summaryrefslogtreecommitdiffstats
path: root/extensions/libebt_ip.t
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2018-11-05 11:46:02 +0100
committerFlorian Westphal <fw@strlen.de>2018-11-05 13:16:45 +0100
commita10eb8861c8fdc8894a8c2f6baf4dd791d5ab4f0 (patch)
tree210862aa071c939bafe72fe0af4969b9bf8b0cd4 /extensions/libebt_ip.t
parent9b127b7154029af612c4ffe6c08089973e9b8310 (diff)
extensions: libebt_ip: fix tos negation
passing ->tos as uintmax_t will clear adjacent fields in the structure, including invflags. Fixes: 49479aa12a15 ("ebtables-compat: add 'ip' match extension") Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libebt_ip.t')
-rw-r--r--extensions/libebt_ip.t1
1 files changed, 1 insertions, 0 deletions
diff --git a/extensions/libebt_ip.t b/extensions/libebt_ip.t
index 6f99aa56..87602367 100644
--- a/extensions/libebt_ip.t
+++ b/extensions/libebt_ip.t
@@ -2,6 +2,7 @@
-p ip --ip-src ! 192.168.0.0/24 -j ACCEPT;-p IPv4 --ip-src ! 192.168.0.0/24 -j ACCEPT;OK
-p IPv4 --ip-dst 10.0.0.1;=;OK
-p IPv4 --ip-tos 0xFF;=;OK
+-p IPv4 --ip-tos ! 0xFF;=;OK
-p IPv4 --ip-proto tcp --ip-dport 22;=;OK
-p IPv4 --ip-proto udp --ip-sport 1024:65535;=;OK
-p IPv4 --ip-proto 253;=;OK