diff options
author | Phil Sutter <phil@nwl.cc> | 2020-02-06 15:08:41 +0100 |
---|---|---|
committer | Phil Sutter <phil@nwl.cc> | 2020-02-11 10:18:37 +0100 |
commit | e179e87a1179e272a9bdabb0220b17d61d099ee3 (patch) | |
tree | 43361dd6db2b1f8e4e34c64db6acfda266533807 /extensions/libxt_tcp.t | |
parent | 8560ef29b1b3f8113f31f19fa57d85778c166c90 (diff) |
xtables-translate: Fix for interface name corner-cases
There are two special situations xlate_ifname() didn't cover for:
* Interface name containing '*': This went unchanged, creating a command
nft wouldn't accept. Instead translate into '\*' which doesn't change
semantics.
* Interface name being '+': Can't translate into nft wildcard character
as nft doesn't accept asterisk-only interface names. Instead decide
what to do based on 'invert' value: Skip match creation if false,
match against an invalid interface name if true.
Also add a test to make sure future changes to this behaviour are
noticed.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libxt_tcp.t')
0 files changed, 0 insertions, 0 deletions