Re: [PATCH nf-next v5] netfilter: add support for matching IPv4 options

2019-06-21 Thread Pablo Neira Ayuso
On Thu, Jun 20, 2019 at 12:19:59PM -0400, Stephen Suryaputra wrote: > This is the kernel change for the overall changes with this description: > Add capability to have rules matching IPv4 options. This is developed > mainly to support dropping of IP packets with loose and/or strict source > route r

[PATCH nf-next v5] netfilter: add support for matching IPv4 options

2019-06-20 Thread Stephen Suryaputra
This is the kernel change for the overall changes with this description: Add capability to have rules matching IPv4 options. This is developed mainly to support dropping of IP packets with loose and/or strict source route route options. v2: Fix style issues. Make this work with NFPROTO_INET (inet