Re: does nft 'tcp option ... exists' work?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Maciej Żenczykowski <zenczykowski@xxxxxxxxx> wrote:
> wrt. the fix, perhaps this should be fixed both in the kernel and in userspace?
> it seems wrong to have unpredictable endian-ness dependent kernel logic,
> but a userspace fix/workaround would be easier to deploy...

Right.

> Is there some way I could feed raw nf bytecode in via nft syntax (if
> no... should support for this be added?) ?

You could try this:

tcp option @34,8,8 == 34

(where 34 is the kind/option you are looking for).





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux