diff options
| author | Jose M. Guisado Gomez <guigom@riseup.net> | 2020-10-22 21:43:54 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-11-02 11:49:52 +0100 |
| commit | 0c42a1f2a0cc579181f9bd1adc885c10d0af5808 (patch) | |
| tree | 5ad42f6d7ebe7b0ad5f5f073f8b8a02b0e9b7f76 /src | |
| parent | c384c0cb819694d2cf81f238304f6e0f6e79a424 (diff) | |
evaluate: add netdev support for reject default
Enables not specifying any icmp type and code when using reject inside
netdev.
This patch completely enables using reject for the netdev family.
Signed-off-by: Jose M. Guisado Gomez <guigom@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src')
| -rw-r--r-- | src/evaluate.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/evaluate.c b/src/evaluate.c index abbf83ae..af52ab18 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -2745,6 +2745,7 @@ static int stmt_evaluate_reject_default(struct eval_ctx *ctx, } break; case NFPROTO_BRIDGE: + case NFPROTO_NETDEV: desc = ctx->pctx.protocol[PROTO_BASE_NETWORK_HDR].desc; if (desc == NULL) { stmt->reject.type = NFT_REJECT_ICMPX_UNREACH; |