summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_cpu.c
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2011-12-16 18:34:06 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2011-12-23 14:55:39 +0100
commit08628f20f492a1f9178f6df2a276f9a108ac0022 (patch)
tree5f289b30073940a4d6a628f2920b8f1ecb64f0f4 /extensions/libxt_cpu.c
parentb8c42eca0f224a00bf55b60ded81af14a1e07da1 (diff)
libxt_connbytes: fix handling of --connbytes FROM
quoting man page: match packets from a connection whose packets/bytes/average packet size is more than FROM and less than TO bytes/packets. if TO is omitted only FROM check is done. But, when TO was omitted, we did treat it like "x:x" which is not the same at all. Before commit 09631dc60ce41bc484a42fcf4d4ddf7036820bd1 (libxt_connbytes: use guided option parser), we failed to parse "--connbytes x" ('Bad range "x"'), but treated "x:" like "x:0xffffffff". Also, restore the "from must be smaller than to" check. Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libxt_cpu.c')
0 files changed, 0 insertions, 0 deletions