path: root/iptables/nft-bridge.h
diff options
authorFlorian Westphal <>2018-05-08 16:31:29 +0200
committerFlorian Westphal <>2018-05-10 02:31:05 +0200
commit07f4ca96816886635acfb9478b2d04929938eb78 (patch)
tree4e75aef91de288c9e814580703a77cc71bd73e28 /iptables/nft-bridge.h
parent0ca2d2a2a5994a6131ad32aedbc42b530ac529bd (diff)
xtables-compat: ebtables: allow checking for zero-mac
Allow checking for an all-zero mac address by replacing checks on the address with a check on the option flag. Its set when '-d' or '-s' appears on the command line and when seeing a linklayer payload request for ether s/daddr. Same for -p: s this flag gets removed during getopt when 'p' is encountered. So, if its set, no need to check protocol type. Signed-off-by: Florian Westphal <>
Diffstat (limited to 'iptables/nft-bridge.h')
1 files changed, 0 insertions, 3 deletions
diff --git a/iptables/nft-bridge.h b/iptables/nft-bridge.h
index 3ee04640..8dcb151f 100644
--- a/iptables/nft-bridge.h
+++ b/iptables/nft-bridge.h
@@ -15,9 +15,6 @@
#define LIST_X 0x10
#define LIST_MAC2 0x20
-/* Be backwards compatible, so don't use '+' in kernel */
-#define IF_WILDCARD 1
extern unsigned char eb_mac_type_unicast[ETH_ALEN];
extern unsigned char eb_msk_type_unicast[ETH_ALEN];
extern unsigned char eb_mac_type_multicast[ETH_ALEN];