diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-11-15 13:55:08 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2023-11-29 02:33:03 +0100 |
| commit | b2197e7834f779e8b28b80bc58bb58179360f66b (patch) | |
| tree | 9f3196b9054f0bfe5e751745d5e0fee571fffd64 /iptables/nft-ipv6.c | |
| parent | 9c09d28102bb4bd833b1a814c0766e89250dbc1e (diff) | |
xshared: Entirely ignore interface masks when saving rules
Rule printing code does this for more than 20 years now, assume it's
safe to rely upon the wildcard interface name to contain a '+' suffix.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'iptables/nft-ipv6.c')
| -rw-r--r-- | iptables/nft-ipv6.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/iptables/nft-ipv6.c b/iptables/nft-ipv6.c index bb417356..4bf4f54f 100644 --- a/iptables/nft-ipv6.c +++ b/iptables/nft-ipv6.c @@ -147,8 +147,7 @@ static void nft_ipv6_save_rule(const struct iptables_command_state *cs, save_ipv6_addr('d', &cs->fw6.ipv6.dst, &cs->fw6.ipv6.dmsk, cs->fw6.ipv6.invflags & IP6T_INV_DSTIP); - save_rule_details(cs->fw6.ipv6.iniface, cs->fw6.ipv6.iniface_mask, - cs->fw6.ipv6.outiface, cs->fw6.ipv6.outiface_mask, + save_rule_details(cs->fw6.ipv6.iniface, cs->fw6.ipv6.outiface, cs->fw6.ipv6.proto, 0, cs->fw6.ipv6.invflags); save_matches_and_target(cs, cs->fw6.ipv6.flags & IP6T_F_GOTO, |