diff options
author | Florian Westphal <fw@strlen.de> | 2023-03-16 17:44:08 +0300 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2023-03-22 23:48:59 +0300 |
commit | 36ce9982ef2fb63fdf39996900866965d71f5a5e (patch) | |
tree | 4c3ea50f81ebb82e85ddcf019c876201b404a680 /net/ipv6/ip6_input.c | |
parent | bde7170a04d69ab8013d0582e60e414d46d46dd6 (diff) | |
download | linux-36ce9982ef2fb63fdf39996900866965d71f5a5e.tar.xz |
xtables: move icmp/icmpv6 logic to xt_tcpudp
icmp/icmp6 matches are baked into ip(6)_tables.ko.
This means that even if iptables-nft is used, a rule like
"-p icmp --icmp-type 1" will load the ip(6)tables modules.
Move them to xt_tcpdudp.ko instead to avoid this.
This will also allow to eventually add kconfig knobs to build kernels
that support iptables-nft but not iptables-legacy (old set/getsockopt
interface).
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'net/ipv6/ip6_input.c')
0 files changed, 0 insertions, 0 deletions