From 88993e0ce90f05a1b6e1b09a8dbbf41d6d4551b7 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Mon, 19 Apr 2021 11:56:15 +0200 Subject: parser_bison: missing relational operation on flag list Complete e6c32b2fa0b8 ("src: add negation match on singleton bitmask value") which was missing comma-separated list of flags. This patch provides a shortcut for: tcp flags and fin,rst == 0 which allows to check for the packet whose fin and rst bits are unset: # nft add rule x y tcp flags not fin,rst counter Signed-off-by: Pablo Neira Ayuso --- tests/py/inet/tcp.t | 1 + 1 file changed, 1 insertion(+) (limited to 'tests/py/inet/tcp.t') diff --git a/tests/py/inet/tcp.t b/tests/py/inet/tcp.t index 29f06f5a..5f2caea9 100644 --- a/tests/py/inet/tcp.t +++ b/tests/py/inet/tcp.t @@ -81,6 +81,7 @@ tcp flags & (syn|fin) == (syn|fin);ok;tcp flags & (fin | syn) == fin | syn tcp flags & (fin | syn | rst | psh | ack | urg | ecn | cwr) == fin | syn | rst | psh | ack | urg | ecn | cwr;ok;tcp flags == 0xff tcp flags { syn, syn | ack };ok tcp flags & (fin | syn | rst | psh | ack | urg) == { fin, ack, psh | ack, fin | psh | ack };ok +tcp flags ! fin,rst;ok tcp window 22222;ok tcp window 22;ok -- cgit v1.2.3