Re: [PATCH nf-next] netfilter: add support for matching IPv4 options

Florian Westphal
2019-06-01T08:53:40Z

Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> > > if (skb->protocol != htons(ETH_P_IP))
> > > goto err;
> >
> > Wouldn't it be preferable to just use nft_pf() != NFPROTO_IPV4?
>
> Then IPv4 options extension won't work from bridge and netdev families
> too, right?

Ah, right.