firewall4
firewall4 copied to clipboard
ruleset: do not emit helper jump without helper modules
Do not emit helper jump if no helper modules are present saving per-every-packet bytecode before ct:
inet fw4 prerouting
[ meta load iifname => reg 1 ]
[ cmp eq reg 1 0x6c2d7262 0x00006e61 0x00000000 0x00000000 ]
[ immediate reg 0 jump -> helper_lan ]
userdata = { \x00-!fw4: Handle lan IPv4/IPv6 helper assignment\x00 }
Signed-off-by: Andris PE [email protected]
ping @jow-