Confirmed that it works if I hardcode 17 in for pkt.Protocol. Need to address parsing the packet early :(

This commit is contained in:
Kevin Krakauer
2020-01-09 15:38:21 -08:00
parent 89d11b4d96
commit ff719159be
+3 -3
View File
@@ -188,9 +188,9 @@ func (it *IPTables) checkRule(hook Hook, pkt tcpip.PacketBuffer, table Table, ru
// First check whether the packet matches the IP header filter.
// TODO(gvisor.dev/issue/170): Support other fields of the filter.
// if rule.Filter.Protocol != pkt.Protocol {
// return Continue
// }
if rule.Filter.Protocol != pkt.Protocol {
return Continue
}
// Go through each rule matcher. If they all match, run
// the rule target.