From: fan.du <fan.du@windriver.com>
Date: Wed, 18 Dec 2013 03:27:02 +0000 (+0800)
Subject: netfilter: add IPv4/6 IPComp extension match support
X-Git-Tag: v3.14-rc1~94^2~284^2~8
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6a649f339802f104549e1fb211e381036661e244;p=pandora-kernel.git

netfilter: add IPv4/6 IPComp extension match support

With this plugin, user could specify IPComp tagged with certain
CPI that host not interested will be DROPped or any other action.

For example:
iptables  -A INPUT -p 108 -m ipcomp --ipcompspi 0x87 -j DROP
ip6tables -A INPUT -p 108 -m ipcomp --ipcompspi 0x87 -j DROP

Then input IPComp packet with CPI equates 0x87 will not reach
upper layer anymore.

Signed-off-by: Fan Du <fan.du@windriver.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed