Enable support for router-advertisement and router-solicitation icmp types in nft.
Example:
$ sudo nft add rule ip filter input icmp type router-advertisement counter accept
$ sudo nft add rule ip filter input icmp type router-solicitation counter accept
Signed-off-by: Laura Garcia Liebana <nevola@xxxxxxxxx>
---
src/proto.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/proto.c b/src/proto.c
index 0ed98ed..b54a4c1 100644
--- a/src/proto.c
+++ b/src/proto.c
@@ -299,6 +299,8 @@ static const struct symbol_table icmp_type_tbl = {
SYMBOL("source-quench", ICMP_SOURCE_QUENCH),
SYMBOL("redirect", ICMP_REDIRECT),
SYMBOL("echo-request", ICMP_ECHO),
+ SYMBOL("router-advertisement", ICMP_ROUTERADVERT),
+ SYMBOL("router-solicitation", ICMP_ROUTERSOLICIT),
SYMBOL("time-exceeded", ICMP_TIME_EXCEEDED),
SYMBOL("parameter-problem", ICMP_PARAMETERPROB),
SYMBOL("timestamp-request", ICMP_TIMESTAMP),
--
2.7.0
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
