kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix max length/TTLs.

Browse Source
This commit is contained in:
gamemann
2022-08-27 15:26:22 +00:00
parent c044a99207
commit 2a41af6be2
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/xdpfw_kern.c
View File

@@ -419,25 +419,25 @@ int xdp_prog_main(struct xdp_md *ctx)
} }
// Max TTL length. // Max TTL length.
if (filter->do_max_ttl && filter->max_ttl > iph->ttl) if (filter->do_max_ttl && filter->max_ttl < iph->ttl)
{ {
continue; continue;
} }
// Min TTL length. // Min TTL length.
if (filter->do_min_ttl && filter->min_ttl < iph->ttl) if (filter->do_min_ttl && filter->min_ttl > iph->ttl)
{ {
continue; continue;
} }
// Max packet length. // Max packet length.
if (filter->do_max_len && filter->max_len > (ntohs(iph->tot_len) + sizeof(struct ethhdr))) if (filter->do_max_len && filter->max_len < (ntohs(iph->tot_len) + sizeof(struct ethhdr)))
{ {
continue; continue;
} }
// Min packet length. // Min packet length.
if (filter->do_min_len && filter->min_len < (ntohs(iph->tot_len) + sizeof(struct ethhdr))) if (filter->do_min_len && filter->min_len > (ntohs(iph->tot_len) + sizeof(struct ethhdr)))
{ {
continue; continue;
} }