diff options
| author | Florian Westphal <fw@strlen.de> | 2011-12-16 18:34:06 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2011-12-23 14:55:39 +0100 |
| commit | 08628f20f492a1f9178f6df2a276f9a108ac0022 (patch) | |
| tree | 5f289b30073940a4d6a628f2920b8f1ecb64f0f4 /extensions/libxt_cpu.c | |
| parent | b8c42eca0f224a00bf55b60ded81af14a1e07da1 (diff) | |
libxt_connbytes: fix handling of --connbytes FROM
quoting man page:
match packets from a connection whose packets/bytes/average
packet size is more than FROM and less than TO bytes/packets. if
TO is omitted only FROM check is done.
But, when TO was omitted, we did treat it like "x:x" which is not
the same at all.
Before commit 09631dc60ce41bc484a42fcf4d4ddf7036820bd1
(libxt_connbytes: use guided option parser), we failed to parse
"--connbytes x" ('Bad range "x"'), but treated "x:" like "x:0xffffffff".
Also, restore the "from must be smaller than to" check.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions/libxt_cpu.c')
0 files changed, 0 insertions, 0 deletions