Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > > if (skb->protocol != htons(ETH_P_IP)) > > > goto err; > > > > Wouldn't it be preferable to just use nft_pf() != NFPROTO_IPV4? > > Then IPv4 options extension won't work from bridge and netdev families > too, right? Ah, right.