diff options
| author |   Florian Westphal <fw@strlen.de> | 2015-12-10 18:04:07 +0100 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2015-12-18 14:12:56 +0100 |
| commit | b4aae759c22e71a3c32144f0b3bc4f2fa4aaae98 (patch) | |
| tree | b45a5994f419f696c3dbd3bde26a74a1ee7845e6 /lib/timerqueue.c | |
| parent | nfnetlink: add nfnl_dereference_protected helper (diff) | |
| download | wireguard-linux-b4aae759c22e71a3c32144f0b3bc4f2fa4aaae98.tar.xz wireguard-linux-b4aae759c22e71a3c32144f0b3bc4f2fa4aaae98.zip | |
netfilter: meta: add support for setting skb->pkttype
This allows to redirect bridged packets to local machine:
ether type ip ether daddr set aa:53:08:12:34:56 meta pkttype set unicast
Without 'set unicast', ip stack discards PACKET_OTHERHOST skbs.
It is also useful to add support for a '-m cluster like' nft rule
(where switch floods packets to several nodes, and each cluster node
node processes a subset of packets for load distribution).
Mangling is restricted to HOST/OTHER/BROAD/MULTICAST, i.e. you cannot set
skb->pkt_type to PACKET_KERNEL or change PACKET_LOOPBACK to PACKET_HOST.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'lib/timerqueue.c')
0 files changed, 0 insertions, 0 deletions