]> git.ipfire.org Git - thirdparty/iptables.git/commit
projects / thirdparty / iptables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d45fb0a) | patch
xlate: libip6t_mh: Fix and simplify plain '-m mh' match
authorPhil Sutter <phil@nwl.cc>
Tue, 5 Mar 2024 16:02:56 +0000 (17:02 +0100)
committerPhil Sutter <phil@nwl.cc>
Tue, 9 Apr 2024 21:20:36 +0000 (23:20 +0200)
commit400fb98dde882da4c1d2c763de3f16a8ba1484b4
tree9d08fa18405d6f86501a2cb6f2d491929100210dtree | snapshot
parentd45fb0a4077304a7e3f2c44bbac1bde3a9b49a77commit | diff
xlate: libip6t_mh: Fix and simplify plain '-m mh' match

Since core xlate code now ignores '-p mh' if an mh extension is also
present in the rule, mh extension has to emit the l4proto match itself.
Therefore emit the exthdr match irrespective of '-p' argument value just
like other IPv6 extension header matches do.

Fixes: 83f60fb37d594 ("extensions: mh: Save/xlate inverted full ranges")
Signed-off-by: Phil Sutter <phil@nwl.cc>
extensions/libip6t_mh.c diff | blob | blame | history
extensions/libip6t_mh.txlate diff | blob | blame | history
Mirror of git://git.netfilter.org/iptables