Logic between IP and PORT

[atiqullah-ahmadzai]

Currently it is using OR logic; can we add a feature to support the IP AND PORT mechanisms?

For example:
Allow request from 1.1.1.1 to 22 only and drop all other request from this IP.
xdp-filter ip 1.1.1.1 -m src,dst port 22

[tohojo]

Hmm, so this is far from trivial the way xdp-filter works right now. So filing
this as a feature request, but can't promise that it's something that will
appear anytime soon...