diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-01-31 23:32:50 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2023-02-17 18:18:48 +0100 |
| commit | 6d1263002c2a9fc6dfa59c764dee767a084d428d (patch) | |
| tree | a0d7b01d3361f60eb59cb1280175f6978cba9812 | |
| parent | bb6b243c481f90f7dc4a0bd89187ee2bb823f1f6 (diff) | |
extensions: libebt_redirect: Fix for wrong syntax in translation
Meta key comes before 'set' in meta statement.
Fixes: 24ce7465056ae ("ebtables-compat: add redirect match extension")
Signed-off-by: Phil Sutter <phil@nwl.cc>
| -rw-r--r-- | extensions/libebt_redirect.c | 2 | ||||
| -rw-r--r-- | extensions/libebt_redirect.txlate | 6 |
2 files changed, 4 insertions, 4 deletions
diff --git a/extensions/libebt_redirect.c b/extensions/libebt_redirect.c index 389f3ccb..7821935e 100644 --- a/extensions/libebt_redirect.c +++ b/extensions/libebt_redirect.c @@ -83,7 +83,7 @@ static int brredir_xlate(struct xt_xlate *xl, { const struct ebt_redirect_info *red = (const void*)params->target->data; - xt_xlate_add(xl, "meta set pkttype host"); + xt_xlate_add(xl, "meta pkttype set host"); if (red->target != EBT_CONTINUE) xt_xlate_add(xl, " %s ", brredir_verdict(red->target)); return 1; diff --git a/extensions/libebt_redirect.txlate b/extensions/libebt_redirect.txlate index f0dd5dea..d073ec77 100644 --- a/extensions/libebt_redirect.txlate +++ b/extensions/libebt_redirect.txlate @@ -1,8 +1,8 @@ ebtables-translate -t nat -A PREROUTING -d de:ad:00:00:be:ef -j redirect -nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta set pkttype host accept' +nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta pkttype set host accept' ebtables-translate -t nat -A PREROUTING -d de:ad:00:00:be:ef -j redirect --redirect-target RETURN -nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta set pkttype host return' +nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta pkttype set host return' ebtables-translate -t nat -A PREROUTING -d de:ad:00:00:be:ef -j redirect --redirect-target CONTINUE -nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta set pkttype host' +nft 'add rule bridge nat PREROUTING ether daddr de:ad:00:00:be:ef counter meta pkttype set host' |