Jan Engelhardt wrote:
> [NETFILTER]: Implement NFPROTO_UNSPEC as a wildcard for extensions
> 
> When a match or target is looked up using xt_find_{match,target},
> Xtables will also search the NFPROTO_UNSPEC module list. This allows
> for protocol-independent extensions (like xt_time) to be reused from
> other components (e.g. arptables, ebtables).
> 
> Extensions that take different codepaths depending on match->family
> or target->family of course cannot use NFPROTO_UNSPEC within the
> registration structure (e.g. xt_pkttype).

Nice work. You should have compile tested it though.

Applied.