Enable support for router-advertisement and router-solicitation icmp types in 
nft.

Example:
$ sudo nft add rule ip filter input icmp type router-advertisement counter 
accept
$ sudo nft add rule ip filter input icmp type router-solicitation counter accept

Signed-off-by: Laura Garcia Liebana <[email protected]>
---
 src/proto.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/proto.c b/src/proto.c
index 0ed98ed..b54a4c1 100644
--- a/src/proto.c
+++ b/src/proto.c
@@ -299,6 +299,8 @@ static const struct symbol_table icmp_type_tbl = {
                SYMBOL("source-quench",                 ICMP_SOURCE_QUENCH),
                SYMBOL("redirect",                      ICMP_REDIRECT),
                SYMBOL("echo-request",                  ICMP_ECHO),
+               SYMBOL("router-advertisement",          ICMP_ROUTERADVERT),
+               SYMBOL("router-solicitation",           ICMP_ROUTERSOLICIT),
                SYMBOL("time-exceeded",                 ICMP_TIME_EXCEEDED),
                SYMBOL("parameter-problem",             ICMP_PARAMETERPROB),
                SYMBOL("timestamp-request",             ICMP_TIMESTAMP),
-- 
2.7.0

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to