diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-12-01 15:08:01 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-12-02 01:47:32 +0100 |
| commit | 5baa4279264bb4ab93c6e80b4887f2bd29691446 (patch) | |
| tree | aa419b31e3320b66213fd0842da4a0a3eb0e25e1 /extensions | |
| parent | f200aca7ff7b6a0edbe9024f0543b3f58111c50e (diff) | |
nft: Fix match generator for '! -i +'
It's actually nonsense since it will never match, but iptables accepts
it and the resulting nftables rule must behave identically. Reuse the
solution implemented into xtables-translate (by commit e179e87a1179e)
and turn the above match into 'iifname INVAL/D'.
The commit this fixes merely ignored the fact that "any interface" match
might be inverted.
Fixes: 0a8635183edd0 ("xtables-compat: ignore '+' interface name")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions')
0 files changed, 0 insertions, 0 deletions