diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-09-23 15:23:33 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-09-25 23:16:42 +0200 |
| commit | 0f3cd9b3697708c86a825ae3cedabf7be6fd3e72 (patch) | |
| tree | 14b59bebf1a6dc16a961864a93febfbacc4d3715 /net/netfilter/Makefile | |
| parent | 7a682575ad4829b4de3e672a6ad5f73a05826b82 (diff) | |
| download | linux-0-day-0f3cd9b3697708c86a825ae3cedabf7be6fd3e72.tar.gz linux-0-day-0f3cd9b3697708c86a825ae3cedabf7be6fd3e72.tar.xz | |
netfilter: nf_tables: add range expression
Inverse ranges != [a,b] are not currently possible because rules are
composites of && operations, and we need to express this:
data < a || data > b
This patch adds a new range expression. Positive ranges can be already
through two cmp expressions:
cmp(sreg, data, >=)
cmp(sreg, data, <=)
This new range expression provides an alternative way to express this.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/Makefile')
| -rw-r--r-- | net/netfilter/Makefile | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/netfilter/Makefile b/net/netfilter/Makefile index 0c8581100ac62..c23c3c84416f7 100644 --- a/net/netfilter/Makefile +++ b/net/netfilter/Makefile @@ -71,8 +71,9 @@ obj-$(CONFIG_NF_DUP_NETDEV) += nf_dup_netdev.o # nf_tables nf_tables-objs += nf_tables_core.o nf_tables_api.o nf_tables_trace.o -nf_tables-objs += nft_immediate.o nft_cmp.o nft_lookup.o nft_dynset.o +nf_tables-objs += nft_immediate.o nft_cmp.o nft_range.o nf_tables-objs += nft_bitwise.o nft_byteorder.o nft_payload.o +nf_tables-objs += nft_lookup.o nft_dynset.o obj-$(CONFIG_NF_TABLES) += nf_tables.o obj-$(CONFIG_NF_TABLES_INET) += nf_tables_inet.o |