diff options
| author | Florian Westphal <fw@strlen.de> | 2023-03-16 15:44:08 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2023-03-22 21:48:59 +0100 |
| commit | 36ce9982ef2fb63fdf39996900866965d71f5a5e (patch) | |
| tree | 4c3ea50f81ebb82e85ddcf019c876201b404a680 /net/ipv6/ip6_input.c | |
| parent | netfilter: xtables: disable 32bit compat interface by default (diff) | |
| download | linux-36ce9982ef2fb63fdf39996900866965d71f5a5e.tar.xz linux-36ce9982ef2fb63fdf39996900866965d71f5a5e.zip | |
xtables: move icmp/icmpv6 logic to xt_tcpudp
icmp/icmp6 matches are baked into ip(6)_tables.ko.
This means that even if iptables-nft is used, a rule like
"-p icmp --icmp-type 1" will load the ip(6)tables modules.
Move them to xt_tcpdudp.ko instead to avoid this.
This will also allow to eventually add kconfig knobs to build kernels
that support iptables-nft but not iptables-legacy (old set/getsockopt
interface).
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'net/ipv6/ip6_input.c')
0 files changed, 0 insertions, 0 deletions