diff options
author | Alvaro Neira <alvaroneay@gmail.com> | 2014-10-23 19:36:56 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-10-24 12:00:57 +0200 |
commit | c00d1287c088a6694b427c5143c98c028677c4bb (patch) | |
tree | 3383d8eccb9a0ed8f36b7ff8e6967c893c783cad /include/datatype.h | |
parent | 3e6ab2b33514228f892ba6c8389e40c4e82bc980 (diff) |
evaluate: reject: check the context in reject without reason for bridge and inet tables
In rules like:
nft add rule inet filter input reject
or
nft add rule bridge filter input reject
we use icmpx to reject it. But if we have network context, we also use type of
reject. With this patch, we check the network context. If we don't have context,
we still use icmpx. However, if we have rules with network context like:
nft add rule inet meta nfproto ipv4 reject
or
nft add rule bridge ether type ipv6 reject
We are going to use icmp or icmpv6 to reject it taking into account the network
context.
Signed-off-by: Alvaro Neira Ayuso <alvaroneay@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/datatype.h')
0 files changed, 0 insertions, 0 deletions