG; } |