| commit | f69e30c0107ceff61296045cfd36ea0506d54186 | [log] [tgz] |
|---|---|---|
| author | Yasuyuki KOZAKAI <yasuyuki@netfilter.org> | Mon Jun 11 20:17:34 2007 +0000 |
| committer | Yasuyuki KOZAKAI <yasuyuki@netfilter.org> | Mon Jun 11 20:17:34 2007 +0000 |
| tree | 12c8f5eed0e469d91fdce7932a85caae6faad16c | |
| parent | 1d9872d7d6f2199130bb67fe8988baade53d25c1 [diff] |
'-p all' and '-p 0' should be allowed. And actually ip6tables in kernel allows '! -p xxx' where xxx is extension header. It matches all valid IPv6 packets.