Hi,
> commit 11c4c687b1df11aeadd9ab76f37c4a89144d9a73
> Author: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
> Date: Wed Jan 2 20:14:28 2008 +0100
>
> [NETFILTER]: Merge ipt_ah and ip6t_ah into xt_ah
>
> Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
+static struct xt_match ah_mt_reg[] __read_mostly = {
+ {
+ .name = "ah",
+ .revision = 0,
+ .family = AF_INET,
+ .match = ah_mt4,
+ .matchsize = sizeof(struct ipt_ah),
+ .checkentry = ah_mt4_check,
+ .me = THIS_MODULE,
+ },
+#ifdef WITH_IPV6
+ {
+ .name = "ah",
+ .revision = 0,
+ .family = AF_INET6,
+ .match = ah_mt6,
+ .matchsize = sizeof(struct ip6t_ah),
+ .checkentry = ah_mt6_check,
+ .me = THIS_MODULE,
+ },
+#endif
+};
ah match for IPv4 requires ".proto = IPPROTO_AH," as written in
the current ipt_ah.c. For IPv6, it is not needed. Because AH header is
an extension header, not transport header.
-- Yasuyuki Kozakai
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
