]> git.ipfire.org Git - thirdparty/iptables.git/commit
don't allow to specify protocol of IPv6 extension header (Yasuyuki Kozakai)
authorYasuyuki KOZAKAI <yasuyuki.kozakai@toshiba.co.jp>
Wed, 29 Mar 2006 09:24:43 +0000 (09:24 +0000)
committerPatrick McHardy <kaber@trash.net>
Wed, 29 Mar 2006 09:24:43 +0000 (09:24 +0000)
commit78716a9a8c039b18e2f8e476b2a4c76ec17437b2
treef87f98043460eb27f317796da9fa7c6c4065d167
parenta258ad7002ae4b4f366800f512db938fb78d0661
don't allow to specify protocol of IPv6 extension header (Yasuyuki Kozakai)

Sometimes I hear that people do 'ip6tables -p ah ...' which never matches
any packet. IPv6 extension headers except of ESP are skipped and invalid
as argument of '-p'. Then I propose that ip6tables exits with error in such
case.
ip6tables.c