From 49f6e9a846c6c8325b95debe04d5ebc3c01246fb Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 1 Dec 2017 13:40:21 +0100 Subject: meta: add secpath support This can be used to check if a packet has a secpath attached to it, i.e. was subject to ipsec processing. Example: add rule inet raw prerouting meta secpath exists accept Signed-off-by: Florian Westphal --- tests/py/inet/meta.t | 2 ++ 1 file changed, 2 insertions(+) (limited to 'tests/py/inet/meta.t') diff --git a/tests/py/inet/meta.t b/tests/py/inet/meta.t index bd225e3d..d68896dc 100644 --- a/tests/py/inet/meta.t +++ b/tests/py/inet/meta.t @@ -12,3 +12,5 @@ meta nfproto ipv4 tcp dport 22;ok meta nfproto ipv4 ip saddr 1.2.3.4;ok;ip saddr 1.2.3.4 meta nfproto ipv6 meta l4proto tcp;ok;meta nfproto ipv6 meta l4proto 6 meta nfproto ipv4 counter ip saddr 1.2.3.4;ok +meta secpath exists;ok +meta secpath missing;ok -- cgit v1.2.3