Commit 96d9f2a7 authored by Liping Zhang's avatar Liping Zhang Committed by Pablo Neira Ayuso
Browse files

netfilter: nft_meta: permit pkttype mangling in ip/ip6 prerouting 



After supporting this, we can combine it with hash expression to emulate
the 'cluster match'.

Suggested-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarLiping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 0ecba4d9

net/netfilter/nft_meta.c

+5 −0
Original line number Diff line number Diff line
@@ -310,6 +310,11 @@ int nft_meta_set_validate(const struct nft_ctx *ctx, 
	case NFPROTO_NETDEV:

		hooks = 1 << NF_NETDEV_INGRESS;

		break;

	case NFPROTO_IPV4:

	case NFPROTO_IPV6:

	case NFPROTO_INET:

		hooks = 1 << NF_INET_PRE_ROUTING;

		break;

	default:

		return -EOPNOTSUPP;

	}