f7181676b7
Add a firewall compatible with Linux's iptables and ip6tables, with chains at similar points in the packet processing path.
NIC ─> ipv[46]_input ┬> ipv[46]_forward ─> [FORWARD] ┬> devif_poll_out ─> NIC
│ │
│ ┌> tcp ┐ │
│ ├> udp ┤ │
└> [INPUT] ┼> icmp ┼> [OUTPUT] ┘
├> icmp6 ┤
└> ... ┘
Signed-off-by: Zhe Weng <wengzhe@xiaomi.com>
|
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| ipfilter.c | ||
| ipfilter.h | ||
| Kconfig | ||
| Make.defs | ||