low hanging fruit: use native meta+cmp instead of libxt_pkttype. First patch adds dissection, second patch switches to native expression. Last patch adds support for 'otherhost' mnemonic, useless for iptables but useful for ebtables.
low hanging fruit: use native meta+cmp instead of libxt_pkttype. First patch adds dissection, second patch switches to native expression. Last patch adds support for 'otherhost' mnemonic, useless for iptables but useful for ebtables.