From b1cda88e9440764d8c2bdce72ec9dcffdf68de07 Mon Sep 17 00:00:00 2001
From: Yasuyuki KOZAKAI <yasuyuki@netfilter.org>
Date: Tue, 4 Jul 2006 10:23:26 +0000
Subject: - force user to specify --icmpv6-type if icmpv6 match is required to
 load - Don't allow multiple --icmp-type/icmpv6-type

(Closes: #461)
---
 extensions/libipt_icmp.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'extensions/libipt_icmp.c')

diff --git a/extensions/libipt_icmp.c b/extensions/libipt_icmp.c
index 9d45c8c6..8f22d052 100644
--- a/extensions/libipt_icmp.c
+++ b/extensions/libipt_icmp.c
@@ -189,11 +189,15 @@ parse(int c, char **argv, int invert, unsigned int *flags,
 
 	switch (c) {
 	case '1':
+		if (*flags == 1)
+			exit_error(PARAMETER_PROBLEM,
+				   "icmp match: only use --icmp-type once!");
 		check_inverse(optarg, &invert, &optind, 0);
 		parse_icmp(argv[optind-1], &icmpinfo->type, 
 			   icmpinfo->code);
 		if (invert)
 			icmpinfo->invflags |= IPT_ICMP_INV;
+		*flags = 1;
 		break;
 
 	default:
-- 
cgit v1.2.3