netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 11 Jun 2021 17:26:56 +0000 (19:26 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 14 Jul 2021 14:56:22 +0000 (16:56 +0200)
commit58da10487a1e16a4d30540c7e8b650d2d631296e
treec5deb47920af91d571a226236a89976638d7cfa8
parented3d4988349e969ccab5e3a571aac36b87144105
netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols

[ Upstream commit 52f0f4e178c757b3d356087376aad8bd77271828 ]

Add unfront check for TCP and UDP packets before performing further
processing.

Fixes: 4ed8eb6570a4 ("netfilter: nf_tables: Add native tproxy support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_tproxy.c