21 Jan, 2013

1 commit

• e6f30c731   netfilter: x_tables: add xt_bpf match ... Browse Code »

  Support arbitrary linux socket filter (BPF) programs as x_tables
  match rules. This allows for very expressive filters, and on
  platforms with BPF JIT appears competitive with traditional
  hardcoded iptables rules using the u32 match.

  The size of the filter has been artificially limited to 64
  instructions maximum to avoid bloating the size of each rule
  using this new match.

  Signed-off-by: Willem de Bruijn
  Signed-off-by: Pablo Neira Ayuso

  Willem de Bruijn

  2013-01-21 19:20:19 +0800