From 75a7f70b0a0848f59a7797059957aadabc582158 Mon Sep 17 00:00:00 2001 From: Laura Garcia Liebana Date: Thu, 10 Mar 2016 19:15:40 +0100 Subject: extensions: libipt_LOG: Avoid to print the default log level in the translation Avoid to print the log level in the translation when the level is the default value. Example: $ sudo iptables-translate -t filter -A INPUT -m icmp ! --icmp-type 10 -j LOG nft add rule ip filter INPUT icmp type != router-solicitation counter log Signed-off-by: Laura Garcia Liebana --- extensions/libipt_LOG.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/extensions/libipt_LOG.c b/extensions/libipt_LOG.c index afe8c9f0..f81eb8df 100644 --- a/extensions/libipt_LOG.c +++ b/extensions/libipt_LOG.c @@ -194,7 +194,8 @@ static int LOG_xlate(const void *ip, const struct xt_entry_target *target, xt_xlate_add(xl, "prefix \\\"%s\\\" ", loginfo->prefix); for (i = 0; i < ARRAY_SIZE(ipt_log_xlate_names); ++i) - if (loginfo->level == ipt_log_xlate_names[i].level) { + if (loginfo->level != LOG_DEFAULT_LEVEL && + loginfo->level == ipt_log_xlate_names[i].level) { xt_xlate_add(xl, "level %s ", ipt_log_xlate_names[i].name); break; -- cgit v1.2.3