netfilter: nft_meta: support for time matching

Browse source

This patch introduces meta matches in the kernel for time (a UNIX timestamp),
day (a day of week, represented as an integer between 0-6), and
hour (an hour in the current day, or: number of seconds since midnight).

All values are taken as unsigned 64-bit integers.

The 'time' keyword is internally converted to nanoseconds by nft in
userspace, and hence the timestamp is taken in nanoseconds as well.

Signed-off-by: Ander Juaristi <a@juaristi.eus>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Ander Juaristi 2019-08-17 13:17:53 +02:00 • committed by Pablo Neira Ayuso

parent a1b840adaf

commit 63d10e12b0

2 changed files with 52 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

6

include/uapi/linux/netfilter/nf_tables.h

View file

46

net/netfilter/nft_meta.c

View file