netfilter: nft_payload: add packet mangling support
authorPatrick McHardy <kaber@trash.net>
Tue, 24 Nov 2015 10:00:22 +0000 (10:00 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 25 Nov 2015 12:54:51 +0000 (13:54 +0100)
commit7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df
treec71eef1afc6ec117b21585311856209bbf3b40b6
parenta9ecfbe7fcf2f600718c3f995cbb46043f7a7a5d
netfilter: nft_payload: add packet mangling support

Add support for mangling packet payload. Checksum for the specified base
header is updated automatically if requested, however no updates for any
kind of pseudo headers are supported, meaning no stateless NAT is supported.

For checksum updates different checksumming methods can be specified. The
currently supported methods are NONE for no checksum updates, and INET for
internet type checksums.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables_core.h
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_payload.c