From b65ea148d8f8edc4ef5774154b1aca25d884d500 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Tue, 18 Jun 2019 20:43:58 +0200 Subject: src: statement: disable reject statement type omission for bridge add rule bridge test-bridge input reject with icmp type port-unreachable ... will be printed as 'reject', which is fine on ip family, but not on bridge -- 'with icmp type' adds an ipv4 dependency, but simple reject does not (it will use icmpx to also reject ipv6 packets with an icmpv6 error). Add a toggle to supress short-hand versions in this case. Signed-off-by: Florian Westphal Acked-by: Pablo Neira Ayuso --- include/statement.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'include/statement.h') diff --git a/include/statement.h b/include/statement.h index 91d6e0e2..6fb5cf15 100644 --- a/include/statement.h +++ b/include/statement.h @@ -102,8 +102,9 @@ extern void __limit_stmt_print(const struct limit_stmt *limit); struct reject_stmt { struct expr *expr; - enum nft_reject_types type; + enum nft_reject_types type:8; int8_t icmp_code; + uint8_t verbose_print:1; unsigned int family; }; -- cgit v1.2.3