f7181676b7
Add a firewall compatible with Linux's iptables and ip6tables, with chains at similar points in the packet processing path.
NIC ─> ipv[46]_input ┬> ipv[46]_forward ─> [FORWARD] ┬> devif_poll_out ─> NIC
│ │
│ ┌> tcp ┐ │
│ ├> udp ┤ │
└> [INPUT] ┼> icmp ┼> [OUTPUT] ┘
├> icmp6 ┤
└> ... ┘
Signed-off-by: Zhe Weng <wengzhe@xiaomi.com>
|
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| devif_callback.c | ||
| devif_filesend.c | ||
| devif_forward.c | ||
| devif_initialize.c | ||
| devif_iobsend.c | ||
| devif_loopback.c | ||
| devif_poll.c | ||
| devif_send.c | ||
| devif.h | ||
| ipv4_input.c | ||
| ipv6_input.c | ||
| Make.defs | ||