From 9b127b7154029af612c4ffe6c08089973e9b8310 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 5 Nov 2018 11:30:57 +0100 Subject: extensions: libebt_ip6: fix ip6-dport negation Fixes: 5c8ce9c6aede0 ("ebtables-compat: add 'ip6' match extension") Signed-off-by: Florian Westphal --- extensions/libebt_ip6.c | 2 +- extensions/libebt_ip6.t | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/extensions/libebt_ip6.c b/extensions/libebt_ip6.c index ab1413ba..b8a5a5d8 100644 --- a/extensions/libebt_ip6.c +++ b/extensions/libebt_ip6.c @@ -353,7 +353,7 @@ brip6_parse(int c, char **argv, int invert, unsigned int *flags, break; case IP_DPORT: if (invert) - info->invflags |= EBT_IP6_DEST; + info->invflags |= EBT_IP6_DPORT; parse_port_range(NULL, optarg, info->dport); info->bitmask |= EBT_IP6_DPORT; break; diff --git a/extensions/libebt_ip6.t b/extensions/libebt_ip6.t index 98634800..9d4effdc 100644 --- a/extensions/libebt_ip6.t +++ b/extensions/libebt_ip6.t @@ -4,6 +4,7 @@ -p IPv6 --ip6-dst f00:ba::;=;OK -p IPv6 --ip6-tclass 0xFF;=;OK -p IPv6 --ip6-proto tcp --ip6-dport 22;=;OK +-p IPv6 --ip6-proto tcp --ip6-dport ! 22;=;OK -p IPv6 --ip6-proto udp --ip6-sport 1024:65535;=;OK -p IPv6 --ip6-proto 253;=;OK -p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type echo-request -j CONTINUE;=;OK -- cgit v1.2.3