From 3edb96200690b804ceb76a9fb0ae441ed7d4d8f0 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Wed, 3 Apr 2019 23:40:04 +0200 Subject: parser_bison: missing tproxy syntax with port only for inet family # nft add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy ip to :2000 Error: syntax error, unexpected colon add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy ip to :2000 ^ Syntax with no protocol for tproxy complains with: # nft add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy to :2000 Error: Conflicting network layer protocols. add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy to :2000 ^^^^^^^^^^^^^^^ Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1310 Signed-off-by: Pablo Neira Ayuso --- tests/py/inet/tproxy.t | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'tests/py/inet/tproxy.t') diff --git a/tests/py/inet/tproxy.t b/tests/py/inet/tproxy.t index f80f7734..0ba78ef1 100644 --- a/tests/py/inet/tproxy.t +++ b/tests/py/inet/tproxy.t @@ -15,6 +15,7 @@ meta l4proto 6 tproxy ip6 to [2001:db8::1];ok meta l4proto 17 tproxy ip6 to [2001:db8::1]:50080;ok ip6 nexthdr 6 tproxy ip to 192.0.2.1;fail -meta l4proto 17 tproxy ip to :50080;fail -meta l4proto 17 tproxy ip6 to :50080;fail +meta l4proto 17 tproxy ip to :50080;ok +meta l4proto 17 tproxy ip6 to :50080;ok meta l4proto 17 tproxy to :50080;ok +ip daddr 0.0.0.0/0 meta l4proto tcp tproxy ip to :2000;ok -- cgit v1.2.3