Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | src: use NFT_OSF_MAXGENRELEN instead of IFNAMSIZ in osf.c | Fernando Fernandez Mancera | 2018-08-07 | 1 | -3/+1 |
| | | | | | | | | As no "genre" in pf.os exceed 16 bytes of length, we reduce NFT_OSF_MAXGENRELEN parameter to 16 bytes and use it instead of IFNAMSIZ. Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | src: introduce passive OS fingerprint matching | Fernando Fernandez Mancera | 2018-08-04 | 1 | -0/+35 |
Add support for "osf" expression. Example: table ip foo { chain bar { type filter hook input priority 0; policy accept; osf name "Linux" counter packets 3 bytes 132 } } Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> |