summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLaura Garcia Liebana <nevola@gmail.com>2016-03-10 19:15:40 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2016-03-10 19:38:13 +0100
commit75a7f70b0a0848f59a7797059957aadabc582158 (patch)
treeaff3792ed0ad60677ad34d26d60054a8f6cb5558
parente9e3cad2331d9fed1415dfb278b8dd6335ad3c1c (diff)
extensions: libipt_LOG: Avoid to print the default log level in the translation
Avoid to print the log level in the translation when the level is the default value. Example: $ sudo iptables-translate -t filter -A INPUT -m icmp ! --icmp-type 10 -j LOG nft add rule ip filter INPUT icmp type != router-solicitation counter log Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
-rw-r--r--extensions/libipt_LOG.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/extensions/libipt_LOG.c b/extensions/libipt_LOG.c
index afe8c9f0..f81eb8df 100644
--- a/extensions/libipt_LOG.c
+++ b/extensions/libipt_LOG.c
@@ -194,7 +194,8 @@ static int LOG_xlate(const void *ip, const struct xt_entry_target *target,
xt_xlate_add(xl, "prefix \\\"%s\\\" ", loginfo->prefix);
for (i = 0; i < ARRAY_SIZE(ipt_log_xlate_names); ++i)
- if (loginfo->level == ipt_log_xlate_names[i].level) {
+ if (loginfo->level != LOG_DEFAULT_LEVEL &&
+ loginfo->level == ipt_log_xlate_names[i].level) {
xt_xlate_add(xl, "level %s ",
ipt_log_xlate_names[i].name);
break;