Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | proto: permit icmp-in-ipv6 and icmpv6-in-ipv4 | Florian Westphal | 2018-03-28 | 1 | -4/+3 |
| | | | | | | | | | | | | | | | | | Jozsef points out that meta l4proto icmp icmp type destination-unreachable is hard to read. So, lets just add icmp/icmpv6 to ip/ip6 protocol base so users can just go with icmp type destination-unreachable and let nft fill in needed dependency. After this patch, the recent patch to not remove the dependency can be reverted again. Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de> | ||||
* | tests: meta: icmp, icmpv6: don't kill required dependencies | Florian Westphal | 2018-03-27 | 1 | -0/+11 |
when explicitly filtering icmp-in-ipv6 and icmp6-in-ip don't remove the required l3 protocol dependency, else "nft list ruleset" can't be read via nft -f anymore. Signed-off-by: Florian Westphal <fw@strlen.de> |