]> git.ipfire.org Git - thirdparty/nftables.git/commit
proto: permit icmp-in-ipv6 and icmpv6-in-ipv4
authorFlorian Westphal <fw@strlen.de>
Wed, 28 Mar 2018 08:38:06 +0000 (10:38 +0200)
committerFlorian Westphal <fw@strlen.de>
Wed, 28 Mar 2018 09:24:23 +0000 (11:24 +0200)
commit1e173590ef999f110f90112573f5c590088165b0
tree407c9628114593fc8599d7e3c4cecad3814079a6
parent126706c23c0458b07d54550dc27561b30f8a43f2
proto: permit icmp-in-ipv6 and icmpv6-in-ipv4

Jozsef points out that
 meta l4proto icmp icmp type destination-unreachable

is hard to read.  So, lets just add icmp/icmpv6 to
ip/ip6 protocol base so users can just go with

 icmp type destination-unreachable

and let nft fill in needed dependency.
After this patch, the recent patch to not remove the
dependency can be reverted again.

Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
src/proto.c
tests/py/ip/meta.t
tests/py/ip/meta.t.payload
tests/py/ip6/meta.t
tests/py/ip6/meta.t.payload [new file with mode: 0644]