summaryrefslogtreecommitdiffstats
path: root/iptables/xtables-restore.c
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2018-08-31 22:30:58 +0200
committerFlorian Westphal <fw@strlen.de>2018-09-01 10:12:59 +0200
commit7df11d1699ceaf4a841a46a42f446aec5593efd3 (patch)
tree7bec94269b58c7dd2a894b57e5d975a7509bf348 /iptables/xtables-restore.c
parentb6a06c1a215f867f7eee4a3f2f40ec14028fe186 (diff)
xtables: Drop use of IP6T_F_PROTO
Setting this bit in cs->fw6.ipv6.flags was done only for rules parsed from command line, not for those read from kernel. As a result, appropriate rules could not be deleted. A simple test case is: | # ip6tables-nft -A INPUT -p tcp -j ACCEPT | # ip6tables-nft -D INPUT -p tcp -j ACCEPT | iptables: Bad rule (does a matching rule exist in that chain?). Since the flag is not used anywhere in xtables-nft, dropping its use fixes the bug as well as setting it in both cases. Fixes: 5ee03e6df4172 ("xtables: Use meta l4proto for -p match") Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'iptables/xtables-restore.c')
0 files changed, 0 insertions, 0 deletions