diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-11-24 14:17:17 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-12-13 14:59:55 +0100 |
| commit | 79195a8cc9e9d9cf2d17165bf07ac4cc9d55539f (patch) | |
| tree | e339339c6b37040ccd5603dddc55fe7fb32c38c0 /src/parser_json.c | |
| parent | e432477f5c013d0ca56f9fc5f9ac7cf35301b0b9 (diff) | |
xt: Rewrite unsupported compat expression dumping
Choose a format which provides more information and is easily parseable.
Then teach parsers about it and make it explicitly reject the ruleset
giving a meaningful explanation. Also update the man pages with some
more details.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'src/parser_json.c')
| -rw-r--r-- | src/parser_json.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/parser_json.c b/src/parser_json.c index aa00e9ec..762e779d 100644 --- a/src/parser_json.c +++ b/src/parser_json.c @@ -2764,6 +2764,11 @@ static struct stmt *json_parse_stmt(struct json_ctx *ctx, json_t *root) return verdict_stmt_alloc(int_loc, expr); } + if (!strcmp(type, "xt")) { + json_error(ctx, "unsupported xtables compat expression, use iptables-nft with this ruleset"); + return NULL; + } + for (i = 0; i < array_size(stmt_parser_tbl); i++) { if (!strcmp(type, stmt_parser_tbl[i].key)) return stmt_parser_tbl[i].cb(ctx, stmt_parser_tbl[i].key, tmp); |