ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-24 07:46:48 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

netfilter: add bpf match support

Browse Source 
Add xt_bpf modules to {kmod-ipt,iptables-mod}-filter.

Match using Linux Socket Filter. Expects a BPF program in decimal
format. This is the format generated by the nfbpf_compile utility.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
(backported from ab07ae2f27)
This commit is contained in:
Alin Nastac 2018-06-25 10:22:21 +02:00 committed by Jo-Philipp Wich
parent 9f8f5d4d14
commit 7408cdaa31
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/netfilter.mk
View File

@ -106,6 +106,7 @@ $(eval $(call nf_add,IPT_PHYSDEV,CONFIG_NETFILTER_XT_MATCH_PHYSDEV, $(P_XT)xt_ph
# filter # filter
$(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_STRING, $(P_XT)xt_string)) $(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_STRING, $(P_XT)xt_string))
$(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_BPF, $(P_XT)xt_bpf))
# ipopt # ipopt

1
package/kernel/linux/modules/netfilter.mk
View File

@ -237,6 +237,7 @@ define KernelPackage/ipt-filter/description
Netfilter (IPv4) kernel modules for packet content inspection Netfilter (IPv4) kernel modules for packet content inspection
Includes: Includes:
- string - string
- bpf
endef endef
$(eval $(call KernelPackage,ipt-filter)) $(eval $(call KernelPackage,ipt-filter))

1
package/network/utils/iptables/Makefile
View File

@ -150,6 +150,7 @@ Includes support for:
Matches: Matches:
- string - string
- bpf
endef endef