summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Engelhardt <jengelh@medozas.de>2011-06-22 11:15:34 +0200
committerJan Engelhardt <jengelh@medozas.de>2011-06-22 11:15:39 +0200
commit70cb0a6d3e09f64f9a05870d694ac0160319de9a (patch)
tree121139d9b276433d1ab936e9b6fc18d0379b0184
parent017e7b7e1cf4fb63208e46592d06cc030f6d552d (diff)
libxt_state: fix regression about inversion of main option
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
-rw-r--r--extensions/libxt_state.c2
-rw-r--r--tests/options-most.rules2
2 files changed, 3 insertions, 1 deletions
diff --git a/extensions/libxt_state.c b/extensions/libxt_state.c
index 3fc747d8..eff444c8 100644
--- a/extensions/libxt_state.c
+++ b/extensions/libxt_state.c
@@ -23,7 +23,7 @@ state_help(void)
static const struct xt_option_entry state_opts[] = {
{.name = "state", .id = O_STATE, .type = XTTYPE_STRING,
- .flags = XTOPT_MAND},
+ .flags = XTOPT_MAND | XTOPT_INVERT},
XTOPT_TABLEEND,
};
diff --git a/tests/options-most.rules b/tests/options-most.rules
index 125b5bf3..2b419e57 100644
--- a/tests/options-most.rules
+++ b/tests/options-most.rules
@@ -75,6 +75,8 @@
-A matches
-A matches -m conntrack --ctexpire 5:4294967295
-A matches
+-A matches -m conntrack ! --ctstate NEW ! --ctproto tcp ! --ctorigsrc ::1/127 ! --ctorigdst ::2/127 ! --ctreplsrc ::2/127 ! --ctrepldst ::2/127 ! --ctorigsrcport 3 ! --ctorigdstport 4 ! --ctreplsrcport 5 ! --ctrepldstport 6 ! --ctstatus ASSURED ! --ctexpire 8:9
+-A matches
-A matches -p esp -m esp --espspi 1
-A matches
-A matches -p esp -m esp --espspi :2