| commit | 6bbb9ad36c93d3a422de862b78bd5330b44b3fa4 | [log] [tgz] |
|---|---|---|
| author | Jose M. Guisado Gomez <guigom@riseup.net> | Thu Oct 22 21:43:53 2020 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Sat Oct 31 10:41:00 2020 +0100 |
| tree | 59faa76de1a76f952377de267fda8acf63eee50a | |
| parent | 312ca575a50543a886a5dfa2af1e72aa6a5b601e [diff] |
netfilter: nft_reject: add reject verdict support for netdev Adds support for reject from ingress hook in netdev family. Both stacks ipv4 and ipv6. With reject packets supporting ICMP and TCP RST. This ability is required in devices that need to REJECT legitimate clients which traffic is forwarded from the ingress hook. Joint work with Laura Garcia. Signed-off-by: Jose M. Guisado Gomez <guigom@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>