KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

netfilter: add bpf match support

Browse source 
Add xt_bpf modules to {kmod-ipt,iptables-mod}-filter.

Match using Linux Socket Filter. Expects a BPF program in decimal
format. This is the format generated by the nfbpf_compile utility.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
This commit is contained in:
Alin Nastac 2018-06-25 10:22:21 +02:00 committed by John Crispin
parent 094d49cddf
commit ab07ae2f27
3 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
include/netfilter.mk
View file

@ -106,6 +106,7 @@ $(eval $(call nf_add,IPT_PHYSDEV,CONFIG_NETFILTER_XT_MATCH_PHYSDEV, $(P_XT)xt_ph
# filter # filter
$(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_STRING, $(P_XT)xt_string)) $(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_STRING, $(P_XT)xt_string))
$(eval $(call nf_add,IPT_FILTER,CONFIG_NETFILTER_XT_MATCH_BPF, $(P_XT)xt_bpf))
# ipopt # ipopt

1
package/kernel/linux/modules/netfilter.mk
View file

@ -237,6 +237,7 @@ define KernelPackage/ipt-filter/description
Netfilter (IPv4) kernel modules for packet content inspection Netfilter (IPv4) kernel modules for packet content inspection
Includes: Includes:
- string - string
- bpf
endef endef
$(eval $(call KernelPackage,ipt-filter)) $(eval $(call KernelPackage,ipt-filter))

1
package/network/utils/iptables/Makefile
View file

@ -151,6 +151,7 @@ Includes support for:
Matches: Matches:
- string - string
- bpf
endef endef