path: root/include
diff options
authorFlorian Westphal <>2019-06-18 20:43:58 +0200
committerFlorian Westphal <>2019-06-19 22:52:21 +0200
commitb65ea148d8f8edc4ef5774154b1aca25d884d500 (patch)
tree35c10223e681ef2d77b43554dd07b965cb14a222 /include
parentea046380431f5cc623daf8c9d7b2c5438a90a84f (diff)
src: statement: disable reject statement type omission for bridge
add rule bridge test-bridge input reject with icmp type port-unreachable ... will be printed as 'reject', which is fine on ip family, but not on bridge -- 'with icmp type' adds an ipv4 dependency, but simple reject does not (it will use icmpx to also reject ipv6 packets with an icmpv6 error). Add a toggle to supress short-hand versions in this case. Signed-off-by: Florian Westphal <> Acked-by: Pablo Neira Ayuso <>
Diffstat (limited to 'include')
1 files changed, 2 insertions, 1 deletions
diff --git a/include/statement.h b/include/statement.h
index 91d6e0e2..6fb5cf15 100644
--- a/include/statement.h
+++ b/include/statement.h
@@ -102,8 +102,9 @@ extern void __limit_stmt_print(const struct limit_stmt *limit);
struct reject_stmt {
struct expr *expr;
- enum nft_reject_types type;
+ enum nft_reject_types type:8;
int8_t icmp_code;
+ uint8_t verbose_print:1;
unsigned int family;