diff options
author | Jan Engelhardt <jengelh@medozas.de> | 2009-10-26 18:43:54 +0100 |
---|---|---|
committer | Jan Engelhardt <jengelh@medozas.de> | 2009-10-29 19:04:00 +0100 |
commit | 7c4d668c9c2ee007c82063b7fc784cbbf46b2ec4 (patch) | |
tree | 4041a5c3946326232ad24aa5499a8ac4633a5976 /extensions/libxt_TRACE.man | |
parent | 58df90174164fd673e8c4103f7ce0c4e55ef1aec (diff) |
libiptc: fix wrong maptype of base chain counters on restore
When a ruleset that does not reset any chain policies/counters, such as
*filter
COMMIT
is sourced by iptables-restore, the previous policy and counters
(i.e. the ones read from the kernel) are reused. The counter skew
offsetting is wrong however, causing the read value to be readded to
the kernel value. This manifests itself in practice by the counter
value almost doubling everytime iptables-restore is called.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Diffstat (limited to 'extensions/libxt_TRACE.man')
0 files changed, 0 insertions, 0 deletions