diff options
| author | Arturo Borrero <arturo.borrero.glez@gmail.com> | 2016-04-06 14:10:52 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-04-07 11:46:32 +0200 |
| commit | e65b672fb1aec0e71305bcbd3394d8073dc5b158 (patch) | |
| tree | c6be510bb44a1e9a63edb1bb1f7c656a251b80a5 | |
| parent | 33d6499f13970626b8e75d11c03379352867aad7 (diff) | |
extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0'
The iptables command:
-m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE
should translate to:
tcp flags & fin|syn|rst|psh|ack|urg == 0x0
instead of:
tcp flags & fin|syn|rst|psh|ack|urg == none
Reported-by: Vadim A. Misbakh-Soloviov <netfilter@mva.name>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Tested-by: Vadim A. Misbakh-Soloviov <netfilter@mva.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rw-r--r-- | extensions/libxt_tcp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/extensions/libxt_tcp.c b/extensions/libxt_tcp.c index 6a85ed46..2a14035d 100644 --- a/extensions/libxt_tcp.c +++ b/extensions/libxt_tcp.c @@ -390,7 +390,7 @@ static void print_tcp_xlate(struct xt_xlate *xl, uint8_t flags) } if (!have_flag) - xt_xlate_add(xl, "none"); + xt_xlate_add(xl, "0x0"); } static int tcp_xlate(const void *ip, const struct xt_entry_match *match, |