| commit | 254432613c588640f8b8b5c3641a3c27bbe14688 | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Oct 20 18:07:14 2016 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Oct 26 16:35:16 2016 +0200 |
| tree | 1a9b220086627aca4f3bbbb67080182d7af20564 | |
| parent | 96d9f2a72c719d985fdbae4e3d63ddc874947a7e [diff] |
netfilter: nft_ct: add notrack support This patch adds notrack support. I decided to add a new expression, given that this doesn't fit into the existing set operation. Notrack doesn't need a source register, and an hypothetical NFT_CT_NOTRACK key makes no sense since matching the untracked state is done through NFT_CT_STATE. I'm placing this new notrack expression into nft_ct.c, I think a single module is too much. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>