kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve ICMP matching.

Browse Source
This commit is contained in:
gamemann
2020-12-18 18:53:10 +00:00
parent cf10bd5696
commit 4420cb2f00
1 changed files with 24 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/xdpfw_kern.c
View File

@@ -563,11 +563,8 @@ int xdp_prog_main(struct xdp_md *ctx)
} }
else if (filter->icmpopts.enabled) else if (filter->icmpopts.enabled)
{ {
if (!icmph) if (icmph)
{ {
continue;
}
// Code. // Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmph->code) if (filter->icmpopts.do_code && filter->icmpopts.code != icmph->code)
{ {
@@ -580,13 +577,8 @@ int xdp_prog_main(struct xdp_md *ctx)
continue; continue;
} }
} }
else if (icmp6h && filter->icmpopts.enabled) else if (icmp6h)
{ {
if (!icmp6h)
{
continue;
}
// Code. // Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmp6h->icmp6_code) if (filter->icmpopts.do_code && filter->icmpopts.code != icmp6h->icmp6_code)
{ {
@@ -599,6 +591,11 @@ int xdp_prog_main(struct xdp_md *ctx)
continue; continue;
} }
} }
else
{
continue;
}
}
// Matched. // Matched.
#ifdef DEBUG #ifdef DEBUG