Multiple matches of the same type can be specified on the commandline.

If two or more matches of the same type are detected then the options
are assumed to be grouped in order to tell which option belongs
to which match:

... -m foo ... <options0> ... -m foo ... <options1> ...

Otherwise the commandline parsing is unmodified.

2 files changed, 8 insertions, 0 deletions

diff --git a/include/ip6tables.h b/include/ip6tables.h
index 549e0415..d5ea878e 100644
--- a/include/ip6tables.h
+++ b/include/ip6tables.h
@@ -13,6 +13,10 @@ struct ip6tables_rule_match
 	struct ip6tables_rule_match *next;
 
 	struct ip6tables_match *match;
+
+	/* Multiple matches of the same type: the ones before
+	   the current one are completed from parsing point of view */	
+	unsigned int completed;
 };
 
 /* Include file for additions: new matches and targets. */
diff --git a/include/iptables.h b/include/iptables.h
index bf71e526..c56a0057 100644
--- a/include/iptables.h
+++ b/include/iptables.h
@@ -29,6 +29,10 @@ struct iptables_rule_match
 	struct iptables_rule_match *next;
 
 	struct iptables_match *match;
+
+	/* Multiple matches of the same type: the ones before
+	   the current one are completed from parsing point of view */	
+	unsigned int completed;
 };
 
 /* Include file for additions: new matches and targets. */