diff options
author | Florian Westphal <fw@strlen.de> | 2017-06-16 21:18:45 +0200 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2017-06-18 23:28:57 +0200 |
commit | fda79e96bcaa5fc927523b582bfc42c8ad22deca (patch) | |
tree | ac5060ff4c428e80a6b7e4bd430315a292e5ceb2 /src/erec.c | |
parent | 7e1ff143442c6c9428f2a1cdb7c751216407437c (diff) |
evaluate: reject meta nfproto outside of inet family
meta nfproto loads the hook family type of the current rule context
in the kernel, i.e. it will be NFPROTO_IPV6 for ip6 family,
NFPROTO_BRIDGE for bridge and so on.
The only case where this is useful is the inet pseudo family,
where this is useful to determine the real hook family
(NFPROTO_IPV4 or NFPROTO_IPV6).
In all other families 'meta nfproto' is either always true or false.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/erec.c')
0 files changed, 0 insertions, 0 deletions