From e65b672fb1aec0e71305bcbd3394d8073dc5b158 Mon Sep 17 00:00:00 2001 From: Arturo Borrero Date: Wed, 6 Apr 2016 14:10:52 +0200 Subject: extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0' The iptables command: -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE should translate to: tcp flags & fin|syn|rst|psh|ack|urg == 0x0 instead of: tcp flags & fin|syn|rst|psh|ack|urg == none Reported-by: Vadim A. Misbakh-Soloviov Signed-off-by: Arturo Borrero Gonzalez Tested-by: Vadim A. Misbakh-Soloviov Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_tcp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'extensions/libxt_tcp.c') diff --git a/extensions/libxt_tcp.c b/extensions/libxt_tcp.c index 6a85ed46..2a14035d 100644 --- a/extensions/libxt_tcp.c +++ b/extensions/libxt_tcp.c @@ -390,7 +390,7 @@ static void print_tcp_xlate(struct xt_xlate *xl, uint8_t flags) } if (!have_flag) - xt_xlate_add(xl, "none"); + xt_xlate_add(xl, "0x0"); } static int tcp_xlate(const void *ip, const struct xt_entry_match *match, -- cgit v1.2.3