summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--libiptc/libip4tc.c5
-rw-r--r--libiptc/libip6tc.c5
2 files changed, 8 insertions, 2 deletions
diff --git a/libiptc/libip4tc.c b/libiptc/libip4tc.c
index df7fee21..0d9e439b 100644
--- a/libiptc/libip4tc.c
+++ b/libiptc/libip4tc.c
@@ -384,7 +384,10 @@ do_check(TC_HANDLE_T h, unsigned int line)
} else if (strcmp(h->info.name, "mangle") == 0) {
assert(h->info.valid_hooks
== (1 << NF_IP_PRE_ROUTING
- | 1 << NF_IP_LOCAL_OUT));
+ | 1 << NF_IP_POST_ROUTING
+ | 1 << NF_IP_LOCAL_IN
+ | 1 << NF_IP_LOCAL_OUT
+ | 1 << NF_IP_FORWARD));
/* Hooks should be first two */
assert(h->info.hook_entry[NF_IP_PRE_ROUTING] == 0);
diff --git a/libiptc/libip6tc.c b/libiptc/libip6tc.c
index b09d439c..91cd01c7 100644
--- a/libiptc/libip6tc.c
+++ b/libiptc/libip6tc.c
@@ -330,7 +330,10 @@ do_check(TC_HANDLE_T h, unsigned int line)
} else if (strcmp(h->info.name, "mangle") == 0) {
assert(h->info.valid_hooks
== (1 << NF_IP6_PRE_ROUTING
- | 1 << NF_IP6_LOCAL_OUT));
+ | 1 << NF_IP6_POST_ROUTING
+ | 1 << NF_IP6_LOCAL_IN
+ | 1 << NF_IP6_LOCAL_OUT
+ | 1 << NF_IP6_FORWARD));
/* Hooks should be first three */
assert(h->info.hook_entry[NF_IP6_PRE_ROUTING] == 0);