diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2022-10-17 13:03:30 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-10-25 13:48:42 +0200 |
| commit | 3927ce8850cacc1790cd4c5d02ca42e24df9fa6b (patch) | |
| tree | 5f9617c86000d710db49a58655fc1edc90f07130 /net | |
| parent | netfilter: nft_payload: access GRE payload via inner offset (diff) | |
| download | wireguard-linux-3927ce8850cacc1790cd4c5d02ca42e24df9fa6b.tar.xz wireguard-linux-3927ce8850cacc1790cd4c5d02ca42e24df9fa6b.zip | |
netfilter: nft_payload: access ipip payload for inner offset
ipip is an special case, transport and inner header offset are set to
the same offset to use the upcoming inner expression for matching on
inner tunnel headers.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nft_payload.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/netfilter/nft_payload.c b/net/netfilter/nft_payload.c index 03a1f271bf4f..84b490d6cc75 100644 --- a/net/netfilter/nft_payload.c +++ b/net/netfilter/nft_payload.c @@ -132,6 +132,9 @@ static int __nft_payload_inner_offset(struct nft_pktinfo *pkt) pkt->inneroff = thoff + offset; } break; + case IPPROTO_IPIP: + pkt->inneroff = thoff; + break; default: return -1; } |