kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve ICMP matching.

Browse Source
This commit is contained in:
gamemann
2020-12-18 18:53:10 +00:00
parent cf10bd5696
commit 4420cb2f00
1 changed files with 24 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
src/xdpfw_kern.c
View File

@@ -563,38 +563,35 @@ int xdp_prog_main(struct xdp_md *ctx)
} }
else if (filter->icmpopts.enabled) else if (filter->icmpopts.enabled)
{ {
if (!icmph) if (icmph)
{ {
continue; // Code.
} if (filter->icmpopts.do_code && filter->icmpopts.code != icmph->code)
{
continue;
}
// Code. // Type.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmph->code) if (filter->icmpopts.do_type && filter->icmpopts.type != icmph->type)
{ {
continue; continue;
}
} }
else if (icmp6h)
{
// Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmp6h->icmp6_code)
{
continue;
}
// Type. // Type.
if (filter->icmpopts.do_type && filter->icmpopts.type != icmph->type) if (filter->icmpopts.do_type && filter->icmpopts.type != icmp6h->icmp6_type)
{ {
continue; continue;
}
} }
} else
else if (icmp6h && filter->icmpopts.enabled)
{
if (!icmp6h)
{
continue;
}
// Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmp6h->icmp6_code)
{
continue;
}
// Type.
if (filter->icmpopts.do_type && filter->icmpopts.type != icmp6h->icmp6_type)
{ {
continue; continue;
} }