summaryrefslogtreecommitdiffstats
path: root/iptables/nft.c
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2020-05-09 13:42:56 +0200
committerPhil Sutter <phil@nwl.cc>2020-05-18 17:34:18 +0200
commit3e09bd1888575cfec136574d2b0e810ba33f1cfb (patch)
treee98097eb930d46fefb63eba865022421197cbc81 /iptables/nft.c
parentc8332553caf48132403895bae750b3cd09a2efd8 (diff)
nfnl_osf: Improve error handling
For some error cases, no log message was created - hence apart from the return code there was no indication of failing execution. If a line load fails, don't abort but continue with the remaining file contents. The current pf.os file in this repository serves as proof-of-concept: Lines 700 and 701: Duplicates of lines 698 and 699 because 'W*' and 'W0' parse into the same data. Line 704: Duplicate of line 702 because apart from 'W*' and 'W0', only the first three fields on right-hand side are sent to the kernel. When loading, these dups are ignored (they would bounce if NLM_F_EXCL was given). Upon deletion, they cause ENOENT response from kernel. In order to align duplicate-tolerance in both modes, just ignore that ENOENT. Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'iptables/nft.c')
0 files changed, 0 insertions, 0 deletions