From c0bd98c9339b4975c9d52739d638a3c2bdf9a7ff Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Wed, 22 Nov 2023 03:58:18 +0100 Subject: xshared: do_parse: Ignore '-j CONTINUE' While iptables does not support his NOP, arptables man page claims it does (although legacy arptables rejects it) and ebtables prefers to print it instead of omitting the '-j' option. Accept and ignore the target when parsing to at least fix for arptables-nft and prepare for ebtables-nft using do_parse() as well. Signed-off-by: Phil Sutter --- iptables/xshared.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'iptables/xshared.c') diff --git a/iptables/xshared.c b/iptables/xshared.c index c4d7a266..1b02f35a 100644 --- a/iptables/xshared.c +++ b/iptables/xshared.c @@ -1634,7 +1634,8 @@ void do_parse(int argc, char *argv[], case 'j': set_option(&cs->options, OPT_JUMP, &args->invflags, invert); - command_jump(cs, optarg); + if (strcmp(optarg, "CONTINUE")) + command_jump(cs, optarg); break; case 'i': -- cgit v1.2.3