diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-09-23 15:23:33 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-09-25 23:16:42 +0200 |
| commit | 0f3cd9b3697708c86a825ae3cedabf7be6fd3e72 (patch) | |
| tree | 14b59bebf1a6dc16a961864a93febfbacc4d3715 /fs/hfs | |
| parent | netfilter: xt_socket: fix transparent match for IPv6 request sockets (diff) | |
| download | linux-0f3cd9b3697708c86a825ae3cedabf7be6fd3e72.tar.xz linux-0f3cd9b3697708c86a825ae3cedabf7be6fd3e72.zip | |
netfilter: nf_tables: add range expression
Inverse ranges != [a,b] are not currently possible because rules are
composites of && operations, and we need to express this:
data < a || data > b
This patch adds a new range expression. Positive ranges can be already
through two cmp expressions:
cmp(sreg, data, >=)
cmp(sreg, data, <=)
This new range expression provides an alternative way to express this.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'fs/hfs')
0 files changed, 0 insertions, 0 deletions