summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_esp.t
diff options
context:
space:
mode:
authorJan Engelhardt <jengelh@inai.de>2015-07-15 14:53:39 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2015-08-12 19:49:40 +0200
commit4264de1f270a0fac44dde8ece6fde0a879aebc8e (patch)
treee77b75bbe0a6bb2c5d7349949d6035c860086017 /extensions/libxt_esp.t
parent34344db9878ed53b387180362b1be77001e03e45 (diff)
extensions: restore matching any SPI id by default
This is the same as commit v1.4.15-12-g8a988f6. If no id option is given, the extensions only match packets with a zero-valued identification field. This behavior deviates from what it used to do back in v1.4.10-273-g6944f2c^. Signed-off-by: Jan Engelhardt <jengelh@inai.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_esp.t')
-rw-r--r--extensions/libxt_esp.t1
1 files changed, 1 insertions, 0 deletions
diff --git a/extensions/libxt_esp.t b/extensions/libxt_esp.t
index 008013b9..f207defc 100644
--- a/extensions/libxt_esp.t
+++ b/extensions/libxt_esp.t
@@ -4,6 +4,7 @@
-p esp -m esp --espspi 0:4294967295;-p esp -m esp;OK
-p esp -m esp ! --espspi 0:4294967294;=;OK
-p esp -m esp --espspi -1;;FAIL
+-p esp -m esp;-p esp -m esp --espspi 0;FAIL
# should fail?
-p esp -m esp;=;OK
-m esp;;FAIL