diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-09-18 16:54:15 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-12-30 23:50:47 +0100 |
| commit | b756cf08d6eff885d808504c674bd7eb5ebabfbb (patch) | |
| tree | 1911717016f3bf955d206c78ebd8e1250f42ddc8 /iptables/xtables-arp.c | |
| parent | c6836c19592dbe1a8be9b0ad76c0ae09abcb82e7 (diff) | |
nft: consolidate nft_rule_* functions to support ARP
This should help to avoid code duplication to support ARP.
As a result, we have a common generic infrastructure for
IPv4, IPv6 and ARP.
This patch removes nft_arp_rule_append and nft_arp_rule_insert,
which were very similar to their original nft_rule_append and
nft_rule_insert.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/xtables-arp.c')
| -rw-r--r-- | iptables/xtables-arp.c | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/iptables/xtables-arp.c b/iptables/xtables-arp.c index 4b3b0461..91876174 100644 --- a/iptables/xtables-arp.c +++ b/iptables/xtables-arp.c @@ -884,12 +884,11 @@ append_entry(struct nft_handle *h, for (j = 0; j < ndaddrs; j++) { fw->arp.tgt.s_addr = daddrs[j].s_addr; if (append) { - ret = nft_arp_rule_append(h, chain, table, - fw, verbose); + ret = nft_rule_append(h, chain, table, fw, 0, + verbose); } else { - ret = nft_arp_rule_insert(h, chain, table, - fw, rulenum, - verbose); + ret = nft_rule_insert(h, chain, table, fw, + rulenum, verbose); } } } |