diff options
| author | Phil Sutter <phil@nwl.cc> | 2018-08-06 17:21:53 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-08-06 18:17:39 +0200 |
| commit | 1679b2cb2cae2bb3ce8eff5444ba858a51310d4c (patch) | |
| tree | 9097c7bd5db202d9418d2c99f7dd156a2d11b7b3 /iptables/nft.c | |
| parent | 2ce9f65a374bad212899bc584d3e5f4698df6fc6 (diff) | |
xtables-restore: Improve user-defined chain detection
Legacy ebtables-save does not use a policy string of '-' to denote
user-defined chains but instead lists them with a policy of ACCEPT.
In order to use ebtables_restore_parse() for ebtables-save
implementation, make use of builtin table definitions to decide whether
a given chain is a builtin one or not.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'iptables/nft.c')
| -rw-r--r-- | iptables/nft.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/iptables/nft.c b/iptables/nft.c index ea58495b..b893859d 100644 --- a/iptables/nft.c +++ b/iptables/nft.c @@ -630,7 +630,7 @@ static void nft_chain_builtin_add(struct nft_handle *h, } /* find if built-in table already exists */ -static struct builtin_table * +struct builtin_table * nft_table_builtin_find(struct nft_handle *h, const char *table) { int i; @@ -651,7 +651,7 @@ nft_table_builtin_find(struct nft_handle *h, const char *table) } /* find if built-in chain already exists */ -static struct builtin_chain * +struct builtin_chain * nft_chain_builtin_find(struct builtin_table *t, const char *chain) { int i; |