diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-11-02 14:01:58 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-11-08 10:53:59 +0100 |
commit | b67abc51ba6f78be79f344dfda9c6d0753d79aea (patch) | |
tree | 974a155489e69c0a9a5c9f3ee209ca5bec2d3c99 /src/evaluate.c | |
parent | dad3338f1f76a4a5bd782bae9c6b48941dfb1e31 (diff) |
src: raw payload match and mangle on inner header / payload data
This patch adds support to match on inner header / payload data:
# nft add rule x y @ih,32,32 0x14000000 counter
you can also mangle payload data:
# nft add rule x y @ih,32,32 set 0x14000000 counter
This update triggers a checksum update at the layer 4 header via
csum_flags, mangling odd bytes is also aligned to 16-bits.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/evaluate.c')
-rw-r--r-- | src/evaluate.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/evaluate.c b/src/evaluate.c index 6a8c396f..a268b3cb 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -2446,6 +2446,9 @@ static bool stmt_evaluate_payload_need_csum(const struct expr *payload) { const struct proto_desc *desc; + if (payload->payload.base == PROTO_BASE_INNER_HDR) + return true; + desc = payload->payload.desc; return desc && desc->checksum_key; |