summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2013-02-09 18:44:34 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2013-12-30 23:50:25 +0100
commitaf11340016320d73dc88fa377a2d2aa21173ba07 (patch)
tree7999037dfd678f9c4eba57d431d05d13de8b4807
parent946f22238350a1506b7fe57b2b27e9e5427f0583 (diff)
xtables: ipv6: fix -D with -p
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--iptables/nft.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/iptables/nft.c b/iptables/nft.c
index 9c6056a4..cef1f32e 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -2349,6 +2349,7 @@ nft_parse_payload_ipv6(uint32_t offset, struct nft_rule_expr_iter *iter,
break;
case offsetof(struct ip6_hdr, ip6_nxt):
get_cmp_data(iter, &proto, sizeof(proto), &inv);
+ cs->fw6.ipv6.flags |= IP6T_F_PROTO;
cs->fw6.ipv6.proto = proto;
if (inv)
cs->fw6.ipv6.invflags |= IPT_INV_PROTO;