kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve ICMP matching.

Browse Source
This commit is contained in:
gamemann
2020-12-18 18:53:10 +00:00
parent cf10bd5696
commit 4420cb2f00
1 changed files with 24 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/xdpfw_kern.c
View File

@@ -563,11 +563,8 @@ int xdp_prog_main(struct xdp_md *ctx)
}
else if (filter->icmpopts.enabled)
{
if (!icmph)
if (icmph)
{
continue;
}
// Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmph->code)
{
@@ -580,13 +577,8 @@ int xdp_prog_main(struct xdp_md *ctx)
continue;
}
}
else if (icmp6h && filter->icmpopts.enabled)
else if (icmp6h)
{
if (!icmp6h)
{
continue;
}
// Code.
if (filter->icmpopts.do_code && filter->icmpopts.code != icmp6h->icmp6_code)
{
@@ -599,6 +591,11 @@ int xdp_prog_main(struct xdp_md *ctx)
continue;
}
}
else
{
continue;
}
}
// Matched.
#ifdef DEBUG