From b772c3f24f75e586e406675e4b0b79eabfe3375e Mon Sep 17 00:00:00 2001 From: Giuseppe Longo Date: Sat, 9 Aug 2014 01:04:17 +0200 Subject: nft-arp: remove wrong conditions Removes wrong conditions in flags translating functions that doesn't permit to delete rule with inverse flags set. For instance, the following command doesn't remove the rule: arptables-compat -D INPUT -i ! eth1 -j ACCEPT Signed-off-by: Giuseppe Longo Signed-off-by: Pablo Neira Ayuso --- iptables/nft-arp.c | 6 ------ 1 file changed, 6 deletions(-) (limited to 'iptables/nft-arp.c') diff --git a/iptables/nft-arp.c b/iptables/nft-arp.c index 8c062435..6dcc6ee6 100644 --- a/iptables/nft-arp.c +++ b/iptables/nft-arp.c @@ -155,9 +155,6 @@ static uint8_t arpt_to_ipt_flags(uint16_t invflags) if (invflags & ARPT_INV_ARPPRO) result |= IPT_INV_PROTO; - if (invflags & ARPT_INV_MASK) - result |= IPT_INV_MASK; - return result; } @@ -257,9 +254,6 @@ static uint16_t ipt_to_arpt_flags(uint8_t invflags) if (invflags & IPT_INV_PROTO) result |= ARPT_INV_ARPPRO; - if (invflags & IPT_INV_MASK) - result |= ARPT_INV_MASK; - return result; } -- cgit v1.2.3