diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-12-22 15:58:27 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-12-22 16:43:58 +0100 |
| commit | 596f2e31ae7cee26e4f39f300cc69605f4ba512f (patch) | |
| tree | bf6cd7dc6b5adaedfe2d32e50813f078e73f5658 /utils | |
| parent | ec86937089a95ac57f149b70cbf740d69b9bd775 (diff) | |
nft: Reject tcp/udp extension without proper protocol match
Internally, 'th' expression is used, which works but matches both
protocols. Since users won't expect '-m tcp --dport 1' to match UDP
packets, catch missing/wrong '-p' argument.
Fixes: c034cf31dd1a9 ("nft: prefer native expressions instead of udp match")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'utils')
0 files changed, 0 insertions, 0 deletions