diff options
author | Jan Engelhardt <jengelh@medozas.de> | 2011-08-20 18:26:48 +0200 |
---|---|---|
committer | Jan Engelhardt <jengelh@medozas.de> | 2011-08-20 21:15:17 +0200 |
commit | 3dafef40228c372976eb714836ea097115d8fd03 (patch) | |
tree | 0cc7f9c0ec9e3449400f4e34841876ad9eb26ec6 | |
parent | 085b233bd85173082cc872563505ad3755ac5455 (diff) |
libxt_tcp: always print the mask parts
0xFF is unlikely to happen (given that ALL translates to 0x3F at
most), but assuming that through magic, 0xFF was put into memory,
iptables -S/iptables-save would ignore printing it, practically
outputting just one argument to --tcp-flags which currently wants two.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
-rw-r--r-- | extensions/libxt_tcp.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/extensions/libxt_tcp.c b/extensions/libxt_tcp.c index 3940d91e..e849fa21 100644 --- a/extensions/libxt_tcp.c +++ b/extensions/libxt_tcp.c @@ -357,9 +357,7 @@ static void tcp_save(const void *ip, const struct xt_entry_match *match) if (tcpinfo->invflags & XT_TCP_INV_FLAGS) printf(" !"); printf(" --tcp-flags "); - if (tcpinfo->flg_mask != 0xFF) { - print_tcpf(tcpinfo->flg_mask); - } + print_tcpf(tcpinfo->flg_mask); printf(" "); print_tcpf(tcpinfo->flg_cmp); } |