• Pablo Neira Ayuso's avatar
    netfilter: add inet ingress support · 60a3815d
    Pablo Neira Ayuso authored
    This patch adds the NF_INET_INGRESS pseudohook for the NFPROTO_INET
    family. This is a mapping this new hook to the existing NFPROTO_NETDEV
    and NF_NETDEV_INGRESS hook. The hook does not guarantee that packets are
    inet only, users must filter out non-ip traffic explicitly.
    
    This infrastructure makes it easier to support this new hook in nf_tables.
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    60a3815d
core.c 17.7 KB